Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/134decec-331f-3ec1-b570-363980f26ee8.roa
File:                     134decec-331f-3ec1-b570-363980f26ee8.roa (raw, json)
Hash identifier:          sWEUjvWKlS8IiH6Iwp5qN+61RW17wzrdKc8ibG9acGo=
Subject key identifier:   ED:C6:C6:C0:4A:1E:22:60:CD:E0:E6:9D:DA:3B:3E:46:F4:0F:0D:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A971703E9CA27CEA6EDD90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/134decec-331f-3ec1-b570-363980f26ee8.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.157.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:71:70:3e:9c:a2:7c:ea:6e:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b57e3a8a-47fa-487a-911e-9c180afcd885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:d0:55:45:2c:8e:45:c6:16:b7:86:5b:ef:
                    4b:75:f7:f9:06:68:08:53:d6:06:cc:4c:62:67:6a:
                    49:95:ed:30:f9:59:73:ac:4d:0a:d5:de:18:17:b7:
                    ed:55:66:55:66:ab:9d:16:67:a3:30:8c:ae:91:19:
                    9b:95:25:6a:17:a2:16:d6:c1:f6:be:06:22:de:41:
                    ca:ea:42:0a:f3:e7:41:12:33:b1:b3:ed:08:d9:a4:
                    a9:a7:f1:76:82:3f:b0:b3:eb:39:99:a0:59:1e:ca:
                    97:35:c7:d7:23:66:37:2b:ae:4f:ba:8a:6f:0a:e9:
                    26:3e:95:f7:2b:a2:c8:65:f6:14:3e:b4:42:f1:7a:
                    9e:79:90:c1:94:f7:3f:b9:17:26:60:74:00:10:29:
                    e2:e5:5f:11:90:ad:96:7b:d1:9c:e3:dd:16:2e:c5:
                    c6:78:41:81:05:e7:f1:34:ec:c0:8b:39:30:72:b7:
                    fc:7e:63:ed:64:31:0a:fc:9a:91:ec:40:97:40:64:
                    df:04:76:c5:27:8b:fa:2d:de:91:4a:0d:88:66:23:
                    ac:db:4a:a3:88:e9:93:f6:50:1b:d5:7b:87:c3:85:
                    5c:0d:80:79:41:78:af:ca:92:31:2b:23:e0:bc:45:
                    83:ab:2e:f2:83:56:e4:77:2c:16:e1:83:3c:ff:7c:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:C6:C0:4A:1E:22:60:CD:E0:E6:9D:DA:3B:3E:46:F4:0F:0D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/134decec-331f-3ec1-b570-363980f26ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.157.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:e0:a2:8d:b3:dd:dc:70:29:c2:18:fb:0c:3f:f2:bd:a6:
         5d:1c:86:f9:c8:af:6f:39:06:62:01:ef:99:2b:c9:ee:fe:87:
         4a:c9:e7:e9:36:14:9f:7f:d7:71:c6:f3:5b:c7:1d:44:b0:d0:
         89:a8:0b:e7:74:9d:78:78:c9:5b:cd:1a:59:e9:bc:ab:9d:86:
         77:bf:01:26:86:34:88:40:a6:b9:dd:45:d1:97:c5:a1:62:15:
         40:36:b3:08:dc:5a:84:d2:2d:55:54:0c:b2:d5:c1:02:3d:75:
         43:e5:0a:8a:1b:c3:f6:d3:b8:ac:f1:85:2f:1f:c7:51:f7:78:
         fd:f8:ad:d0:91:2d:fd:52:07:56:e5:ee:22:0e:37:bf:4b:4a:
         37:f6:12:ef:bc:70:1c:85:f3:9e:d1:8b:d3:6d:d2:a9:ee:07:
         c0:73:cb:10:6a:72:8c:01:9a:f7:a3:e2:d9:bf:84:9f:b2:c7:
         c8:f5:31:26:4e:f3:76:85:dc:fd:0d:ba:78:93:0f:00:bb:aa:
         39:3a:e9:23:5f:3c:ed:a0:bb:7b:b4:44:0c:0e:50:c6:26:19:
         2a:13:02:20:be:50:68:dc:df:81:3e:7b:50:20:57:6a:b3:98:
         89:43:fe:e1:6d:51:c0:23:5f:08:73:66:4e:ce:55:8f:92:e5:
         15:4d:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:01:54 2025 by rpki-client