Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ad5ae23-9e27-3edf-8577-bcef84195405.roa
File:                     3ad5ae23-9e27-3edf-8577-bcef84195405.roa (raw, json)
Hash identifier:          K0RfNsk5ldffrUjXEo4eSZkpZUWcXjxAwBKdebLVuS8=
Subject key identifier:   75:75:F7:54:57:13:D3:03:D1:52:9C:01:1E:02:4A:F7:4F:DB:AD:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA010E1583758177FD2790
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ad5ae23-9e27-3edf-8577-bcef84195405.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.238.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:01:0e:15:83:75:81:77:fd:27:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0c703e56-8375-4e44-88d4-a469334cc656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:3a:99:ea:57:4c:0e:08:57:54:02:a6:7b:
                    34:63:5d:d6:38:7c:ab:83:9d:36:00:b8:26:a5:30:
                    53:bb:10:27:ed:a2:85:01:19:67:ad:ac:d1:e3:be:
                    3a:10:b6:10:05:93:b8:29:28:64:a3:7f:a0:d6:91:
                    d0:d6:5d:cf:e6:8d:4e:88:dc:06:50:c4:bf:b7:d0:
                    21:59:9d:36:13:60:0f:35:01:1d:c1:72:82:31:3c:
                    5b:8e:d7:d2:48:a2:c0:44:a0:df:11:b2:2c:15:56:
                    78:d8:f9:50:cf:38:89:2a:08:4a:0b:9d:e9:ab:6c:
                    ee:e4:d7:a5:00:f6:c2:18:f5:a4:15:ef:b5:41:94:
                    aa:ab:82:4d:1c:ed:e8:ad:78:96:c1:1b:89:ec:fa:
                    46:4c:e5:45:a6:30:2b:66:ba:13:2b:c4:86:a0:0c:
                    90:59:6d:b2:94:bf:a7:00:c5:95:59:be:f9:bb:88:
                    07:43:e7:e2:62:8e:d3:98:32:38:95:0d:b6:47:36:
                    52:77:17:d9:3d:ee:22:e3:76:fe:d5:17:43:7f:15:
                    97:4f:e7:a0:af:2c:ec:13:22:07:58:68:f4:36:12:
                    70:fd:61:77:50:63:9f:4f:d5:99:e6:7c:ca:f7:39:
                    fb:f4:3f:4f:ac:0e:57:1b:88:64:49:9f:38:b7:30:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:F7:54:57:13:D3:03:D1:52:9C:01:1E:02:4A:F7:4F:DB:AD:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ad5ae23-9e27-3edf-8577-bcef84195405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:40:7a:b2:ef:d8:b1:c3:00:ed:4c:87:cf:6d:10:2c:3e:5e:
         8a:46:2a:d7:68:df:d0:89:5c:75:e1:ff:5f:93:54:d1:3f:fa:
         06:3b:c4:74:de:2d:df:b6:d5:1a:2c:21:a5:e2:03:e9:7d:be:
         18:19:13:c9:97:29:01:ae:b8:fc:42:a4:fb:cc:b9:70:3e:6f:
         17:2f:d1:40:54:f6:be:7e:d4:e0:a1:97:bf:fb:de:3d:83:88:
         cb:58:03:c9:b8:fc:eb:76:3d:d6:3a:99:54:95:22:4f:e0:b2:
         91:85:5a:2d:82:40:67:b8:b3:db:de:6e:a1:53:cf:22:82:8d:
         66:85:3a:d1:37:7f:aa:48:60:b9:4b:bf:2f:d4:fc:22:f8:85:
         0a:2f:67:93:e8:e6:93:f9:a1:79:17:5e:24:81:b9:61:11:c4:
         db:01:53:37:b2:90:f9:eb:7a:21:c0:30:94:1b:19:09:fe:fc:
         52:c6:dc:55:01:3b:97:a1:35:83:6f:09:ff:ee:cf:1e:5e:b2:
         e3:d1:04:4e:17:b8:c1:18:5a:a3:0d:bc:0f:c4:66:17:62:30:
         75:4c:c7:be:36:21:9f:e7:ee:16:e8:72:ff:ca:9a:9b:31:35:
         13:7f:f4:84:97:1d:38:ee:ab:3e:e2:f0:7f:6a:16:94:56:23:
         39:12:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:48:04 2025 by rpki-client