Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1191e84d-0495-37a3-bdea-3b3a92843f84.roa
File:                     1191e84d-0495-37a3-bdea-3b3a92843f84.roa (raw, json)
Hash identifier:          uulrkGedKu0BactZIgd/PvLQimTkf2oduKrWrdFSUxk=
Subject key identifier:   39:27:F8:73:B9:2D:64:A6:1C:00:5F:9F:6E:8E:E8:61:BA:CF:3F:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD6B74AB02B5F3FE98F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1191e84d-0495-37a3-bdea-3b3a92843f84.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:6b:74:ab:02:b5:f3:fe:98:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=839585d1-fe9a-4cf4-80a0-8e20bdc425f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:ef:77:48:3d:1c:b3:f6:db:6b:36:28:dd:
                    5b:b9:89:5a:0f:6c:d1:2e:af:e1:1d:f8:0d:b0:ff:
                    e4:26:3d:2c:b6:4e:a5:07:22:ea:73:73:2f:2c:2e:
                    90:0c:de:d1:24:4c:39:5b:fc:01:e7:43:4a:89:5c:
                    80:31:18:2b:0d:24:a6:d3:f2:6a:9c:9b:f9:9b:6d:
                    ec:bb:30:74:f5:06:88:b9:7c:60:25:c5:4d:5e:96:
                    f5:62:0a:ca:4d:5a:ad:3f:bd:91:d6:cc:71:ee:37:
                    5b:4c:c7:50:e9:17:ef:48:d1:32:f5:9a:84:0c:ec:
                    fc:91:4a:2a:6d:e1:1e:5c:bc:59:85:c2:2f:e0:49:
                    f1:11:2a:5f:b3:78:ff:dc:32:c6:99:9e:78:90:4b:
                    00:20:6e:15:1a:e3:b5:f0:8f:cd:42:5d:91:fe:09:
                    0c:f9:0e:c3:b8:bd:62:4a:07:32:74:b3:af:87:a2:
                    59:a2:1d:a5:3b:a5:f2:d1:b9:1e:c5:37:0a:8a:b8:
                    42:5a:83:62:9c:e7:e4:9a:3f:62:fb:e5:90:dd:e8:
                    ce:eb:23:af:28:f2:de:b7:7f:c6:31:82:37:3d:41:
                    95:2f:8a:cc:30:4c:9a:07:ab:8a:56:9b:b3:ad:73:
                    a5:0b:e1:ee:a5:5f:18:84:73:8c:2e:f6:ac:ff:b5:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:27:F8:73:B9:2D:64:A6:1C:00:5F:9F:6E:8E:E8:61:BA:CF:3F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1191e84d-0495-37a3-bdea-3b3a92843f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.59.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:08:9f:af:45:3b:33:27:43:5a:84:79:c0:22:a2:89:8c:a0:
         39:b6:5b:30:01:a3:5b:b5:7d:ba:42:b6:94:a8:a3:e1:76:c5:
         d3:77:c3:d9:01:b9:e3:43:d4:77:ff:8a:8a:6e:b4:f2:8b:f4:
         f3:a7:b0:16:c9:8f:fd:e0:05:23:1d:49:01:9a:08:ba:f7:9a:
         e0:24:4c:24:b8:2b:ad:29:c5:df:8e:8e:42:76:71:6a:64:7f:
         3b:93:a2:ff:83:62:47:10:0c:c3:62:84:d3:eb:55:04:8b:f6:
         43:fa:98:80:e3:f4:75:91:d3:f5:87:aa:0d:a6:dc:c1:4b:01:
         5e:26:f2:06:e9:01:41:31:9c:54:b1:5a:58:ab:08:b8:62:90:
         e8:66:6d:d0:a4:d6:c2:cd:f7:b0:34:69:9b:a0:bb:13:d2:61:
         df:0c:48:7d:0d:a2:fa:b8:9a:25:46:73:ab:32:f4:a2:d2:66:
         4e:73:5e:54:fd:d5:2e:d5:03:4f:93:85:2a:6b:3b:86:8b:c6:
         e0:e8:c2:84:cc:4e:ce:02:ca:bf:51:28:5c:46:c9:b7:f3:58:
         50:d3:d3:08:40:16:60:8e:b6:67:cd:62:5d:dc:67:1b:00:a8:
         3c:b2:38:eb:c3:42:49:c5:3b:59:43:e6:c1:17:d8:1e:0b:05:
         6b:b8:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:55 2025 by rpki-client