Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc93d0d-489c-3b9e-8cdc-d36e3be054d0.roa
File:                     9bc93d0d-489c-3b9e-8cdc-d36e3be054d0.roa (raw, json)
Hash identifier:          cUZ5zNENIw2tOjzpDAY8h9+YiPFwcIo84J+oDyhp/ZY=
Subject key identifier:   BB:91:AC:16:AE:B6:65:3A:9A:D3:F8:57:AD:AE:AD:81:03:8A:B8:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB5BA2FE1F4D4049089E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc93d0d-489c-3b9e-8cdc-d36e3be054d0.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33651
IP address blocks:        73.231.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:5b:a2:fe:1f:4d:40:49:08:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=13cf0cd8-bdf3-4efd-8495-9b8ae99902e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:99:6f:ac:00:2c:8f:70:cc:b4:1e:72:67:
                    c3:65:51:71:cb:04:35:79:e9:fe:61:81:2f:c3:c2:
                    cb:aa:af:8b:92:9e:f6:16:86:fb:65:92:35:64:6c:
                    b4:f8:64:90:d6:c3:87:57:1d:18:32:98:5c:94:d2:
                    cc:03:35:0a:e2:c2:a5:62:ec:58:92:9c:d2:e4:bf:
                    1b:cd:3c:af:8d:35:75:4a:83:fa:aa:a7:81:35:35:
                    86:7d:24:cb:76:9c:10:01:48:89:ea:6a:f7:ae:05:
                    36:ff:c4:cd:bf:fe:0c:c4:c2:76:ba:42:f7:18:95:
                    fd:aa:d3:13:d0:ce:3c:b4:0e:9b:5b:40:6c:18:c0:
                    73:5d:50:fa:54:b0:c8:3f:dc:a3:50:9d:0c:ef:69:
                    c2:f5:58:55:05:13:8e:70:71:ed:81:2b:ed:25:cf:
                    1f:03:e5:57:e7:62:26:f5:55:eb:1b:b8:a9:8d:e9:
                    0f:bb:41:76:bc:1b:cb:14:24:2d:75:7c:3c:ee:2c:
                    75:53:2d:1f:25:21:64:b9:b9:e2:a3:60:9a:b3:ee:
                    53:ef:83:19:30:fe:1f:c6:f8:87:8c:97:ba:d7:e6:
                    d8:69:d9:48:03:e4:45:4f:2f:a5:32:1a:99:a8:94:
                    35:89:20:49:7d:7d:22:b2:4a:e5:2e:18:c9:0a:4e:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:AC:16:AE:B6:65:3A:9A:D3:F8:57:AD:AE:AD:81:03:8A:B8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc93d0d-489c-3b9e-8cdc-d36e3be054d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:54:e3:08:5e:e0:14:dd:45:da:bb:92:a2:ac:11:83:8e:
         46:10:fb:8e:72:8e:13:3f:3f:ce:ac:0f:a6:fe:0e:dd:8b:d1:
         9a:30:d5:cc:e3:39:42:d1:e2:f0:a1:a8:48:32:20:d9:b9:00:
         9f:21:86:29:2b:d0:78:7a:2e:25:3f:2b:d6:00:2f:9e:f3:e4:
         4b:c5:64:4d:7a:60:f1:10:15:9c:a5:0b:0a:60:2c:9f:a3:8e:
         e9:3f:0d:3b:2c:b7:87:f1:04:f7:2a:49:25:6c:06:7b:e0:c5:
         f6:3b:d5:ea:b8:61:56:26:5e:d5:78:6a:c5:89:6b:fe:dd:ac:
         64:06:4d:12:90:da:be:fe:e6:eb:fe:33:c0:21:d9:b7:65:a3:
         44:e7:e2:37:72:d6:74:7c:04:9a:71:d5:34:3a:60:0c:70:75:
         ef:3f:3f:25:7c:c1:18:b7:a1:93:2c:af:55:f7:dc:44:86:4c:
         1f:5f:6f:50:bc:5c:1f:76:09:0b:f9:2f:dc:62:f5:61:9a:6a:
         4b:f0:62:b2:ad:b6:45:68:1e:ef:d6:bd:aa:34:30:c3:45:21:
         c7:0a:a0:fc:f5:41:89:67:57:bc:bd:9d:50:57:86:9d:a2:9c:
         bb:24:42:e6:0b:24:1f:0e:7e:69:89:71:8a:07:03:93:78:3e:
         19:f6:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:17:29 2025 by rpki-client