Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e9fa77-60fa-361f-af7e-d296eeb18e88.roa
File:                     12e9fa77-60fa-361f-af7e-d296eeb18e88.roa (raw, json)
Hash identifier:          sIDfTW1tECygs+2pATTF23dtlxJtpV2hKU81iJmnQCc=
Subject key identifier:   AE:9F:98:A4:86:A8:D3:CF:95:AE:54:C9:12:2F:50:78:CC:C8:D3:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A7229DA110ED42CD134D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e9fa77-60fa-361f-af7e-d296eeb18e88.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        73.103.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:22:9d:a1:10:ed:42:cd:13:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=504cb2de-b4b7-4af5-9609-f0a732d79cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:b1:c6:43:fd:ef:8a:0e:b4:24:27:ee:4a:
                    69:9f:4d:fa:58:34:07:4a:b7:5d:3f:2f:c1:94:30:
                    69:59:82:ff:cf:a4:73:47:ed:7a:ea:f6:a2:56:36:
                    bf:26:6a:2d:f6:2a:3c:c1:dc:68:3f:29:65:9e:cb:
                    4e:eb:2a:b5:30:c4:cf:b6:0d:fb:06:18:da:84:6e:
                    25:9c:88:6a:01:a5:5a:a0:4d:a0:23:2b:04:fc:70:
                    1c:f3:ee:74:a7:3b:71:8e:4c:8b:da:cc:1a:89:41:
                    df:fb:c0:66:91:57:21:1d:59:4e:06:11:96:bf:16:
                    d6:4f:b1:ee:91:0d:a5:46:c9:cd:96:23:4f:66:c0:
                    b1:c2:12:2b:1f:4e:2e:8c:7c:67:f7:12:11:62:15:
                    4d:da:1f:5d:7f:9f:6a:68:0b:62:53:f4:47:b4:0d:
                    4d:1f:e9:11:23:06:d2:40:c8:7b:d4:b3:d4:95:7e:
                    9c:05:83:86:83:83:1a:3f:31:16:14:7a:17:20:98:
                    64:84:7a:0a:40:c0:e6:6d:99:e0:c0:94:50:c6:50:
                    1b:61:ef:34:66:85:f4:56:e8:05:74:e4:dd:56:b2:
                    c1:59:df:8f:d4:ff:d5:a7:6d:71:73:8f:74:04:2c:
                    82:2e:af:1a:64:57:cd:84:bf:c8:43:b2:a9:42:78:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:98:A4:86:A8:D3:CF:95:AE:54:C9:12:2F:50:78:CC:C8:D3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12e9fa77-60fa-361f-af7e-d296eeb18e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.103.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9f:10:b2:7d:a4:b1:b2:97:51:80:b6:b3:81:fb:bc:f4:e9:
         9c:a1:f2:ac:fa:0c:43:e2:b0:6c:0f:27:c0:7a:3e:37:ad:88:
         d1:53:cc:04:df:d8:de:85:9c:4f:24:d9:f7:32:03:a8:38:fb:
         46:03:ef:c1:0c:76:63:f7:db:cc:77:28:f5:ef:ef:13:aa:70:
         9d:14:ef:57:f5:2c:aa:fb:60:1a:e8:41:4d:f7:00:7e:48:a9:
         a4:52:56:cb:ae:81:63:40:be:1a:56:88:7c:53:87:48:22:aa:
         85:8c:4a:e5:6f:7b:36:47:e0:dd:38:6a:70:cc:a5:f3:47:b4:
         0d:7d:16:60:35:cc:a5:b3:28:42:b9:a8:de:35:6d:ea:49:ef:
         17:77:4d:55:c2:f2:81:21:b5:16:ec:6e:0f:25:f5:e0:98:74:
         a6:56:ce:aa:2a:54:81:85:39:10:35:a5:ab:6f:fe:10:6b:f4:
         37:44:d3:a9:c6:c6:c4:f6:ef:ee:5d:9c:57:8d:e6:00:71:89:
         36:0e:78:1e:c7:32:e2:23:bc:36:cd:c3:7a:ca:c6:68:27:68:
         e5:1e:69:05:f8:52:63:f9:35:36:1e:12:87:47:78:b6:b0:04:
         4f:40:70:e8:8c:cc:00:54:65:6d:4d:3e:29:57:15:f2:91:5e:
         50:48:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:07 2025 by rpki-client