Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66ce0ac3-1a02-3eb2-8b8b-dca6cf83c978.roa
File:                     66ce0ac3-1a02-3eb2-8b8b-dca6cf83c978.roa (raw, json)
Hash identifier:          N22SbVxjtznpFa667E/7W+peeFpg7Q/Bm4IIszZ2JEM=
Subject key identifier:   D9:AE:26:93:D3:87:CD:A3:3F:E7:EF:22:CF:6E:6B:DC:68:4C:35:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC54527A972C13A8A848EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66ce0ac3-1a02-3eb2-8b8b-dca6cf83c978.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.70.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:45:27:a9:72:c1:3a:8a:84:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=809d4a03-af9b-4718-9ca9-668d73c9fd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:b2:f5:ce:aa:53:bd:79:61:b8:79:e6:f8:
                    64:7c:79:40:a2:d3:89:6d:13:88:77:e4:4f:9f:c2:
                    f1:44:8c:90:f2:b1:bd:4a:cf:50:43:54:14:3d:e5:
                    63:0f:4a:eb:d2:bc:39:a0:ab:55:b2:21:63:90:e2:
                    fc:29:e8:1e:95:8e:5b:a4:48:25:c5:95:5a:0c:84:
                    fb:57:6a:ac:70:74:ee:15:f3:c8:ab:32:fb:ab:9f:
                    f7:26:ed:b5:be:9e:a0:1d:2e:61:af:28:42:29:e4:
                    73:96:fc:7c:a4:eb:4f:a6:62:6d:83:74:05:10:ea:
                    6e:ad:a0:d1:80:2b:4b:14:2e:65:ac:90:7f:4c:70:
                    74:d2:fb:b9:e6:1b:a4:e1:76:d9:79:a5:82:24:6d:
                    76:1b:37:fd:0b:9b:7a:fe:d9:8f:fa:9c:62:d3:10:
                    c5:a9:50:29:cd:73:4d:2d:57:ef:82:3d:fd:9e:9a:
                    d3:c5:da:75:3a:02:b1:77:ae:3a:83:58:c5:dd:23:
                    29:11:8f:74:ad:fe:b0:77:76:62:73:bb:62:8a:25:
                    b6:c1:c4:ff:7f:83:e5:0d:89:03:34:ca:53:5b:d2:
                    51:04:19:e8:65:5d:51:43:b6:d9:2e:8c:41:0a:b6:
                    78:09:53:d7:69:b1:ee:e0:2f:77:a5:58:f7:e5:6f:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AE:26:93:D3:87:CD:A3:3F:E7:EF:22:CF:6E:6B:DC:68:4C:35:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66ce0ac3-1a02-3eb2-8b8b-dca6cf83c978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:83:46:a2:ef:40:fd:65:eb:8f:71:de:79:4b:9f:13:84:
         fb:6d:06:d7:10:fa:c9:24:13:a5:64:12:cb:76:64:1b:a9:59:
         fb:6f:4f:f6:59:2a:76:69:7e:27:41:dc:db:06:d9:bc:16:1c:
         ee:cd:33:28:db:f8:74:62:d7:27:68:d9:ac:10:69:92:4a:43:
         13:d5:a8:c1:a8:6c:3c:11:e6:35:ce:7a:4c:c9:ad:ba:c1:73:
         9c:3d:f5:89:54:ee:a7:a8:e3:fe:9d:af:3a:7c:1e:63:73:c0:
         fd:1e:7d:9c:66:02:63:6c:40:47:fd:7c:5c:7c:4e:71:95:f9:
         c5:54:bc:7b:73:8e:21:40:70:7f:8a:6b:51:53:89:2f:3d:15:
         e2:cf:55:23:a4:e4:18:19:39:f2:a1:02:01:b0:d9:4a:97:07:
         a4:58:cf:7d:0e:79:57:44:81:f2:e5:fe:fc:d7:ba:47:23:df:
         44:f7:53:ca:e4:eb:ef:80:95:59:67:f1:fe:af:48:ff:ad:b4:
         5b:dd:b5:6a:8d:9a:27:74:a0:4a:d5:ab:25:9b:b2:43:2e:65:
         1c:fe:bb:b8:7b:39:d8:5a:86:f1:36:0b:13:84:ad:af:12:ae:
         3a:d7:d7:95:95:ed:8a:c5:c3:de:0b:91:e4:b5:db:46:ea:09:
         b6:ee:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:41 2025 by rpki-client