Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d809cdf-3dbd-34d1-83eb-d9551f31c7b1.roa
File:                     1d809cdf-3dbd-34d1-83eb-d9551f31c7b1.roa (raw, json)
Hash identifier:          Hm8DrUNz8cLny3R9qjT6NkwgBy0XhhwlMg8J1xhpIhA=
Subject key identifier:   F6:CE:7D:E5:67:7E:C8:1D:61:9C:3D:38:60:40:B9:64:52:6D:1E:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC29F5B71E33742920D8800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d809cdf-3dbd-34d1-83eb-d9551f31c7b1.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.8.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:9f:5b:71:e3:37:42:92:0d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=4443a2a2-da78-400b-91c2-a649bb09a101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:8c:96:ba:17:8e:56:55:24:ca:b6:a9:09:
                    c8:96:f2:74:a8:99:ea:85:e2:c1:e3:49:3b:48:82:
                    9a:87:cb:fa:e6:fd:73:69:2f:fd:4b:9e:55:ff:85:
                    d0:15:fd:f8:75:b3:4d:45:c7:05:a3:db:61:8f:30:
                    51:69:bd:91:12:99:e5:bd:b6:32:f7:85:cb:36:a5:
                    99:91:35:c3:12:d2:06:b6:29:57:47:b2:f7:94:11:
                    d4:7f:36:1d:31:da:ab:43:6d:0f:0d:3a:23:d7:c2:
                    a6:96:1b:41:72:88:2f:8a:d4:d1:db:21:1a:f0:74:
                    59:62:b9:eb:02:9a:ae:6e:7a:68:c4:2d:12:1d:32:
                    5d:78:4a:28:00:7e:64:3f:97:b6:ae:ac:cc:0a:24:
                    82:fb:0f:54:73:35:a5:a0:76:7a:64:01:7e:0d:53:
                    40:db:e8:9f:4f:cd:b5:2f:07:fa:ea:de:91:07:d9:
                    ff:17:5d:cf:2d:7e:39:83:f7:24:0b:58:2e:cd:68:
                    39:1f:e8:8e:ac:9e:9e:6d:24:5a:8e:46:49:45:2e:
                    21:60:d5:b2:09:4d:42:fc:59:06:6b:98:fd:e4:d9:
                    e5:de:f4:b7:08:3a:a5:55:4a:c9:02:c6:b6:cd:d3:
                    fd:93:1f:1b:7e:b5:16:78:dd:7e:a6:48:a3:f6:41:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:7D:E5:67:7E:C8:1D:61:9C:3D:38:60:40:B9:64:52:6D:1E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d809cdf-3dbd-34d1-83eb-d9551f31c7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:05:66:32:35:7a:1e:57:5f:84:c7:da:dd:d7:40:d5:30:6e:
         84:bf:3b:a4:e5:4d:52:97:fc:55:e0:0d:18:2e:86:8c:81:e8:
         c3:7c:6b:54:9b:be:ca:d1:95:81:62:09:2e:26:f8:2f:2c:9c:
         f2:31:85:27:12:aa:9a:8a:9f:77:11:28:25:bd:b1:db:35:a3:
         9d:9c:44:ac:c2:3c:e1:b7:35:b5:bc:47:86:df:f5:eb:42:f6:
         71:9b:a9:e8:8b:fe:86:5c:83:48:5c:20:4c:b6:7d:f2:10:7a:
         96:a8:10:ca:8a:1e:20:75:cb:8c:0c:f9:24:52:41:37:7e:26:
         5d:85:b0:84:be:6a:4e:90:c5:43:f7:c4:af:ce:89:e2:18:83:
         c3:31:97:a9:9a:5a:54:40:e8:23:a2:47:26:70:df:4d:a8:bf:
         5e:2e:4d:07:cc:2c:2e:15:e1:76:ee:8f:15:7a:f9:b1:f3:df:
         d7:a6:4c:5d:82:99:e4:4a:51:ee:b0:53:a9:14:8f:a4:eb:8c:
         df:79:51:9f:2b:df:5a:7a:ea:fe:06:b9:44:f2:8a:48:12:eb:
         cf:b8:ad:12:ec:6e:4d:c4:f0:d0:16:71:fa:d8:64:1a:26:36:
         05:ce:03:cf:fc:c4:35:f7:a6:d6:5e:2d:35:b3:ea:04:1a:fb:
         de:b7:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:47 2025 by rpki-client