Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a6ab3a-8e9b-316d-8d59-cc0e34312e34.roa
File:                     f0a6ab3a-8e9b-316d-8d59-cc0e34312e34.roa (raw, json)
Hash identifier:          6jJxECu5GFCV0r+7AjFVZCFDHwiBgG7XLZwv5N0WUIc=
Subject key identifier:   83:5E:98:D1:F5:EC:5C:80:92:52:76:3F:E5:84:0A:D6:4C:D3:73:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A76A89014E180A5FC5FA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a6ab3a-8e9b-316d-8d59-cc0e34312e34.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        73.208.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:6a:89:01:4e:18:0a:5f:c5:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d273b434-1c07-4b5e-842c-46264148f0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:8f:f0:b9:00:ab:0f:b4:36:ef:a3:5e:a4:
                    49:a7:92:25:48:4d:37:4e:6e:34:b1:5f:af:c5:d6:
                    2a:92:5d:4b:b2:d9:8e:6b:9a:c2:bf:29:58:8a:a4:
                    0b:84:80:45:ba:29:15:5c:2d:40:81:30:46:f0:7b:
                    f5:87:cd:04:6e:4b:03:ea:ba:04:8d:22:18:d9:65:
                    3b:87:23:01:48:d0:99:23:02:0b:04:da:4e:ad:22:
                    64:15:55:78:1b:ed:d7:33:cc:ae:b8:6b:0d:ac:bd:
                    bf:cc:16:00:f8:93:4b:7e:0f:23:b7:58:37:d9:a4:
                    9c:42:48:08:45:05:1c:d2:92:ee:fc:81:7d:cd:eb:
                    54:c8:26:7b:99:df:7c:d8:ad:bf:89:bc:72:1a:1c:
                    64:f3:3c:ed:e6:c0:9a:1a:1c:34:98:50:ff:1c:14:
                    b5:b6:82:01:c4:49:f3:c4:5f:a6:d2:19:cf:91:0c:
                    18:f6:b2:a4:b5:f9:c8:b9:db:b5:a0:5a:92:82:a7:
                    e9:ff:74:2b:3a:02:fa:49:ae:dd:55:0f:e7:37:60:
                    cb:8c:af:42:66:22:c4:36:60:3c:f8:d8:dc:e6:99:
                    b2:57:d0:80:c5:cc:0c:db:a1:3c:d6:3a:1e:c4:95:
                    13:1a:5c:fa:2b:63:73:ae:f4:c7:61:16:e8:ba:49:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:98:D1:F5:EC:5C:80:92:52:76:3F:E5:84:0A:D6:4C:D3:73:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a6ab3a-8e9b-316d-8d59-cc0e34312e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.208.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:a7:7a:0b:5a:7f:f4:fb:8b:ee:5b:83:81:4f:8a:e9:3c:
         0d:7f:81:b1:c1:03:a5:a3:01:d8:55:75:0e:16:bc:77:a3:c0:
         43:6d:1e:ff:f6:60:aa:e8:ea:33:15:31:59:32:48:52:7a:29:
         ec:02:53:a8:bf:63:52:43:ed:27:2f:dc:c7:da:5e:46:a8:e5:
         e0:72:96:2e:d9:5f:79:1f:19:f7:51:0f:57:40:e0:0e:c5:1a:
         e9:91:e3:21:bb:13:42:98:36:4a:e5:cb:52:fe:94:d7:fc:a9:
         02:15:84:2f:b8:a1:24:32:14:4b:8e:e8:71:46:f6:73:2e:ff:
         6d:f2:3c:72:5d:1a:62:e2:97:d2:f2:43:0d:81:0b:f3:87:ca:
         d7:00:ac:a2:76:11:a4:3b:be:91:28:ac:02:18:03:5f:94:46:
         4b:03:4b:10:1a:01:8b:f9:3c:e2:d5:05:08:1b:fa:76:c1:3c:
         3f:1c:16:7c:4f:a9:2c:60:35:ab:34:cf:fb:97:2f:6c:c3:60:
         ad:30:37:29:21:97:f5:50:44:74:2e:da:6e:4d:fd:d9:fe:d8:
         02:44:37:85:e5:a0:0e:c4:2c:ff:24:a0:dd:35:75:c6:22:3b:
         ed:06:cb:dd:83:8d:2d:1c:ef:96:e3:8d:42:84:d1:fb:66:9e:
         0f:ad:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:07 2025 by rpki-client