Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92885628-5917-35ec-92c3-3a11a19e5a5a.roa
File:                     92885628-5917-35ec-92c3-3a11a19e5a5a.roa (raw, json)
Hash identifier:          lMGTEVZWwCS4IRoT5G9aZA8OQQsq9N2uQD6bWnZNbW4=
Subject key identifier:   AF:A2:46:29:8F:5F:27:C0:E7:5C:12:63:C0:41:67:96:31:50:B5:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB78F8D1C1C41305D287800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92885628-5917-35ec-92c3-3a11a19e5a5a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33490
IP address blocks:        73.37.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:8f:8d:1c:1c:41:30:5d:28:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b684a0b9-8da2-44dd-85b4-5534640f3e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:32:ab:08:f8:c4:47:32:c5:8c:cb:2f:a4:
                    c4:fc:24:e4:7d:75:e4:f0:bd:b0:38:73:57:a1:54:
                    d2:a6:5e:fe:27:21:29:46:cc:33:c3:01:f2:d9:42:
                    cb:48:f2:8c:05:c1:3a:a1:13:60:69:7a:28:8a:fe:
                    35:0b:bc:2e:64:56:41:a0:c4:50:6c:53:cb:98:67:
                    ff:d2:83:89:eb:70:64:f9:c4:ef:92:2c:f3:c2:86:
                    c3:4d:9b:aa:a0:86:c0:d0:ad:6e:a6:5c:cf:99:ca:
                    44:84:d2:21:a3:7f:28:8a:f3:ff:8b:ad:8c:c3:e2:
                    96:44:d2:93:8b:d8:10:0f:58:11:7a:4f:ab:a2:57:
                    1f:15:57:93:d2:61:55:a7:9e:cb:4e:c8:1b:1d:39:
                    7d:fe:0b:aa:e0:33:0e:f3:01:35:ec:e4:46:12:36:
                    2f:a0:40:b4:b2:85:53:b9:b7:41:48:66:c4:bf:27:
                    9d:50:9b:03:fa:d6:ad:68:11:cc:a6:38:42:ee:8d:
                    3b:19:53:8d:81:0f:ea:e0:c3:5a:b9:39:08:e7:db:
                    79:97:8b:20:5e:95:6b:18:48:cb:b7:91:7f:00:2e:
                    31:65:0b:5b:33:df:2b:16:a8:ba:cf:b5:23:82:7a:
                    3d:df:0a:91:cc:4b:0e:00:56:1c:3b:ec:27:18:db:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:46:29:8F:5F:27:C0:E7:5C:12:63:C0:41:67:96:31:50:B5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92885628-5917-35ec-92c3-3a11a19e5a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:87:ed:4f:8e:75:60:4d:6a:2a:43:6a:df:2b:4d:02:2f:52:
         90:86:58:be:65:4f:e4:b2:2a:09:4f:d3:16:32:d0:10:f9:eb:
         d8:7a:05:20:44:26:4a:16:ef:c2:cf:fd:9b:af:dd:20:09:51:
         53:38:4d:9c:a8:2a:5b:4b:ae:b6:b5:f3:ee:48:90:28:5d:5b:
         a3:7e:13:c9:15:1d:6d:fa:f1:43:9a:89:00:47:4c:c2:98:c0:
         3e:c4:c4:c4:20:38:4d:d0:44:3d:0b:8c:d8:f6:ac:52:e3:25:
         73:2e:30:93:64:c7:cf:03:9d:87:65:4f:37:47:7d:0b:ed:d3:
         5e:ae:a6:7b:c5:3c:7f:35:38:28:5e:76:18:2c:30:f9:50:a1:
         8b:ee:9a:b9:ea:c2:3d:4f:e3:12:cf:01:8d:08:e8:77:ac:38:
         d2:b1:5b:f4:85:51:99:70:41:ab:17:b4:16:dc:1b:f3:9c:ca:
         5b:6e:88:ec:a7:eb:cb:0d:7d:4c:1e:0a:9f:fa:f0:a6:45:8a:
         a5:c8:46:08:c6:52:e8:59:cc:c3:43:82:dc:10:70:d7:cc:cd:
         f9:41:f1:ec:73:2f:47:31:5f:76:4d:ee:13:08:c9:2a:6a:c7:
         dc:47:09:a8:f9:86:bf:40:07:9c:c2:5a:30:ea:49:b0:1c:94:
         91:57:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:28:50 2025 by rpki-client