Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ff8050-9d49-3dc4-947d-1678ed560e41.roa
File:                     a2ff8050-9d49-3dc4-947d-1678ed560e41.roa (raw, json)
Hash identifier:          IFPEz3WbAgs6oHmUdzXp5sJkGCPiz9PNeg0/9mTsc/s=
Subject key identifier:   8B:55:92:98:1F:02:24:54:42:95:91:CB:47:41:A8:15:F3:92:7C:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC36247D53A402F916EAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ff8050-9d49-3dc4-947d-1678ed560e41.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        73.20.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:62:47:d5:3a:40:2f:91:6e:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=00f6c4c0-0c49-4042-b37f-d278197173c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:f5:8d:dd:a0:5d:99:b1:9a:9c:eb:5b:a6:
                    1a:d8:1d:66:04:68:0e:f1:9f:cb:75:d9:d9:fb:b5:
                    c4:83:12:24:d2:c0:d5:07:86:59:60:ee:df:7d:62:
                    d3:96:01:41:56:91:d5:1e:c9:69:81:39:8d:50:56:
                    a3:ac:56:4a:99:a1:7a:bc:c7:08:ed:73:97:08:94:
                    bd:bb:88:62:2c:83:1c:6d:7c:ef:f7:20:0e:eb:a9:
                    bd:3c:a4:69:e7:7d:18:af:b2:3c:59:d7:a4:f7:d9:
                    ea:e1:7d:be:9e:90:a2:12:6a:c2:81:46:1a:27:e0:
                    aa:16:d8:d0:28:70:58:ff:74:02:ec:04:40:8f:1c:
                    a8:9e:d0:dc:38:f7:65:f5:80:c9:24:f0:de:67:40:
                    16:88:61:b3:88:6f:0c:b8:32:ae:49:d9:1b:91:a0:
                    86:7e:24:01:69:35:24:b4:2d:dd:67:b5:8e:8a:ae:
                    6b:e6:e5:27:70:c4:db:1d:a5:33:4d:0c:3b:ca:74:
                    83:9a:09:58:79:16:7f:5c:60:e7:35:71:e1:08:60:
                    86:44:df:56:93:44:2e:6d:8c:97:a4:a3:95:55:c5:
                    66:5c:98:de:b1:11:b9:95:04:c9:5f:61:23:7c:55:
                    f3:92:0b:09:3b:33:78:eb:06:56:9b:98:28:1b:0c:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:92:98:1F:02:24:54:42:95:91:CB:47:41:A8:15:F3:92:7C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ff8050-9d49-3dc4-947d-1678ed560e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.20.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:55:55:f8:8f:d8:b6:8f:ce:87:fa:21:f5:e5:5e:98:21:
         61:99:82:fd:bc:ba:b3:21:c0:93:7c:fc:29:b4:9a:86:af:fe:
         06:83:c2:d4:e8:7c:db:0d:22:be:2b:1e:96:69:21:b0:64:99:
         56:72:bf:68:ff:7f:ab:4c:78:64:e2:ab:9f:e5:71:ff:d0:f9:
         54:fc:ac:51:01:0a:5f:5f:f0:dc:0e:b7:51:d2:e9:fa:67:a2:
         4a:88:38:b2:fe:aa:4d:07:05:69:43:b7:ae:f1:08:35:f9:10:
         2c:c3:41:59:a1:e3:17:c4:33:ef:97:97:1f:99:4e:40:b1:d3:
         9d:48:7e:2c:26:06:87:e7:e6:1e:17:ff:36:c6:f5:b0:e4:d9:
         7c:83:65:ec:8f:49:73:8f:9b:b3:8a:9c:8b:8e:1f:1f:84:0b:
         87:8e:4e:ad:80:8e:2b:2c:7b:0f:e4:80:3a:43:1e:97:1e:22:
         81:d7:00:c7:51:8e:a9:39:a5:af:b6:5a:33:2e:99:9d:ab:fc:
         09:f7:79:a0:a1:a6:be:f4:10:9e:25:ec:62:4b:1c:8e:58:a9:
         45:8f:7b:2c:62:9f:46:37:04:48:c2:a8:af:4d:52:fe:1e:b5:
         2d:7a:fc:90:bb:e4:22:fa:c5:67:5e:ee:3e:65:d1:e7:d8:db:
         88:72:d9:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw2JH1TpAL5FurIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MDBmNmM0YzAtMGM0OS00MDQyLWIzN2YtZDI3ODE5NzE3M2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjv1jd2gXZmxmpzrW6Ya2B1mBGgO8Z/LddnZ
+7XEgxIk0sDVB4ZZYO7ffWLTlgFBVpHVHslpgTmNUFajrFZKmaF6vMcI7XOXCJS9
u4hiLIMcbXzv9yAO66m9PKRp530Yr7I8Wdek99nq4X2+npCiEmrCgUYaJ+CqFtjQ
KHBY/3QC7ARAjxyontDcOPdl9YDJJPDeZ0AWiGGziG8MuDKuSdkbkaCGfiQBaTUk
tC3dZ7WOiq5r5uUncMTbHaUzTQw7ynSDmglYeRZ/XGDnNXHhCGCGRN9Wk0QubYyX
pKOVVcVmXJjesRG5lQTJX2EjfFXzkgsJOzN46wZWm5goGwz4uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItVkpgfAiRUQpWRy0dBqBXzknyeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJmZjgwNTAtOWQ0OS0z
ZGM0LTk0N2QtMTY3OGVkNTYwZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSRRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKurVVX4j9i2j86H+iH15V6YIWGZgv28urMhwJN8/Cm0moav/gaDwtTo
fNsNIr4rHpZpIbBkmVZyv2j/f6tMeGTiq5/lcf/Q+VT8rFEBCl9f8NwOt1HS6fpn
okqIOLL+qk0HBWlDt67xCDX5ECzDQVmh4xfEM++Xlx+ZTkCx051IfiwmBofn5h4X
/zbG9bDk2XyDZeyPSXOPm7OKnIuOHx+EC4eOTq2Ajissew/kgDpDHpceIoHXAMdR
jqk5pa+2WjMumZ2r/An3eaChpr70EJ4l7GJLHI5YqUWPeyxin0Y3BEjCqK9NUv4e
tS16/JC75CL6xWde7j5l0efY24hy2WM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:27:32 2025 by rpki-client