Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50615fa7-a099-3d0b-a560-0e4a9451fca8.roa
File:                     50615fa7-a099-3d0b-a560-0e4a9451fca8.roa (raw, json)
Hash identifier:          dJHDQmiGUgRpKnkhDNMhCcEczy0Lfz9KhECqGK0ZDtw=
Subject key identifier:   45:14:AF:AC:0E:31:E6:75:00:40:2D:80:A9:D0:F5:A8:97:B2:A6:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC48796C45FEEEF848839D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50615fa7-a099-3d0b-a560-0e4a9451fca8.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.246.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:87:96:c4:5f:ee:ef:84:88:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=973d97fb-3179-40c9-b5d4-b9cdce29ffb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:07:fc:86:60:f2:5a:e6:df:44:e2:63:c9:
                    74:b3:f3:a3:5c:a4:64:fe:03:cb:8b:79:90:85:ef:
                    e6:e2:e4:28:6a:b8:49:c8:29:cd:3f:65:97:58:71:
                    d6:b9:5e:82:c5:a0:68:49:30:be:aa:74:4b:d7:fb:
                    94:f9:ba:70:aa:46:b1:1e:e3:9a:f6:5d:62:0e:90:
                    65:41:41:52:98:cc:23:d7:7a:0a:9b:bb:43:db:c4:
                    89:db:cd:db:18:9e:db:6e:52:21:86:3c:e1:e7:6a:
                    24:14:4a:2d:56:2f:b5:8a:00:81:af:40:9b:cc:2e:
                    30:4a:88:e2:8d:0a:33:a7:9d:7e:75:72:45:0f:a1:
                    53:63:06:b5:99:d4:dd:d8:72:02:d3:cf:5b:3d:f1:
                    dd:ef:78:95:0e:8d:23:e0:ba:22:9a:c1:7e:47:c2:
                    75:1c:f6:40:1d:e8:6e:49:af:ea:3e:57:ed:f8:9b:
                    1c:75:62:9d:9d:67:cc:42:6f:30:ea:ff:b9:83:f1:
                    a3:da:17:95:f8:70:fb:d4:14:40:03:83:04:48:d9:
                    d4:e3:44:b1:f2:4f:34:80:c1:f2:54:16:55:da:fa:
                    84:56:88:e9:b9:05:49:e7:c8:50:c0:51:db:1e:43:
                    2f:f8:67:2a:8d:e9:8d:53:d1:9b:a4:f2:94:7f:bd:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:AF:AC:0E:31:E6:75:00:40:2D:80:A9:D0:F5:A8:97:B2:A6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50615fa7-a099-3d0b-a560-0e4a9451fca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:42:b4:1b:04:17:c2:88:ed:07:c2:12:7f:c1:7b:96:69:aa:
         8a:97:ee:cb:6b:81:fe:13:ac:4a:2b:fa:5a:58:39:a7:7d:e9:
         c8:17:34:e7:05:52:52:d0:86:ac:81:84:e5:11:4e:8b:84:47:
         b1:13:f1:56:56:5c:47:33:96:f9:01:c0:79:0a:4c:18:bd:8f:
         a2:a6:11:e0:e3:53:c1:76:bb:30:b6:0e:3f:13:35:02:94:dd:
         d4:fc:3e:e9:44:81:6d:c4:db:55:e4:76:c5:97:ce:d3:4b:a8:
         69:ef:10:9f:23:fc:c1:7f:b9:67:05:de:c0:ff:cd:5d:f9:c3:
         9f:9e:bd:0c:42:2f:54:e7:ac:c5:32:cc:5a:1f:cd:57:c0:db:
         ca:47:bb:73:00:56:e2:54:ec:b3:93:d0:23:da:b3:49:2f:7e:
         ea:06:3a:57:0e:09:5e:38:0c:80:d4:07:36:55:8b:9f:ae:b3:
         a5:15:10:b9:c9:e9:9a:fc:79:1c:4f:64:cb:38:37:5e:c8:3b:
         66:3d:92:6b:15:25:7b:90:37:16:35:7a:31:c2:3a:c0:4c:60:
         b3:bd:de:ca:79:fe:95:ad:37:a0:f6:0d:60:af:13:21:07:8b:
         73:9d:31:2a:9c:2f:55:ab:fb:2e:c2:4e:42:e1:79:46:c2:60:
         e5:ed:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:08:37 2025 by rpki-client