Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa
File:                     d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa (raw, json)
Hash identifier:          DkFMPd14UD6PbidlxACWlGg0HeDzXPUSEARwNKy88Co=
Subject key identifier:   39:4C:0B:77:1D:A8:85:ED:77:AD:FF:BE:5E:51:14:42:91:F3:4F:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7BEF1D6139FE69B4A52F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33667
IP address blocks:        72.55.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:be:f1:d6:13:9f:e6:9b:4a:52:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=acbf3b4c-20a8-4131-9dc3-6895f6c5783d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:96:f2:1d:98:b9:ef:d6:da:5b:9a:7a:03:
                    e8:80:38:19:d1:9f:8b:e2:c2:bd:86:d5:19:f7:13:
                    8b:eb:d6:b0:09:df:6a:63:64:b5:04:04:19:b5:03:
                    40:6a:93:6b:86:42:25:a1:65:5c:45:56:fc:df:25:
                    32:db:57:3a:96:a6:dc:3b:13:a0:0f:bd:83:c8:31:
                    5f:bf:d9:7d:b3:a9:16:31:f4:38:45:f5:02:b4:4e:
                    23:be:62:72:52:c4:b3:c4:de:50:37:9f:96:89:6f:
                    51:77:23:5e:cf:ed:56:09:c5:10:9b:4d:55:1d:b0:
                    9b:d7:3b:df:fe:8b:c9:27:54:1b:d4:0f:28:55:5f:
                    dd:7d:c8:a5:2e:d7:80:ff:81:ca:22:46:fd:90:76:
                    b5:bb:82:38:0f:d4:58:8a:8c:7e:b4:9d:d2:6c:d8:
                    22:dc:ba:de:38:b6:4e:ae:65:85:21:46:99:39:8d:
                    34:06:10:91:f9:28:92:cf:92:5e:08:8f:38:6d:10:
                    1c:f6:14:96:06:05:0d:59:3e:e8:69:35:ed:d8:87:
                    c5:f1:40:f7:89:a6:e8:51:d7:f1:fa:d5:3d:de:d9:
                    cc:cc:0b:99:f2:0c:b6:49:7c:5d:65:5f:9d:d1:62:
                    8d:a1:0e:b6:40:26:1d:f2:05:08:af:d2:52:80:43:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4C:0B:77:1D:A8:85:ED:77:AD:FF:BE:5E:51:14:42:91:F3:4F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.55.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f7:b7:a6:48:2e:12:54:00:c2:4a:c0:7f:3b:6c:ee:3b:01:
         ee:8d:26:3a:44:bb:77:05:98:35:37:65:a2:36:9e:6f:62:43:
         b1:d9:ad:08:55:d9:9b:ba:08:5e:27:31:47:29:ef:68:80:31:
         e6:6d:16:c9:d2:25:0f:f6:44:80:8f:cf:6e:0b:1b:71:c4:20:
         00:3b:0a:07:e7:57:bf:52:0d:e0:31:c8:d8:ee:c0:e4:70:1e:
         4a:2a:dc:c8:d3:bc:fc:a3:48:9c:a7:2c:2c:6d:b0:57:3a:09:
         f5:8a:b8:61:46:8b:2f:6f:4a:95:01:f2:f5:b9:4c:e1:2b:20:
         eb:5e:fb:28:2e:fb:d6:be:92:6d:66:a6:f9:33:f2:cc:e3:76:
         b5:e6:2d:85:19:2e:ba:db:21:79:0b:87:76:10:1d:90:f4:3e:
         91:4e:d7:dc:bb:31:c8:d8:49:aa:bf:6b:5c:90:ff:33:8c:7b:
         0d:82:7f:73:75:65:44:f8:39:24:7a:f3:46:e8:ff:5a:5d:08:
         1f:79:e9:b6:a5:c2:ff:44:cd:91:ce:96:3e:85:5c:0c:13:4a:
         ab:c5:29:8e:4c:96:32:9d:c9:69:6a:e9:5a:d5:d8:bd:d9:75:
         b5:22:b6:0d:4f:48:b4:31:80:11:09:f1:9f:fd:be:16:77:e3:
         86:cf:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:57 2025 by rpki-client