Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5da02c3-6eb2-392a-98f9-fcb96ff9b265.roa
File:                     e5da02c3-6eb2-392a-98f9-fcb96ff9b265.roa (raw, json)
Hash identifier:          sY01Qkcvy8k3fsEtBAOwQu0mOjPW49Z0S9G+fvPbgm8=
Subject key identifier:   9C:65:6A:A6:47:37:14:FB:D3:2F:1B:DD:1E:11:10:6D:FA:37:B3:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A85189D2DEB6A5F0490500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5da02c3-6eb2-392a-98f9-fcb96ff9b265.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.227.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:51:89:d2:de:b6:a5:f0:49:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a44cf283-7ccb-4085-a0a4-5084d4635428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:e0:9f:d8:ba:b3:a1:2a:41:1d:fd:87:5d:
                    d1:52:6d:be:21:57:7f:f3:8c:01:6c:6a:2e:59:cf:
                    d7:75:5b:c0:2b:47:1c:69:2a:0b:e5:13:e9:b8:53:
                    49:ca:0c:e4:80:2d:15:6a:3f:ec:01:48:aa:01:1e:
                    ff:9d:3e:6a:2f:52:ae:90:2d:b2:fc:50:e2:41:1a:
                    09:f3:f3:07:20:ef:ab:3a:7b:70:ab:85:1b:40:97:
                    e5:40:b7:d5:91:de:a5:ea:28:5b:f5:9e:27:26:bf:
                    ee:59:87:c9:8d:8d:ac:51:e6:a1:26:8a:b5:4b:0c:
                    54:57:96:71:33:29:0f:d6:a5:3d:2b:d5:d4:78:ee:
                    a2:5b:80:d7:da:93:07:6a:77:00:1c:c5:2a:95:c3:
                    7d:fb:55:7f:9d:f6:12:ab:21:e0:44:e3:aa:cd:3a:
                    2e:ea:bc:82:c8:6a:b9:0e:bb:4c:45:71:8a:02:8f:
                    f8:2e:cc:93:c3:60:81:9b:de:07:bd:fa:8c:bf:fb:
                    65:7d:3f:9a:44:89:41:aa:d7:c5:ab:39:49:ad:ce:
                    9d:64:a1:92:f4:63:e6:dd:6a:a5:75:97:fc:18:79:
                    6a:50:d4:18:1f:71:27:96:86:e1:ea:51:7e:96:e5:
                    35:aa:3a:3a:9c:4d:8e:cd:64:00:d3:27:af:db:1f:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:6A:A6:47:37:14:FB:D3:2F:1B:DD:1E:11:10:6D:FA:37:B3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5da02c3-6eb2-392a-98f9-fcb96ff9b265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:07:93:1b:28:f7:e8:da:44:19:b6:8c:e1:ad:04:d3:19:
         8e:9b:2d:ce:0c:dd:64:6a:f4:c8:9b:1b:4d:a7:34:a1:e4:3a:
         bb:9e:a2:26:bd:f6:1a:ad:7b:b8:e0:46:63:ee:43:a0:23:44:
         96:2c:bf:68:7e:bf:52:e4:b8:d1:42:6a:84:de:e0:6c:35:46:
         15:29:cb:e3:fa:cf:8e:64:54:f6:ae:54:ec:7f:e8:fc:4d:b3:
         99:19:51:43:2b:ff:5d:25:fb:f9:89:47:53:7c:7b:23:aa:58:
         9f:c0:8d:21:26:53:5f:41:53:a5:06:a5:ca:a2:2a:2e:1a:1f:
         dc:bd:98:5d:40:37:97:f3:5a:cc:37:2f:b6:3f:33:9a:88:3d:
         1a:11:ca:3a:55:46:65:54:23:de:86:02:5f:2a:f2:a4:26:f1:
         03:73:e1:7a:52:08:97:78:f6:b9:05:2d:e8:d3:db:e6:43:e6:
         15:a3:a9:22:63:68:4e:46:4b:c1:75:84:d5:fd:1b:61:3d:68:
         9f:02:c0:fa:7f:de:73:ff:d0:b0:a5:af:5f:30:cb:03:74:d3:
         44:30:a2:06:78:93:c6:96:b0:f2:09:45:c8:45:a9:88:43:7d:
         93:db:5d:c5:6d:71:c1:20:86:c6:1f:d3:91:9f:25:da:ea:b2:
         7f:e1:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:34 2025 by rpki-client