Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4214b4d5-9466-3aca-adcc-1ea1d496af87.roa
File:                     4214b4d5-9466-3aca-adcc-1ea1d496af87.roa (raw, json)
Hash identifier:          C92iRd8V2VofhxdTg35GIXCQBbvI3mqMdp3iaW1KKRE=
Subject key identifier:   77:D9:86:59:43:15:43:17:9B:79:24:C1:E9:4A:C4:F7:71:4A:5A:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0315A79885220D64E766A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4214b4d5-9466-3aca-adcc-1ea1d496af87.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.207.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:5a:79:88:52:20:d6:4e:76:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=eb2cebfb-3712-4d00-9e79-84ef185477ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:88:df:a7:d2:4a:89:05:6d:e0:f1:c1:8d:
                    bb:98:eb:4c:66:92:1b:11:e9:ab:cb:3b:a1:6e:38:
                    86:f7:19:43:45:7c:3d:fc:e8:64:84:d5:22:84:2f:
                    4e:9c:a0:c8:54:19:fc:0f:e6:6e:8e:e8:4f:53:e6:
                    3f:c3:9f:fe:d4:05:90:c4:32:9a:f1:85:fa:c2:22:
                    f2:71:a7:2a:bd:50:f0:f7:ff:b3:4d:15:20:23:77:
                    3b:40:f2:f8:03:bc:2e:7f:7e:2a:c8:ce:98:5b:ab:
                    87:19:f1:fc:5d:62:06:31:f2:87:b0:44:68:a0:c6:
                    10:68:d4:c8:d5:79:17:c3:50:38:ab:85:21:d8:98:
                    7b:a2:52:02:d1:d5:49:df:2e:e0:9f:a5:9b:b3:83:
                    7b:a3:20:35:fb:4f:73:34:ca:d3:9a:27:c4:74:58:
                    bb:df:bf:5d:e1:79:5a:3f:d2:3b:35:d2:61:06:e7:
                    b8:f5:5b:fd:b9:54:c1:0a:ac:0c:96:44:63:1d:f7:
                    ea:3d:1d:72:d0:79:f8:83:b7:3f:1d:ba:5a:eb:e9:
                    d9:46:56:d5:43:78:7d:8e:2f:7c:c1:d3:b3:e4:d2:
                    92:53:48:02:a7:74:d9:bf:74:8f:70:23:e8:70:85:
                    b5:06:b8:02:92:56:62:26:d7:25:47:e2:35:e9:29:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:86:59:43:15:43:17:9B:79:24:C1:E9:4A:C4:F7:71:4A:5A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4214b4d5-9466-3aca-adcc-1ea1d496af87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:df:09:e0:52:fa:b8:53:96:18:b7:08:8a:c3:c8:1d:ff:84:
         af:e2:7f:c8:e6:d7:bd:f2:df:11:81:08:1b:b2:25:9e:3a:91:
         bf:32:dd:8e:85:4b:9e:9b:a3:07:11:f7:1b:18:d3:76:41:6b:
         2b:06:ae:2e:ec:14:08:8e:c3:30:2f:17:24:ec:19:3e:97:fd:
         63:08:89:c3:88:97:a6:c2:f1:a4:fe:f5:0c:95:f7:49:b9:f8:
         23:fc:f3:29:f7:34:b2:b5:7d:0c:dc:1e:9b:e0:4f:3e:d6:5a:
         5f:e6:ec:96:83:42:b5:79:cf:14:d3:46:f0:72:59:25:f3:ee:
         be:f8:e8:16:08:18:11:77:39:67:fd:19:fd:5c:63:96:ee:64:
         f1:0c:74:dc:bd:58:0a:07:25:b3:51:c4:06:cb:e2:44:45:f5:
         e1:08:76:1e:33:26:58:0c:6f:79:1f:ca:ec:6c:d6:5a:56:2a:
         be:e9:2a:71:bb:c8:de:71:e3:eb:be:f6:1e:81:61:28:82:03:
         fc:43:ba:99:9e:d8:bd:31:46:b6:93:70:10:f9:a3:8c:25:2b:
         fe:ee:bf:dc:34:6b:7d:49:05:d2:b7:78:40:04:1a:42:a5:d6:
         96:e0:a3:6b:5e:a3:35:a6:38:e4:a5:17:64:17:af:72:8b:16:
         9c:a3:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:22:30 2025 by rpki-client