Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccd98db0-1cb0-3d51-9474-b506eacba06f.roa
File:                     ccd98db0-1cb0-3d51-9474-b506eacba06f.roa (raw, json)
Hash identifier:          RA49rWbLQLPxqbKDa+beoNK4pIAfpr22d+ILpB/soa0=
Subject key identifier:   15:36:DA:37:CC:85:0D:E8:3F:45:F1:06:27:4C:0A:55:52:55:33:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221479D47B3D66E703228C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccd98db0-1cb0-3d51-9474-b506eacba06f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.203.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:47:9d:47:b3:d6:6e:70:32:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=aedcd92f-5898-4785-b230-8972ff5ed909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:b0:b8:83:b0:34:94:66:c9:78:1f:51:1e:
                    9a:f3:65:fb:58:08:3e:d8:5f:1b:83:53:92:09:92:
                    f5:3a:63:6a:df:cf:77:3c:96:61:6f:50:2b:c2:ea:
                    94:08:8e:af:96:40:e9:9d:ce:34:7d:0e:92:cc:b0:
                    1e:b0:74:32:6c:33:a4:01:61:25:80:57:a2:c8:28:
                    6c:3b:46:60:c6:81:53:10:01:6d:e1:f7:38:fe:55:
                    f0:f8:11:d5:75:33:c1:22:2d:22:d6:cc:25:51:30:
                    d8:26:8a:73:73:d9:63:b2:da:24:fb:93:66:1e:b6:
                    0d:92:90:e3:0d:f0:96:a7:20:a5:bd:7f:b0:8f:cc:
                    c5:d9:c6:05:0a:93:9a:ef:a0:12:71:0d:64:0b:b0:
                    ea:7d:e1:f9:15:47:7d:78:b2:d2:6e:dc:68:ab:0c:
                    b5:01:32:48:2d:06:7c:08:ad:5f:eb:ad:47:b0:31:
                    68:3f:01:43:af:d9:73:e5:bf:a8:02:22:97:ce:dd:
                    e2:2a:a9:cb:a7:27:0e:18:10:6f:42:74:5f:86:6b:
                    99:4d:50:2a:40:df:be:5a:22:c8:d4:1c:17:29:ff:
                    35:02:dd:0a:f5:3a:b5:01:93:20:9f:03:dd:ad:23:
                    43:3a:5d:c8:00:3c:50:eb:10:43:5f:79:d9:24:57:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:DA:37:CC:85:0D:E8:3F:45:F1:06:27:4C:0A:55:52:55:33:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccd98db0-1cb0-3d51-9474-b506eacba06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2f:41:41:eb:2f:c8:58:4b:ca:97:30:74:34:89:df:5c:4a:
         c8:ac:c5:5c:e1:6e:ce:cb:1e:28:41:b7:7b:54:c8:bf:71:55:
         13:78:8a:bd:20:73:c9:50:5d:31:d8:7d:9a:9d:2f:88:42:60:
         15:8c:b0:41:c1:e6:a8:eb:f6:5c:96:90:57:17:f6:3d:59:b2:
         71:80:96:81:87:ac:b4:e4:1d:1f:2f:59:e8:70:49:8d:6b:23:
         20:53:fe:5a:62:4a:87:70:ca:a9:5f:7f:cb:3a:3f:c5:c7:88:
         09:81:ec:4c:83:e8:a9:91:46:14:0b:fa:40:31:48:84:81:40:
         c7:1e:cd:ff:96:f4:e8:5b:8a:4f:0c:51:60:fa:47:99:02:8e:
         b6:b8:a7:7b:ad:80:08:97:47:59:94:cc:1a:65:c0:73:73:23:
         30:4c:ce:9f:d0:7d:bf:cb:f2:54:11:96:da:d8:95:aa:a4:09:
         95:90:5c:2e:7c:32:2f:29:32:b7:d4:70:c2:a9:57:70:66:98:
         09:9a:2e:bc:c9:e1:a5:fa:f0:bb:12:4c:d8:a2:2a:6b:32:12:
         0b:17:80:2d:b2:d9:a7:a8:6e:ac:4c:59:86:33:cd:09:d6:02:
         39:b3:9c:ee:c1:63:38:4f:00:f5:02:c8:78:33:d0:e0:1f:34:
         08:65:30:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIUedR7PWbnAyKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YWVkY2Q5MmYtNTg5OC00Nzg1LWIyMzAtODk3MmZmNWVkOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8GwuIOwNJRmyXgfUR6a82X7WAg+2F8bg1OS
CZL1OmNq3893PJZhb1ArwuqUCI6vlkDpnc40fQ6SzLAesHQybDOkAWElgFeiyChs
O0ZgxoFTEAFt4fc4/lXw+BHVdTPBIi0i1swlUTDYJopzc9ljstok+5NmHrYNkpDj
DfCWpyClvX+wj8zF2cYFCpOa76AScQ1kC7DqfeH5FUd9eLLSbtxoqwy1ATJILQZ8
CK1f661HsDFoPwFDr9lz5b+oAiKXzt3iKqnLpycOGBBvQnRfhmuZTVAqQN++WiLI
1BwXKf81At0K9Tq1AZMgnwPdrSNDOl3IADxQ6xBDX3nZJFeHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBU22jfMhQ3oP0XxBidMClVSVTP2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2NkOThkYjAtMWNiMC0z
ZDUxLTk0NzQtYjUwNmVhY2JhMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScv6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4vQUHrL8hYS8qXMHQ0id9cSsisxVzhbs7LHihBt3tUyL9xVRN4ir0g
c8lQXTHYfZqdL4hCYBWMsEHB5qjr9lyWkFcX9j1ZsnGAloGHrLTkHR8vWehwSY1r
IyBT/lpiSodwyqlff8s6P8XHiAmB7EyD6KmRRhQL+kAxSISBQMcezf+W9Ohbik8M
UWD6R5kCjra4p3utgAiXR1mUzBplwHNzIzBMzp/Qfb/L8lQRltrYlaqkCZWQXC58
Mi8pMrfUcMKpV3BmmAmaLrzJ4aX68LsSTNiiKmsyEgsXgC2y2aeobqxMWYYzzQnW
AjmznO7BYzhPAPUCyHgz0OAfNAhlMNU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:24:10 2025 by rpki-client