Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212356ac-dc21-3858-8d0a-f5ed3de366bd.roa
File:                     212356ac-dc21-3858-8d0a-f5ed3de366bd.roa (raw, json)
Hash identifier:          SsTpCc8PzgG6Ge2UXg6TkHswTlJRD7eJiheHSMKHep8=
Subject key identifier:   DE:EB:60:80:83:21:04:E5:DE:54:FF:CB:D7:F8:5F:CB:EC:45:C6:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A974754E3EA12BACC618C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212356ac-dc21-3858-8d0a-f5ed3de366bd.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.180.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:74:75:4e:3e:a1:2b:ac:c6:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0185f0ca-6d11-4c11-8668-db2f990c8ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:1c:5a:6e:cb:80:11:14:d6:d1:93:74:65:
                    20:4e:8b:8b:de:f6:5c:de:90:34:3e:67:47:14:3c:
                    82:17:04:57:d5:b4:6e:7c:97:a8:64:7d:86:05:31:
                    e4:0b:b1:0f:ff:4a:a1:af:96:7d:df:44:f9:0e:50:
                    6e:fb:9b:24:16:c9:c0:dd:eb:e6:d5:4d:64:80:e2:
                    7e:3c:52:97:22:0c:a5:f4:ac:77:34:56:ae:17:12:
                    29:ea:37:89:6d:34:ab:46:80:da:d2:a9:29:0c:b5:
                    71:54:cb:b3:03:09:cf:77:60:10:cf:83:6d:07:f9:
                    00:c3:d0:ca:ce:13:fe:35:a6:78:10:78:25:c1:6f:
                    5d:11:3f:86:b7:3a:81:02:fb:3f:da:80:d2:6c:98:
                    c0:ab:8e:61:2e:19:52:9b:49:91:45:e8:9c:46:99:
                    94:fc:3f:fd:3c:85:c3:90:52:6f:cf:e5:77:52:d8:
                    39:91:dc:b6:3f:71:27:5e:8d:a3:7e:66:40:ba:b2:
                    8f:68:e5:2c:ac:37:43:02:f9:08:f9:dc:4f:83:02:
                    46:3f:1b:f3:22:66:ce:de:ce:80:27:4d:d7:eb:74:
                    ce:2e:58:27:fe:21:7b:43:44:4d:8a:05:f9:17:c6:
                    62:68:d8:ba:8c:6e:a5:a2:21:60:64:66:88:d2:9c:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:60:80:83:21:04:E5:DE:54:FF:CB:D7:F8:5F:CB:EC:45:C6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212356ac-dc21-3858-8d0a-f5ed3de366bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.180.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:47:22:c2:19:71:4e:01:df:f2:f7:5a:e5:74:91:88:e6:
         36:fc:a6:a8:cc:e1:1e:ee:74:0c:fc:61:ce:1f:2f:07:88:1f:
         9f:b1:23:a0:be:e8:af:4b:29:ce:b8:f3:44:5d:ac:79:40:61:
         ba:35:da:ba:2e:af:4e:43:03:be:4a:f3:b5:05:24:6d:a0:8e:
         1d:cd:de:86:09:b0:17:48:08:95:3e:8e:cb:29:ba:7e:db:23:
         75:88:4b:37:0c:ae:f4:19:b1:2a:d1:82:39:51:4e:c9:bd:c6:
         f4:0a:42:08:09:ef:33:b1:94:cb:60:22:5f:df:19:2f:a9:5b:
         ea:fe:c9:7d:10:6e:a3:3f:a4:64:e0:17:1b:1c:e2:ed:51:ff:
         d9:4f:34:87:46:94:47:2e:99:00:b5:da:77:df:e5:ed:c2:d4:
         6c:41:de:43:ac:41:37:48:14:94:22:19:89:db:ab:18:d4:64:
         c6:3b:7c:40:e5:51:8e:5f:68:61:5c:d7:b3:98:f8:a0:bc:da:
         e0:5c:3c:40:04:85:00:f1:73:01:bb:05:ab:1e:5c:b2:ba:1f:
         de:ac:87:55:ac:ff:ba:24:9b:56:25:e5:57:c6:0b:a9:fa:9a:
         7d:24:ee:cb:00:03:04:f5:4c:89:f6:58:59:da:a8:51:f5:95:
         5c:a4:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:44:50 2025 by rpki-client