Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c29054e-389c-3324-bb03-2b8e60d227ca.roa
File:                     1c29054e-389c-3324-bb03-2b8e60d227ca.roa (raw, json)
Hash identifier:          QgWt9R3lUZJOleK/tV429qm/QFVBKizMnhMjqdDEeOI=
Subject key identifier:   00:3F:CC:C9:9D:0C:E4:01:65:18:0C:9E:3D:39:AF:0E:BE:C4:CA:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0318E5593F3959195FA5B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c29054e-389c-3324-bb03-2b8e60d227ca.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     33659
IP address blocks:        73.10.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:8e:55:93:f3:95:91:95:fa:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=2f0a6656-0db4-4f03-9214-0d6edf3cd1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:46:71:92:31:4a:f0:2a:37:eb:c7:aa:8f:
                    15:1c:31:05:0e:f8:c4:ad:19:e6:f9:07:c2:a9:f5:
                    3f:44:0d:b2:06:0a:c5:2a:fa:51:39:84:49:e1:16:
                    43:e8:a6:e4:4f:27:38:8b:31:27:0f:1d:b2:70:fc:
                    d4:e7:df:ae:53:51:2b:e9:bf:6c:67:06:c1:f1:b1:
                    2f:ed:11:db:f1:ae:63:5c:e8:c3:6e:7a:95:66:94:
                    b1:46:e6:c9:25:a9:03:df:45:66:bd:ef:db:a3:86:
                    17:a5:7d:a5:b6:49:d9:0e:6b:7b:f7:40:69:7c:21:
                    5a:4d:67:04:8b:63:23:79:01:1b:4e:fb:c3:cc:01:
                    4a:1f:e0:3f:b1:1e:a8:1a:40:59:eb:49:78:22:e6:
                    99:5b:bf:76:36:42:cb:68:76:9b:1f:17:a5:d2:8d:
                    73:75:60:a5:d9:d4:2d:be:58:47:88:de:d3:ac:59:
                    82:f5:e1:34:11:7a:5c:90:66:b8:78:4c:e8:da:50:
                    b7:e9:af:01:ef:09:d3:5d:b0:41:0b:0e:e1:43:53:
                    d1:89:d1:9d:ec:00:88:c8:28:88:49:f9:bf:6e:ca:
                    45:40:e2:16:d6:3b:8c:86:67:a8:83:c7:fb:39:58:
                    69:cf:a4:c6:0e:d7:2c:39:60:64:75:91:2a:37:f4:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3F:CC:C9:9D:0C:E4:01:65:18:0C:9E:3D:39:AF:0E:BE:C4:CA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c29054e-389c-3324-bb03-2b8e60d227ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:f5:a2:c3:4e:2c:95:1d:9c:64:f7:0e:10:f9:e4:07:33:
         48:42:ab:59:41:19:03:d7:21:37:b0:06:85:4d:b4:78:53:f1:
         2f:18:87:b6:b2:12:05:37:07:9e:be:43:e5:69:3a:2d:19:35:
         05:00:38:e3:81:ba:aa:dd:ad:29:7d:da:00:ec:f7:ef:68:03:
         c1:a8:76:7c:82:d7:09:72:0f:92:b6:72:16:34:2d:95:e2:f9:
         ef:3c:a2:bc:d7:69:25:0f:3a:26:b8:e6:47:74:ca:49:c1:68:
         8c:62:ae:04:b1:8c:d2:51:c4:bd:f4:27:9c:f8:78:7d:9e:f5:
         76:9f:35:c1:6b:44:55:86:5c:ca:3e:74:6f:9c:a1:8a:c6:77:
         e0:fb:fb:47:21:18:bd:c3:3e:7e:31:fd:d5:d5:cb:0e:4f:65:
         d0:1c:b0:c9:37:90:c7:6b:b7:e2:b9:a0:1f:e6:07:d9:5d:af:
         95:ad:bd:fe:ef:7c:26:0b:a7:35:5d:5d:35:aa:fe:f0:9a:ec:
         45:ee:f4:03:59:eb:90:d5:34:2d:99:7a:91:1c:f9:69:4f:d8:
         1a:15:98:9d:b3:d8:ad:54:04:6f:2f:c2:6b:70:7f:67:b0:80:
         31:fe:72:ac:bb:9d:17:3d:c1:92:cc:52:75:43:95:12:f6:28:
         d1:5e:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:23:36 2025 by rpki-client