Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c6041d-5969-3bd6-a393-432314bf2e8d.roa
File:                     99c6041d-5969-3bd6-a393-432314bf2e8d.roa (raw, json)
Hash identifier:          oi+5cOdimYU1zRUQIjkBkI48sq0cqr7zVt0G/4bXA/A=
Subject key identifier:   6F:88:72:13:08:5A:91:9B:71:52:F2:10:7D:C6:BC:EB:90:8C:1D:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC26D0A01210628F5373680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c6041d-5969-3bd6-a393-432314bf2e8d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.210.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:6d:0a:01:21:06:28:f5:37:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a850de92-0a56-472d-9323-19d37ffde621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:19:00:55:89:10:c5:db:ae:dd:c2:74:6e:
                    17:90:12:85:f0:97:04:82:d1:dc:3f:e4:32:ff:1e:
                    32:68:7a:63:18:ed:93:d0:0f:0c:6d:3d:8f:1c:4b:
                    87:79:73:53:40:94:f1:07:0d:a4:93:c8:e1:ea:c0:
                    e5:2c:fd:55:ac:84:78:b5:05:ac:47:7a:fd:8b:8d:
                    3c:c4:dd:30:d3:4d:18:ed:94:a3:39:1e:4a:5f:33:
                    a1:25:f0:23:aa:a2:b7:09:46:bf:f9:98:02:9f:9a:
                    d2:e3:2e:0b:b4:a2:48:01:dd:67:a1:11:f0:df:a9:
                    3f:8b:b9:19:34:37:ed:33:65:e9:e4:3f:d5:2b:09:
                    e0:08:75:f8:a3:19:5f:3d:50:ea:69:0b:00:ae:05:
                    86:85:f2:f2:54:c7:36:36:fc:ec:78:c8:a8:7d:75:
                    85:d1:84:f2:e4:88:81:de:ab:32:67:b1:9b:4a:54:
                    37:79:dd:cf:1d:c5:a2:0a:d2:3c:a5:fe:0d:63:d9:
                    57:7f:c2:84:24:ff:d9:fb:9c:bd:af:2b:05:f4:06:
                    1e:b3:2b:e9:80:1f:42:df:49:73:49:d8:05:8a:10:
                    80:d6:65:2e:11:49:01:b6:3f:d3:cf:3b:0e:f1:c0:
                    15:90:52:c8:ff:83:bf:67:8d:55:7b:83:64:ba:3a:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:72:13:08:5A:91:9B:71:52:F2:10:7D:C6:BC:EB:90:8C:1D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c6041d-5969-3bd6-a393-432314bf2e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:19:72:a0:9b:a2:61:ca:6a:f0:58:1f:55:ef:63:3b:1a:e6:
         c7:e9:56:a6:3a:ef:11:4c:af:2d:4f:25:2e:72:ef:73:c2:9d:
         1a:cd:5e:d1:bf:6b:33:c5:71:e5:4f:ab:68:e0:fb:60:e3:62:
         53:09:d2:4c:80:76:76:a3:c9:d9:5f:f5:2e:7f:bd:97:22:62:
         b6:86:01:44:72:73:d0:19:f7:56:7d:9b:4f:be:e4:13:1e:09:
         dc:07:b4:1b:86:c8:a2:5d:aa:24:f7:22:97:eb:76:a6:b2:c1:
         c0:98:98:5c:b5:a5:4b:59:23:19:6a:5c:20:bb:61:c1:18:0f:
         50:e8:f7:a1:a2:82:77:10:ab:f5:4a:9c:9b:29:5f:eb:8b:d4:
         12:05:dd:25:db:1a:45:8f:17:d8:b0:34:8a:0e:d9:9e:0d:56:
         7d:9d:a8:b9:17:5d:15:19:00:1d:e9:15:36:0a:48:c3:80:03:
         10:16:50:a7:37:ba:fe:b7:ab:da:f5:02:3b:88:4e:c2:3f:ac:
         80:03:0e:fc:74:a3:e7:d8:e0:2c:23:02:87:5f:ce:df:41:a6:
         12:9d:38:b1:93:b5:26:b7:ad:54:b7:33:24:90:9a:e5:e0:6d:
         3a:3b:45:d3:4d:d3:ba:92:4b:67:f3:63:0c:19:8a:b5:84:d2:
         24:2f:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:28:48 2025 by rpki-client