Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8b7fa6d-4bc5-3659-a8df-d2dcbcc534ea.roa
File:                     e8b7fa6d-4bc5-3659-a8df-d2dcbcc534ea.roa (raw, json)
Hash identifier:          zDSCwdmLKV4V0oy48dcQNi51HzBX7OHa+a2CeZjUFkM=
Subject key identifier:   BB:66:49:EA:EF:98:8E:B7:33:10:6D:73:D5:FF:61:17:46:D6:FD:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8C5759952FE3C00472C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8b7fa6d-4bc5-3659-a8df-d2dcbcc534ea.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        73.121.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:c5:75:99:52:fe:3c:00:47:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=41758bfb-26ed-4f4a-bed1-a88a16486583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:07:50:b9:92:8c:f1:03:95:bb:5b:c8:d9:
                    4f:14:1b:61:f1:82:04:d4:9d:74:38:28:3d:8b:63:
                    5b:23:17:81:fd:bd:07:b1:ef:be:b2:15:42:fd:1e:
                    53:35:e1:e1:ce:ef:bf:63:ea:37:3e:e0:62:33:60:
                    c4:a2:e7:08:46:71:e7:c4:10:fe:5e:ba:b4:a4:a6:
                    87:88:ad:3f:3a:23:d4:38:c9:9b:0e:e8:26:7c:29:
                    e5:67:ec:d6:77:92:cf:21:97:8a:d6:52:07:9d:22:
                    51:68:3c:ef:17:6b:9b:a0:e3:fc:cc:a1:8f:30:f7:
                    54:fc:ba:f0:f5:3b:1f:16:0e:ce:7f:8e:cb:81:ca:
                    46:99:3c:88:ad:58:59:05:ad:7a:8a:86:27:5f:bd:
                    1d:3c:98:c2:84:a3:fd:a1:41:59:f5:8e:d2:dd:22:
                    d5:8c:4c:8b:36:c9:db:ce:16:14:e5:32:cd:ea:a4:
                    8f:86:8b:8f:b2:8c:02:49:c6:ac:0f:ca:d0:7f:75:
                    84:02:1e:91:38:23:f9:e6:0c:fb:d4:a1:52:c5:22:
                    ca:fa:a5:11:07:9d:e2:d3:8b:6b:2e:92:b0:1c:3a:
                    a6:a9:6b:e5:0e:d2:c0:f8:d0:7b:28:4e:ff:39:67:
                    c8:1a:eb:89:4c:0d:3d:6e:63:18:c5:f4:8a:a0:ea:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:66:49:EA:EF:98:8E:B7:33:10:6D:73:D5:FF:61:17:46:D6:FD:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8b7fa6d-4bc5-3659-a8df-d2dcbcc534ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.121.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:ef:02:be:88:d3:40:11:a5:19:64:19:b2:0d:7d:e1:6d:
         74:d7:1e:8a:25:67:8e:c3:ce:bd:1f:9f:36:23:6d:b7:27:bf:
         98:60:73:5a:30:b6:74:c4:56:24:3e:08:3f:3e:20:1a:43:6c:
         9e:83:fd:75:07:78:49:23:f8:99:16:33:23:5e:ae:3e:0b:2c:
         7f:7f:2d:ce:33:51:ec:82:fb:0a:26:1b:98:93:bb:04:dd:e5:
         73:04:fc:40:21:5b:ff:6c:a3:93:f1:7c:11:88:ed:2d:1f:d6:
         ed:63:25:91:14:b1:5b:e0:bc:3a:24:c5:68:05:60:59:a9:12:
         43:8b:c3:fc:81:83:cd:6a:58:72:9f:11:d2:0e:84:4d:5b:19:
         a5:bb:ce:62:42:6f:25:10:5c:3c:af:18:27:e8:e0:f6:3c:6c:
         11:de:b0:83:64:97:c1:f9:f8:f5:97:f5:0f:a9:f8:ef:c2:f7:
         31:ba:c8:c4:df:63:f6:80:e5:9c:be:51:70:0d:e3:39:f4:df:
         6f:ba:a2:1c:b9:6e:eb:88:9d:dd:29:bf:35:59:14:0b:ee:1c:
         34:6d:b7:6a:61:23:75:a5:33:f6:83:2d:e4:e3:41:f4:5a:21:
         32:58:03:24:2a:33:f0:e2:d1:f9:70:bb:7e:31:a2:04:5b:6d:
         9c:c7:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:28:10 2025 by rpki-client