Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54818af6-ff82-3a50-8220-9f5af416822c.roa
File:                     54818af6-ff82-3a50-8220-9f5af416822c.roa (raw, json)
Hash identifier:          sNioDY6czM4N4qD/SrCI5d45iqKc39jmvG94ZDmAAy4=
Subject key identifier:   E2:E2:2F:6E:6D:DD:6A:F8:5D:6C:24:3C:26:19:8C:A5:98:13:60:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A917FE737B368874063340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54818af6-ff82-3a50-8220-9f5af416822c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.206.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:17:fe:73:7b:36:88:74:06:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=4212491a-f2ae-41cb-903f-3eee002351e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:31:9f:f4:02:ec:9d:43:bb:5b:37:ad:53:
                    98:b8:d6:0f:87:51:37:d8:da:fe:87:8e:d3:6b:a9:
                    a9:72:eb:7d:9e:95:31:e9:fe:f5:e9:c6:39:8d:26:
                    cd:c3:bc:ba:d1:1f:41:af:68:fe:c3:f2:70:2f:b0:
                    7e:e7:de:25:00:ed:a1:e7:ad:ff:98:ae:ca:be:4b:
                    df:17:89:1e:03:37:29:b4:fc:85:ef:91:b9:bb:84:
                    a5:3c:46:b1:94:f4:60:51:4e:51:c0:b6:fb:ee:54:
                    fc:6e:a9:92:ac:63:76:74:51:4c:19:5b:33:b7:87:
                    cc:97:1a:4b:5d:08:fe:e5:92:8f:cf:aa:7d:d7:f9:
                    7c:25:35:99:09:b3:a8:67:e6:92:fb:1d:61:ab:14:
                    e5:d7:69:7b:62:b1:1b:d2:33:5e:e3:fd:71:3e:ef:
                    30:9b:d0:ad:a3:0e:a6:cc:03:71:d3:a7:c6:57:ea:
                    ca:f6:00:4f:38:15:de:e4:9f:2c:fa:be:63:de:04:
                    5c:2d:2b:2c:4e:73:ce:be:7e:ad:e6:13:0c:6d:59:
                    89:0c:36:98:14:e2:20:e4:12:26:4d:dd:60:e3:5b:
                    57:e8:55:9b:ec:67:19:1a:bf:0c:4a:1d:20:25:f5:
                    d9:78:a0:a8:d1:e3:ef:cb:92:e7:1d:fe:78:43:6e:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E2:2F:6E:6D:DD:6A:F8:5D:6C:24:3C:26:19:8C:A5:98:13:60:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54818af6-ff82-3a50-8220-9f5af416822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5a:6e:48:8c:6e:b8:b5:d5:6c:08:0d:32:3e:f9:c5:08:63:
         2d:bd:52:1f:6e:3b:01:80:d8:b6:88:98:71:ec:e9:00:53:5e:
         9a:85:93:64:69:ff:e7:7e:b6:58:98:43:4c:3c:cb:17:b2:50:
         1a:66:49:4d:45:6e:36:ac:03:90:0f:ff:ab:38:a4:98:9a:4b:
         9b:61:c9:0d:fd:05:d0:eb:d7:8c:5b:63:07:86:c3:8f:24:4a:
         0b:2f:a6:a5:bc:90:c1:25:b7:c5:fc:6d:36:8a:11:9c:30:76:
         c6:6b:3a:24:3d:b4:52:e8:0f:99:25:f1:c1:60:79:b6:49:19:
         00:85:0f:41:54:07:f6:e5:25:9b:61:cd:04:5b:fd:aa:ce:69:
         55:a0:8c:af:be:de:27:27:37:42:9e:93:8b:f9:88:d3:5a:ec:
         64:b1:b0:0e:55:85:fc:6b:6d:1b:b1:8e:09:54:c3:0c:0a:ad:
         ec:50:20:21:62:b0:84:86:2f:ba:49:51:eb:c5:1b:5d:63:c2:
         ea:4a:a5:f2:ee:91:e8:9d:38:86:c9:cb:73:68:51:16:73:d0:
         42:67:3f:51:56:8d:d3:ef:ab:53:bc:83:9a:eb:79:6c:97:e7:
         37:19:dc:94:68:30:3e:fa:27:c1:24:3e:de:79:71:45:03:7a:
         5b:84:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:39:23 2025 by rpki-client