Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/261ad36e-e140-32da-b72f-4447a9e2b9df.roa
File:                     261ad36e-e140-32da-b72f-4447a9e2b9df.roa (raw, json)
Hash identifier:          6c7KKyZE6j1F9fQ1924jlME609xRvqYL+0g0XhZvk10=
Subject key identifier:   59:31:24:3E:40:60:1E:B8:CF:16:29:45:0D:48:C2:84:B4:59:11:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1BC8B7D904B5D5942AC78
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/261ad36e-e140-32da-b72f-4447a9e2b9df.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.248.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:bc:8b:7d:90:4b:5d:59:42:ac:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c17b94b2-dc69-4195-8ee3-13f38d1776d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:91:a8:1a:88:bb:1f:51:1f:57:e0:c7:27:
                    e7:e4:92:5a:97:5a:49:4d:df:4f:0a:1d:dd:d1:3b:
                    47:8c:c6:14:61:e2:7f:df:3e:6a:68:d1:54:22:eb:
                    44:20:c1:a1:2a:7f:4f:cd:5d:13:f3:eb:8e:ea:33:
                    b5:65:9d:07:91:9b:08:7b:f0:9a:1a:5d:97:20:27:
                    ad:93:02:6c:e4:36:1f:8f:84:b6:8d:c9:19:a8:2b:
                    44:59:e4:db:28:20:7b:62:9e:73:14:58:98:40:14:
                    16:0e:38:7c:08:30:42:a6:6b:1f:70:d4:66:fb:d9:
                    92:f2:4b:d8:36:fa:b2:5d:8c:be:3b:f5:19:77:48:
                    8f:c2:50:88:0e:90:30:00:f5:ce:30:f9:61:5e:ac:
                    61:28:35:67:06:53:77:57:e0:41:70:14:0b:3d:e2:
                    f6:bc:e1:f2:6d:35:b2:a5:63:fc:cf:a0:03:67:2d:
                    47:03:9e:55:f3:b5:99:5d:06:67:05:b2:13:03:8a:
                    3a:3f:cb:99:d2:5a:9f:c7:e0:be:81:25:c4:05:f8:
                    9b:0d:77:7f:ba:58:97:7e:c9:07:a3:cd:59:75:3d:
                    71:e9:8c:5b:d9:e7:df:5b:e8:db:39:d0:9f:9f:32:
                    d0:e8:b7:02:ed:eb:39:a2:09:87:82:6d:e7:72:6b:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:24:3E:40:60:1E:B8:CF:16:29:45:0D:48:C2:84:B4:59:11:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/261ad36e-e140-32da-b72f-4447a9e2b9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:5b:20:23:6a:18:d0:dd:9e:ce:6c:0a:05:67:7f:5d:2b:f4:
         b5:63:5e:87:94:01:51:1e:28:97:50:5f:c9:0a:c4:ac:28:04:
         b7:42:b2:26:76:74:85:b5:5b:1d:53:17:1a:d3:e2:77:1f:7b:
         3b:bc:de:92:50:94:b5:28:77:c4:ad:46:a6:db:61:44:e0:b9:
         f4:ad:70:a7:b2:ae:b5:69:4c:85:97:4e:63:40:8a:4f:e0:10:
         3b:a2:6f:53:f1:c1:83:85:3e:67:09:fa:fa:a8:55:02:5f:a6:
         66:4e:ff:b7:e1:c8:fe:e2:da:68:51:fd:7c:8d:6a:8e:2c:f9:
         e5:d3:ed:8e:dd:54:5c:42:83:2c:80:68:00:be:34:93:fe:39:
         0d:b3:7d:ca:5f:ba:1d:41:2a:05:40:0c:dd:81:44:ea:a5:0b:
         4e:2a:a2:c0:38:87:f7:3e:18:d9:3d:a3:1f:87:45:71:df:66:
         e5:40:c4:92:ba:3c:80:8d:e9:c9:82:dc:5a:8e:93:fb:97:b5:
         3a:24:5d:11:6d:ae:0a:e0:93:c6:97:36:3b:10:2f:2e:4e:79:
         3a:0c:9b:f1:4b:e5:34:3a:61:12:d9:95:f2:b2:27:0f:95:cb:
         fb:8f:55:b1:13:ac:bf:12:b7:12:f4:7a:15:80:6b:f8:04:be:
         c1:c6:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:03:14 2025 by rpki-client