Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa
File:                     5ce21289-0bfa-3862-b92c-aece00658f99.roa (raw, json)
Hash identifier:          JRVPUZyKIAKdFEw3BIsM0B2gU89pSufXCwTfEOMCLc8=
Subject key identifier:   F0:84:59:07:6A:2D:AD:20:22:9A:A8:A5:E0:F9:32:BE:B4:87:52:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC5232699591BBF89DBE170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.170.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:23:26:99:59:1b:bf:89:db:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=df50d676-d78a-44a2-b7c1-ded4ef3292fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:d5:0a:e8:f1:b4:98:26:9f:90:5c:8a:7a:
                    d0:6b:e6:e6:d3:b7:c2:de:73:c3:25:c1:fe:08:7c:
                    7d:d2:a2:6a:92:ea:d1:fb:ba:b3:89:0b:b2:a7:3d:
                    ba:31:ab:92:71:7e:5a:fb:cf:b8:a8:20:29:92:75:
                    7b:5c:f6:6c:c6:f5:6c:62:8b:a3:02:e4:28:54:da:
                    d7:48:e0:d9:eb:bb:48:7f:ac:49:66:5e:09:5a:2e:
                    a1:3a:ff:09:e6:a5:7d:bb:1d:00:48:5d:c0:22:01:
                    bf:8f:06:cd:da:b6:a0:6a:ae:37:4b:79:9a:d6:da:
                    b3:62:3f:db:12:7f:1a:61:c9:67:07:21:ab:ab:60:
                    98:01:59:45:31:93:b2:72:ae:8d:f0:d9:36:ad:e2:
                    32:1a:7b:3e:0a:8f:dc:b6:fa:6e:81:59:4c:a1:19:
                    f5:f7:90:a7:ce:33:61:da:0b:82:7a:55:32:40:c9:
                    61:7a:5f:03:e2:e7:42:2f:d4:5e:1c:12:99:e0:3d:
                    5b:a7:16:f5:1f:96:4b:37:70:d2:c3:0d:0a:65:64:
                    2c:8a:dc:fe:9c:ee:bd:16:b0:ea:7a:9e:65:10:d8:
                    ee:d5:1b:47:a3:92:f8:ab:ad:13:06:31:63:e1:0a:
                    12:e5:6a:1b:95:a4:81:de:36:ae:50:52:29:92:29:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:59:07:6A:2D:AD:20:22:9A:A8:A5:E0:F9:32:BE:B4:87:52:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.170.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:86:2f:17:d8:19:9f:37:fc:72:db:81:e3:fb:6a:0b:67:74:
         86:d5:c5:a7:4d:bc:fb:93:f8:86:fa:a6:0e:41:d6:89:89:d7:
         82:4b:69:71:9a:02:f1:33:3a:f7:79:7d:ca:26:ec:e4:e7:d5:
         34:49:17:37:e7:0a:57:fe:78:8b:0e:dc:74:a9:11:a5:dd:42:
         54:86:94:36:76:9a:fb:af:be:a5:e1:42:06:61:ab:17:8d:7e:
         27:0a:c6:5d:b0:79:88:47:df:e1:f5:c7:94:7e:07:40:42:fc:
         71:2f:ba:f8:7f:a9:ed:c5:e3:27:b8:1d:be:ad:6a:60:39:72:
         98:c3:1b:b3:33:e8:a7:df:fd:ba:94:70:5c:a1:cf:a7:35:88:
         94:3c:1d:3d:c7:20:e6:f0:0c:98:72:6f:e9:7c:e1:3c:fe:c7:
         7d:3d:ce:16:e1:80:24:0c:d6:76:13:5e:62:bf:a9:c8:49:86:
         fb:50:24:3b:c9:17:4a:b2:36:73:93:1e:dc:82:59:f9:58:4a:
         32:06:55:f1:a1:88:a0:8a:59:76:b9:6e:25:cb:4d:65:0e:57:
         7a:be:ea:09:69:76:6d:43:0f:20:fb:d8:66:b8:9c:43:64:75:
         4a:89:4d:b6:d8:59:dd:88:8e:9d:60:9b:d0:ed:06:fa:1c:00:
         f6:56:33:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSMmmVkbv4nb4XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZGY1MGQ2NzYtZDc4YS00NGEyLWI3YzEtZGVkNGVmMzI5MmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEDVCujxtJgmn5BcinrQa+bm07fC3nPDJcH+
CHx90qJqkurR+7qziQuypz26MauScX5a+8+4qCApknV7XPZsxvVsYoujAuQoVNrX
SODZ67tIf6xJZl4JWi6hOv8J5qV9ux0ASF3AIgG/jwbN2ragaq43S3ma1tqzYj/b
En8aYclnByGrq2CYAVlFMZOycq6N8Nk2reIyGns+Co/ctvpugVlMoRn195CnzjNh
2guCelUyQMlhel8D4udCL9ReHBKZ4D1bpxb1H5ZLN3DSww0KZWQsitz+nO69FrDq
ep5lENju1RtHo5L4q60TBjFj4QoS5WoblaSB3jauUFIpkikfawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCEWQdqLa0gIpqopeD5Mr60h1LRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNlMjEyODktMGJmYS0z
ODYyLWI5MmMtYWVjZTAwNjU4Zjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWGLxfYGZ83/HLbgeP7agtndIbVxadNvPuT+Ib6pg5B1omJ14JLaXGa
AvEzOvd5fcom7OTn1TRJFzfnClf+eIsO3HSpEaXdQlSGlDZ2mvuvvqXhQgZhqxeN
ficKxl2weYhH3+H1x5R+B0BC/HEvuvh/qe3F4ye4Hb6tamA5cpjDG7Mz6Kff/bqU
cFyhz6c1iJQ8HT3HIObwDJhyb+l84Tz+x309zhbhgCQM1nYTXmK/qchJhvtQJDvJ
F0qyNnOTHtyCWflYSjIGVfGhiKCKWXa5biXLTWUOV3q+6glpdm1DDyD72Ga4nENk
dUqJTbbYWd2Ijp1gm9DtBvocAPZWM2k=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:32:52 2025 by rpki-client