Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818bad12-679d-3c7f-a426-c5d7252d3d03.roa
File:                     818bad12-679d-3c7f-a426-c5d7252d3d03.roa (raw, json)
Hash identifier:          kmIw43C6Dv8KzP4HH8p50acV5/+/PjeqBcKBtcJJ3Hs=
Subject key identifier:   27:4B:16:E3:88:80:00:9B:EE:5A:85:16:BE:11:23:54:FC:72:E0:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A825C389A307B23919C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818bad12-679d-3c7f-a426-c5d7252d3d03.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.119.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:25:c3:89:a3:07:b2:39:19:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=61645bec-1cf7-46c5-a4ec-7c79fa03fe1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:04:08:fe:b1:c2:23:28:da:a9:34:40:06:
                    03:e7:ab:27:85:86:c0:04:02:0c:73:6a:c7:ea:24:
                    49:c2:c8:17:3c:dc:f7:31:fb:e9:c3:ab:fa:12:27:
                    6a:12:57:00:d9:06:da:94:76:33:2c:7d:82:44:d1:
                    6a:5b:24:b9:b0:70:e8:ee:d3:02:de:e9:85:fe:bb:
                    8e:c1:d6:62:69:60:68:de:3a:53:b3:87:92:97:44:
                    bd:4b:fc:68:eb:5d:ee:4a:9c:55:e4:00:e3:0b:11:
                    97:97:71:42:23:c7:f3:03:d4:bd:1b:18:d1:13:a9:
                    5d:d1:bb:53:dc:05:42:31:25:c6:2e:3b:65:6e:d8:
                    0c:23:02:a3:4a:fa:ea:a1:4f:08:c8:5f:fe:f8:0f:
                    53:44:bf:09:bd:2c:d0:32:e0:d3:7f:e2:67:5e:49:
                    88:21:bd:61:5a:aa:23:d9:48:35:09:f3:f4:5e:48:
                    42:32:5a:e5:1c:4c:e1:f4:b3:88:ab:0d:7b:c8:46:
                    b4:a5:ad:fe:c8:07:29:fb:4e:4f:d4:3f:f4:d7:3d:
                    36:78:19:96:f1:a2:24:d8:c1:ca:fd:8f:41:45:36:
                    9e:c6:f9:df:af:0d:b6:76:b0:2e:5a:5a:59:5d:ba:
                    07:5c:d1:63:81:ca:38:5d:46:e4:c3:f3:31:d5:c0:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:16:E3:88:80:00:9B:EE:5A:85:16:BE:11:23:54:FC:72:E0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818bad12-679d-3c7f-a426-c5d7252d3d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.119.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:80:6d:68:cc:29:0f:f5:3a:00:38:18:c6:98:18:4b:24:4b:
         b3:f6:ce:bb:50:31:a9:52:b0:c0:d9:db:1f:5b:87:2a:ea:39:
         6d:84:d5:bb:4f:a3:1f:9d:6e:56:a0:b9:27:d6:89:4b:47:98:
         e8:ce:d0:f2:e0:38:6c:2f:45:75:26:8a:5a:cf:63:8a:99:b5:
         e5:e0:3d:bc:ae:86:99:27:99:6c:2b:26:a8:43:99:6a:4c:d5:
         c7:62:f5:4c:56:49:4e:d1:b4:e2:b5:48:61:28:3f:af:c1:ac:
         c9:59:20:0a:62:9f:9d:b2:b5:0f:5b:49:91:03:6b:85:1e:8d:
         0a:53:a4:e7:dd:0e:6a:7e:1c:46:67:3d:cf:19:51:91:6f:04:
         4d:1e:a4:60:82:5b:75:ad:62:34:5d:07:37:3d:9c:56:64:91:
         cf:00:6e:d1:26:a9:6c:91:6e:1b:2b:50:81:0f:8e:1e:69:c5:
         e0:5b:d6:76:4a:a8:b4:0e:b4:40:16:57:36:40:74:90:8e:a2:
         db:4a:e3:30:a5:95:9b:04:5b:d0:ee:cf:8f:b6:57:4e:af:0e:
         1a:fe:6d:23:c8:99:ae:d7:8b:58:9d:e2:7a:7a:11:f3:0a:11:
         c3:46:13:72:27:02:86:6c:24:46:01:2c:d1:f6:bb:a7:41:d8:
         e3:16:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:23:58 2025 by rpki-client