Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ccd7cea-05c9-3c17-ac75-9978ecce7639.roa
File:                     2ccd7cea-05c9-3c17-ac75-9978ecce7639.roa (raw, json)
Hash identifier:          1Lc0qg90RUnqU19iaLsSFg7yNtPl/cDpyufOD25Txv0=
Subject key identifier:   74:5C:74:B7:C0:E2:FC:EE:27:A7:3F:AA:FA:F4:3B:67:92:E4:04:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAB16D27320AAFCFA240C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ccd7cea-05c9-3c17-ac75-9978ecce7639.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.206.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:b1:6d:27:32:0a:af:cf:a2:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=f10533f7-8952-4cc7-8ef8-1ce05ab33b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:2c:08:7b:8e:62:db:89:ba:0f:00:5d:e6:
                    e4:28:bc:26:64:14:ea:57:59:fc:b6:d7:b1:7b:be:
                    a0:2b:0a:dd:e9:f0:ba:a2:fc:b5:e0:6b:8a:64:9f:
                    57:fa:a8:87:83:c9:7e:9d:75:77:35:e7:12:ff:b6:
                    0b:e7:d1:ce:ef:58:0c:32:a3:a6:25:f1:da:70:ec:
                    84:00:4f:08:3e:cd:f1:bd:b8:5e:9e:22:23:41:2b:
                    f5:8d:ee:af:70:9f:7a:9e:bc:c6:04:6d:34:4e:99:
                    a1:fc:38:5b:e1:44:49:0b:e7:ec:b9:d4:2d:36:09:
                    a8:1b:f2:fc:2c:70:fa:b3:43:0d:07:f2:ef:70:56:
                    54:c4:a5:13:29:40:52:04:fb:b8:71:54:20:78:48:
                    1e:68:5a:0b:64:7e:06:b9:ca:19:a4:42:34:d2:8d:
                    e0:46:0f:7c:f3:89:fd:d2:a7:1b:dc:15:c2:32:17:
                    e8:9c:96:8e:3c:a8:1b:ac:b8:43:e6:32:52:24:cf:
                    12:2b:5d:d7:8f:7c:c0:bd:0d:14:79:b8:1f:99:54:
                    d6:63:51:df:f9:1b:2a:32:0f:5a:f5:fd:9e:8f:e6:
                    36:1a:ed:5e:48:1e:20:e9:aa:cb:69:92:7a:89:8c:
                    d9:ee:72:a1:13:45:64:1f:67:bd:17:2c:9d:ba:71:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5C:74:B7:C0:E2:FC:EE:27:A7:3F:AA:FA:F4:3B:67:92:E4:04:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ccd7cea-05c9-3c17-ac75-9978ecce7639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:67:98:02:74:1f:06:73:53:e0:55:3e:1e:81:a2:6e:9e:
         2f:c2:e1:90:dd:ab:c9:6e:0d:03:b4:af:93:5b:2c:5e:b0:0d:
         c8:e6:5a:4a:ba:d3:3c:59:17:b3:30:ca:d6:bc:9a:64:34:fa:
         26:da:b1:73:aa:ea:4f:cb:45:50:53:d5:68:f2:2b:23:be:b8:
         41:53:3a:62:36:9a:9c:52:a0:ff:39:c1:68:da:3b:64:49:17:
         4a:f3:86:58:d2:ac:6d:9a:f8:d1:6a:a1:a9:dc:73:4b:fc:39:
         bb:a2:8f:03:f1:5b:9d:10:c6:bb:62:18:c1:70:a9:1a:af:47:
         e0:c8:8b:45:ae:45:02:7f:23:eb:67:68:69:e7:40:15:db:23:
         bf:48:52:43:b3:d5:b4:88:39:07:3e:1b:15:18:bd:5a:1b:83:
         6f:60:14:12:fb:9a:c2:eb:31:61:fb:e4:c0:0a:5c:ed:c4:43:
         1a:b3:cf:45:3b:94:0a:27:d3:cc:2f:19:6d:a9:b6:68:c9:59:
         ee:9e:8e:59:02:ce:6a:df:8a:dc:f8:f4:0c:5d:e7:c3:c2:52:
         33:28:20:0f:ee:14:3d:01:46:a8:ce:3a:fa:b2:c0:fe:c6:d2:
         f6:6c:c9:23:47:a5:e1:7b:dd:c0:86:39:64:c8:09:0a:e0:b6:
         9b:a7:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:55 2025 by rpki-client