Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821c1d5a-31b9-3a75-a1f9-9ac1a211ecbb.roa
File:                     821c1d5a-31b9-3a75-a1f9-9ac1a211ecbb.roa (raw, json)
Hash identifier:          oL/whsc2YepX3+NaPZtG/TWKguLxphFhnBezX38mF9Y=
Subject key identifier:   CE:AD:DC:15:B2:86:09:48:DD:58:C4:F2:9C:E8:54:BF:0B:94:32:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031E5B8F85A39C91080AEA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821c1d5a-31b9-3a75-a1f9-9ac1a211ecbb.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.82.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:e5:b8:f8:5a:39:c9:10:80:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=8711aff6-1c77-4ab7-b6aa-6eca310d48fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:da:45:b6:c3:e6:2c:d6:15:76:2d:ca:14:
                    60:4d:44:c4:63:19:e8:25:c6:68:97:9f:a1:64:56:
                    0e:56:29:2e:eb:fc:b0:eb:a5:da:e4:6f:45:6b:dd:
                    e1:d9:5e:58:65:bd:b0:59:8c:87:ee:3c:dc:8f:97:
                    b9:4e:f4:9d:f7:a5:97:71:f4:18:f3:69:c0:38:65:
                    ed:d9:97:52:1f:27:ef:c7:53:ee:8f:eb:aa:ee:94:
                    1c:52:e2:8c:79:cc:a0:45:d9:71:d1:07:b7:93:97:
                    58:76:3f:72:3a:be:11:d9:b2:1e:d7:c8:6a:86:cf:
                    16:7e:90:4d:14:4f:b3:4a:17:95:3b:9a:57:a1:74:
                    43:f5:4d:6b:cb:5f:ae:44:b8:f8:fa:dd:12:53:02:
                    ed:eb:f5:b4:d2:f7:32:31:da:cc:00:87:c3:d2:df:
                    a1:29:a4:3d:54:06:c7:6f:ea:4a:b6:cc:3c:a2:55:
                    91:fe:d3:61:c0:67:33:9b:ac:8b:fe:13:83:4d:66:
                    85:07:39:35:44:f1:f9:5b:b9:72:d5:6a:72:e3:ba:
                    20:36:8b:c4:d4:34:85:b9:ff:1c:f5:2e:84:ff:f2:
                    92:f3:85:12:36:3d:00:a3:ad:2c:4b:c2:06:36:4b:
                    32:46:6f:f8:86:04:b0:80:50:5c:c9:d3:ce:72:a8:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:DC:15:B2:86:09:48:DD:58:C4:F2:9C:E8:54:BF:0B:94:32:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821c1d5a-31b9-3a75-a1f9-9ac1a211ecbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.82.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:15:97:40:7d:11:25:86:36:81:6b:69:64:22:6d:51:5c:65:
         19:a2:a7:d3:f4:1c:68:ad:ef:9d:c8:10:07:c8:69:9b:f5:35:
         bd:6d:15:73:1d:d9:f6:4c:52:5f:63:a9:36:ae:94:c1:92:21:
         18:b4:8c:3d:79:50:33:54:bd:47:54:a0:4b:c1:cf:71:c9:53:
         ba:aa:92:fd:30:e0:53:64:d4:54:e9:b4:92:05:cc:2c:03:51:
         b9:e3:93:b3:44:d7:3d:a3:67:6f:52:d5:a5:21:ec:5a:84:17:
         8e:02:8e:5f:73:d6:81:8a:a3:dd:56:ab:9b:13:12:bc:ea:fe:
         44:b6:1e:c1:fa:77:95:0d:88:2e:b5:82:75:aa:9a:54:3b:40:
         b4:f0:22:c9:55:4e:52:5d:e3:48:5c:66:99:47:83:3a:87:41:
         85:b2:13:5a:a4:fd:c4:e2:8d:58:fe:16:a6:a5:0e:cb:e2:76:
         62:44:33:7b:60:1c:07:7e:90:8f:62:56:72:4f:68:09:ea:6f:
         bb:ac:fd:fd:4c:4f:60:9d:ca:fe:aa:69:09:7a:59:ec:b4:12:
         f7:37:88:fb:35:da:86:ce:06:f1:7a:db:4a:b7:68:19:d7:03:
         b6:ed:39:f4:ed:da:01:53:f7:53:ca:21:13:6f:37:20:e8:b5:
         ba:c3:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:37:42 2025 by rpki-client