Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9705c4-7da4-354e-9f75-4046dda2dc51.roa
File:                     2c9705c4-7da4-354e-9f75-4046dda2dc51.roa (raw, json)
Hash identifier:          KdaYJsoarN1Mk+/9zgLpOGiSCxUCriKH46G4GruHLc4=
Subject key identifier:   7F:D2:CD:8A:06:73:00:3F:75:EA:CB:63:30:32:B3:B2:0B:5E:48:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9F441A680A7F8BD619840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9705c4-7da4-354e-9f75-4046dda2dc51.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.227.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:f4:41:a6:80:a7:f8:bd:61:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=859a9ac3-54c8-44b7-8f70-9cf00e1e6ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:4a:4f:a5:91:68:96:54:75:bf:b3:ac:84:
                    d6:ad:71:80:af:f8:23:0d:3e:a7:ba:d6:7f:24:11:
                    6c:a8:cb:ba:1e:a9:53:40:29:0e:17:8b:3c:d7:e2:
                    41:df:dd:fd:de:c4:8d:3e:82:13:3d:0c:cb:fd:32:
                    a9:6b:99:e3:84:98:52:c7:5b:33:bd:5a:75:18:b1:
                    09:6f:ed:65:bc:1f:a0:ea:3a:84:e9:36:62:f8:b8:
                    2e:bd:f1:f8:c2:a3:6a:37:dd:b9:94:f7:ce:80:81:
                    9a:31:1b:12:30:0f:f7:9c:12:a0:40:9c:c3:55:32:
                    5b:ae:d1:42:6e:d7:38:3e:89:a1:1d:ed:8f:3d:9d:
                    ad:5e:c8:3e:97:85:c5:49:24:8f:43:9c:d4:64:88:
                    94:b5:a6:c9:ff:3b:b8:75:e6:30:cf:a3:27:49:99:
                    56:53:77:df:41:77:ce:fe:45:76:eb:4d:44:cc:38:
                    8c:64:3e:d6:e6:ea:e9:b8:93:1b:5d:6b:b0:aa:e6:
                    b2:a1:f4:20:47:7d:13:99:1e:6e:0e:9d:58:e2:28:
                    bf:74:f2:18:13:ff:fa:07:2e:81:1c:6f:19:f9:a0:
                    3f:ab:22:51:f0:62:09:49:e7:20:f0:fa:1f:07:84:
                    a1:47:38:71:93:ae:b4:85:a6:26:f4:71:87:8d:88:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D2:CD:8A:06:73:00:3F:75:EA:CB:63:30:32:B3:B2:0B:5E:48:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9705c4-7da4-354e-9f75-4046dda2dc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:2e:20:f7:22:7d:06:90:72:fe:db:25:cc:6e:ba:d3:0a:
         71:f3:13:c8:71:19:b4:90:a8:fb:d7:09:94:89:53:ec:dd:61:
         ff:a8:15:57:83:60:47:bb:c2:37:ee:f0:a0:a8:e7:de:fe:69:
         b3:72:ce:89:99:11:53:2f:53:49:ae:03:9b:23:ac:f6:67:a0:
         fa:33:9b:46:f6:96:de:26:5d:bf:a6:de:e9:ee:ab:93:f9:af:
         30:6b:13:da:4c:99:72:bc:b5:34:1e:50:8b:28:d0:14:91:74:
         d7:d5:dc:69:b0:ab:49:c6:0b:a3:2c:8c:1b:fa:3f:53:e8:85:
         e7:b7:e1:88:e0:61:f3:43:b3:0e:52:19:ca:00:9d:84:77:fa:
         2f:f9:c9:bb:35:91:7e:3c:48:8b:81:c4:e1:0f:20:96:f3:2a:
         e3:ad:fd:26:e8:db:b8:68:78:3a:60:da:5c:8e:93:7b:d6:51:
         bf:5b:e5:b0:37:f9:cd:82:d3:8c:8b:e5:da:05:b4:96:36:f9:
         3f:4b:0b:08:4d:c5:66:dc:9a:2b:ba:cf:98:af:14:92:c0:fd:
         21:c7:d4:af:b6:7b:bf:06:f3:a4:43:bb:20:63:6c:20:f4:6e:
         26:5c:d2:5d:e3:8a:e1:6a:d7:91:c5:b1:a7:11:77:38:71:0e:
         75:58:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:29:03 2025 by rpki-client