Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa
File:                     2670929b-1b11-30cb-a8de-9390626c1ed3.roa (raw, json)
Hash identifier:          zZ88jvNxoWYkuPHkd/FBOwr0qL5rCp7c0RY4P7VaHMQ=
Subject key identifier:   66:74:78:D0:8A:78:AE:D8:42:43:30:B1:8E:30:BD:8A:F9:02:EC:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9492A1C3EC96FB5623740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33652
IP address blocks:        73.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:49:2a:1c:3e:c9:6f:b5:62:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c2722520-8152-4358-b025-212b184cdbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:f3:98:9d:11:84:40:a1:5b:5c:71:e9:9d:
                    e1:95:2a:e0:5a:0b:4f:f0:fd:d1:26:ea:e6:b2:68:
                    31:fa:87:ad:39:cd:04:17:a7:a8:06:70:c4:2a:6c:
                    1c:73:fc:3f:b4:be:85:f2:ec:1d:1e:97:28:15:f5:
                    de:7b:fc:10:15:d4:60:b5:28:ac:14:05:a5:aa:de:
                    74:fd:cb:8b:41:b2:23:20:a7:16:73:4f:29:c1:81:
                    e6:64:03:b7:7f:37:64:df:84:0d:75:ea:1f:0c:95:
                    49:68:aa:b6:d6:04:9d:ad:3d:f4:7d:cb:8a:1c:62:
                    9b:5a:18:af:5a:e5:0b:ad:d3:cf:ae:5b:ba:09:56:
                    53:d6:4f:9c:bc:8a:4f:b9:e7:bd:52:58:26:c4:69:
                    15:79:0f:1c:41:ca:a5:e1:87:88:22:eb:ec:31:15:
                    f7:55:d1:96:ca:f2:8b:ed:89:5f:e0:14:e2:35:9d:
                    61:20:71:12:86:42:c9:a0:6a:59:b6:91:3a:12:da:
                    6e:04:ea:cd:68:98:7e:e0:95:f0:84:24:9f:72:2d:
                    d6:a8:68:72:1a:63:ec:66:3d:41:32:ca:a9:a2:5c:
                    47:31:0c:55:38:8c:34:61:97:d4:8e:71:db:ca:bd:
                    80:25:c5:c0:48:f2:b2:3d:f0:66:4f:d6:16:89:06:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:74:78:D0:8A:78:AE:D8:42:43:30:B1:8E:30:BD:8A:F9:02:EC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:24:43:f4:be:57:50:10:42:61:e1:53:bd:4b:2c:4a:51:
         7c:05:fa:2f:e8:bb:b9:4e:93:e3:09:b0:f3:ad:cb:bb:ad:76:
         2a:9d:80:04:06:14:7b:e7:39:a7:96:a3:d3:0b:a5:07:7d:64:
         db:2d:53:f3:6f:5e:07:84:d1:84:f7:d3:9e:a7:05:9f:24:76:
         b0:68:68:f8:7b:40:94:61:32:0b:7c:31:da:14:d8:6f:bd:cb:
         d9:ca:fa:5e:72:65:53:dd:9c:34:d3:23:8a:3f:5f:e9:a3:91:
         b6:fc:ef:01:ff:a1:68:21:06:91:2a:1c:cf:43:45:96:45:06:
         ac:87:a7:39:4c:cc:f2:6e:94:29:c3:92:b0:a4:d6:bb:a7:47:
         c9:33:36:fc:d8:a8:f1:41:e6:0a:c2:f7:04:63:82:20:6d:17:
         4a:e6:5d:1f:01:f4:5e:a2:c6:ff:da:b0:5a:bc:c8:ed:aa:61:
         c3:9a:96:9c:6b:38:9a:1e:65:9a:5e:ef:30:12:d3:2c:2f:be:
         43:50:2c:83:0f:ad:1a:46:36:e5:64:df:e5:fd:95:33:3e:82:
         a5:c3:21:d7:80:92:ac:7c:a8:7e:a6:13:0e:84:79:dc:e5:42:
         f9:b9:9e:e6:0b:02:e4:63:7a:e7:d5:88:91:84:a7:96:51:f8:
         f2:39:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:34:24 2025 by rpki-client