Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca643143-43b5-3a65-b323-138f9fbaab5d.roa
File:                     ca643143-43b5-3a65-b323-138f9fbaab5d.roa (raw, json)
Hash identifier:          mUjHDryb8VWg0d8mm7E3iCItHxg8HyA/wYf+X+PtiF0=
Subject key identifier:   4F:AC:30:BB:AD:F3:B0:40:54:D4:1F:09:2D:D0:E4:A2:68:56:13:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC48ACB01501DFCC7F07700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca643143-43b5-3a65-b323-138f9fbaab5d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.246.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:8a:cb:01:50:1d:fc:c7:f0:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ca6b33c3-b5a7-44c3-b34f-5804c5ffdac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:42:55:b7:be:30:31:ad:f5:41:4f:fb:8a:
                    dd:ed:15:4b:01:09:56:1c:ca:ae:38:1d:10:85:15:
                    26:b5:5b:73:9b:d0:84:cf:bb:07:c2:fb:9c:cd:f2:
                    1e:90:ae:68:a9:61:a4:33:46:a0:28:ea:69:d5:c1:
                    42:4f:b4:0f:44:bd:a2:ea:1a:a6:71:34:d6:c8:29:
                    37:d3:55:98:12:3e:42:62:31:56:69:e7:34:e7:b5:
                    74:46:d3:a3:d3:e4:92:1e:06:e0:12:98:66:45:bb:
                    1c:d9:86:fa:a1:fc:a7:f7:ae:da:bd:89:ce:af:2d:
                    9b:5f:a3:42:70:0b:6e:5b:81:05:08:fa:8e:5f:8f:
                    62:cd:40:bd:a2:87:c8:fa:ed:78:97:35:1e:c0:0d:
                    5c:90:e8:2c:4e:6a:57:1d:13:3f:65:73:f8:e6:22:
                    cf:f7:d9:ed:ff:52:28:30:02:50:02:29:db:28:ae:
                    42:82:21:e7:87:f3:aa:bc:24:ea:b3:63:c9:fc:77:
                    bf:9d:7e:26:90:31:1a:45:66:aa:af:da:2e:ee:e0:
                    b9:4a:d2:35:e5:e2:f0:19:61:42:1c:7f:7c:47:0b:
                    52:ec:41:a9:f1:5f:73:99:50:41:c0:b4:36:0c:62:
                    78:8a:07:70:0f:94:5b:08:e6:2b:60:22:14:5d:1a:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:30:BB:AD:F3:B0:40:54:D4:1F:09:2D:D0:E4:A2:68:56:13:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca643143-43b5-3a65-b323-138f9fbaab5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:b2:73:4f:96:ab:72:34:bb:8a:40:6a:bd:e3:e3:f3:50:
         93:80:47:69:5f:bc:9e:90:63:8f:1e:c2:92:42:55:88:b0:8a:
         d4:3c:31:26:00:11:62:0b:93:49:9b:67:9f:68:c0:28:37:b5:
         95:ca:e8:bf:ee:3d:99:7c:4a:7c:1b:97:33:e6:88:f5:a1:c4:
         1b:bc:6c:be:f7:a8:e4:5f:69:82:38:78:cf:d8:fc:66:c2:cc:
         81:fd:90:82:d3:34:38:d6:54:89:8b:19:83:6f:f1:17:eb:da:
         c8:4a:f7:83:39:f0:67:4e:20:46:af:db:7b:f6:9f:f6:87:66:
         1d:82:ec:37:30:22:2e:35:58:51:da:f5:d0:fd:f3:c2:2d:29:
         82:65:35:ba:b9:33:2c:87:27:b2:60:72:0b:82:8b:05:22:ed:
         e2:4e:8f:b1:ff:2b:2f:74:a2:be:c0:0d:2c:71:66:a8:50:a7:
         20:a9:76:45:05:de:92:ff:29:60:9a:ef:9d:c7:93:13:13:03:
         db:ab:d8:85:fd:91:67:50:be:e8:fd:4d:be:7c:64:18:c9:9c:
         c3:24:eb:0d:f4:f5:dc:f1:19:5c:2f:66:c1:93:95:eb:75:7b:
         f3:50:e9:60:79:c5:26:bd:57:b0:3f:64:74:71:fa:54:16:84:
         00:bc:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:30:11 2025 by rpki-client