Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbfe6b1-6418-351d-a85d-1574c8b5b247.roa
File:                     9cbfe6b1-6418-351d-a85d-1574c8b5b247.roa (raw, json)
Hash identifier:          GvuapH6omCY8za9pVZdHvTtBThul2wm9lMh3n627+Ss=
Subject key identifier:   C9:A6:0A:31:BF:7E:C0:B1:B3:27:6F:F1:7B:AC:E7:A7:D4:91:C1:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A97E1D4F0B594FC7CE7E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbfe6b1-6418-351d-a85d-1574c8b5b247.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.25.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:7e:1d:4f:0b:59:4f:c7:ce:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e0d18010-6573-4e18-9d85-6736619a21c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:56:8a:9b:0b:33:45:37:b4:56:8f:b8:96:
                    f9:e0:5e:eb:54:cc:09:3b:67:a4:af:4f:8a:5b:f0:
                    55:0a:f1:c3:89:d1:ef:34:89:be:4c:18:b6:f7:5a:
                    e8:69:8a:73:60:27:75:87:2d:f0:60:58:75:8b:4d:
                    83:31:40:16:0d:21:2f:0b:b3:e2:bd:0c:42:17:3b:
                    85:19:8c:8d:a4:a3:8e:9e:0b:11:4b:6c:74:db:e2:
                    23:04:18:25:0e:6a:8b:f0:12:1d:12:ca:b7:9b:29:
                    47:f7:bc:c4:a2:44:a6:54:9e:42:44:79:ff:40:03:
                    5d:26:52:24:c2:b1:c0:7d:ca:d2:17:16:55:4a:48:
                    ab:13:92:e5:68:ff:1e:ee:a9:73:3f:43:a8:f9:27:
                    c1:43:94:c8:27:d6:7a:52:81:44:48:38:f5:f2:9d:
                    a2:0c:2c:2a:23:af:f3:36:f1:be:33:d8:b6:83:be:
                    36:36:95:fb:0c:b0:3d:73:05:b3:9d:17:2a:af:46:
                    2b:2d:55:74:14:02:0b:80:c9:b8:c2:4c:cf:b8:f4:
                    cf:d7:98:1e:bf:52:17:3f:3e:43:34:85:52:7c:16:
                    08:7e:c9:42:d7:71:3c:67:73:72:82:47:dd:44:87:
                    42:4d:44:ce:fb:aa:b7:a2:df:81:b5:7b:3c:23:ac:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:0A:31:BF:7E:C0:B1:B3:27:6F:F1:7B:AC:E7:A7:D4:91:C1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cbfe6b1-6418-351d-a85d-1574c8b5b247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a0:9e:ed:eb:9b:2a:e3:98:e8:16:44:aa:e3:7a:dc:f9:54:
         f4:e6:43:2a:99:f4:27:05:09:b3:cb:c3:e7:8f:8f:c0:da:61:
         11:bc:b9:72:09:96:21:f3:19:60:c6:23:32:37:8d:40:32:22:
         b9:db:1c:80:cb:13:24:b7:a9:2c:56:10:4d:bc:ca:d5:b7:da:
         83:e1:ff:0b:3a:b1:6f:b3:c2:1f:aa:46:67:ea:72:ac:eb:c7:
         f2:21:bd:c6:42:02:63:a2:a7:5d:f8:3b:ef:90:3d:4c:40:9c:
         87:32:93:64:cc:ea:db:2f:6d:42:11:25:3e:7e:7c:cd:41:e0:
         0c:25:0d:c9:00:ad:fd:cf:8b:50:63:e3:63:66:9c:67:3f:e1:
         fe:8c:1f:24:fd:8b:c5:0d:b7:2b:77:8d:5b:ac:f4:06:67:de:
         d6:b6:3b:21:65:de:c7:3f:fb:c3:07:c5:94:09:54:f3:f7:9a:
         85:6d:cf:73:2f:ac:6f:8b:ce:9c:23:98:4b:cf:dc:11:00:4e:
         e5:aa:d0:30:d0:ab:eb:84:ee:79:78:3e:97:93:1f:52:5d:ba:
         b7:b4:3b:d1:b8:24:00:14:bd:70:f7:2f:27:c8:c2:68:c2:f9:
         2c:9c:a5:d4:1b:ec:68:38:3a:fc:0f:2e:97:bc:37:a5:f5:33:
         ae:aa:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:30:27 2025 by rpki-client