Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc5401e-c9c6-3a41-a1c7-ceb65f70afe6.roa
File:                     9cc5401e-c9c6-3a41-a1c7-ceb65f70afe6.roa (raw, json)
Hash identifier:          hsLUbDB140N5ArpsafuN2Rn7Q3KFSZ4XEye1daWgWqs=
Subject key identifier:   A8:A1:7A:1E:73:5F:EA:8E:E1:1F:A4:FD:9D:98:CA:03:54:67:F4:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A92E97BCC362A58E2DF214
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc5401e-c9c6-3a41-a1c7-ceb65f70afe6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.77.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:2e:97:bc:c3:62:a5:8e:2d:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9d6d2b84-7504-4a7e-8afd-0de44ec2a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:26:38:0d:f9:78:79:14:37:f9:cf:49:f6:
                    cf:b9:ee:17:e5:d0:4f:17:9e:eb:06:74:f3:d3:47:
                    e9:ab:7e:36:92:42:ca:67:8f:8a:ab:5e:7f:12:5c:
                    47:f0:49:e1:27:bf:b8:b3:76:1e:60:56:80:52:5d:
                    f4:89:99:86:c7:95:67:28:40:47:97:6f:b0:74:62:
                    1c:bd:87:98:41:b5:de:39:b0:60:e2:11:19:57:eb:
                    88:5e:bd:7c:57:74:e9:ea:89:af:5f:ac:4f:19:7a:
                    81:93:ec:46:26:c5:6d:bb:ee:a3:5e:6f:14:1d:47:
                    ff:19:7f:fb:ba:31:bb:c9:48:2b:ea:9f:66:3a:1a:
                    3a:2a:b0:d1:c4:e0:87:b5:4e:60:4c:eb:58:9e:08:
                    0a:aa:55:1f:42:08:b9:5f:48:d3:09:ed:d9:d5:90:
                    68:87:2e:57:a5:91:1c:36:b1:48:b0:9c:de:25:2b:
                    e6:4d:2c:57:c2:6a:38:08:d7:a4:03:58:d1:c9:a7:
                    0f:42:02:ec:b8:b4:fd:0a:91:3f:50:31:31:a2:c6:
                    b9:27:bf:95:25:ae:c5:87:ea:3a:1d:01:08:e7:5d:
                    07:03:dd:66:53:15:4c:40:88:10:af:23:f1:21:27:
                    29:61:12:b3:ad:78:75:8b:26:c6:e7:db:8f:ef:c7:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A1:7A:1E:73:5F:EA:8E:E1:1F:A4:FD:9D:98:CA:03:54:67:F4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc5401e-c9c6-3a41-a1c7-ceb65f70afe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:e3:33:f8:81:42:3f:9a:c4:1d:27:c4:e0:02:69:96:67:24:
         b6:22:1e:04:77:52:49:9f:67:30:0d:f5:b6:8b:28:ff:30:1e:
         f9:30:9b:bf:f4:7d:b2:17:41:8c:f6:62:e9:cf:0f:c8:49:bd:
         9d:3e:f5:6d:d3:5b:97:d1:55:59:54:32:7f:2a:2f:a4:db:db:
         26:72:85:8b:39:a7:89:b2:9a:8c:df:fb:4c:86:f8:1a:a0:f3:
         23:47:1d:72:dd:57:b7:9f:e4:ae:0a:7f:23:4f:5f:ba:41:6e:
         e4:7f:eb:85:f5:26:25:8e:bb:43:6d:7d:31:db:91:c2:90:8f:
         dd:e8:24:49:f4:f3:d3:bc:13:d1:b3:86:0f:61:05:ff:75:e4:
         a7:a7:28:69:56:ba:80:2c:d1:86:97:2a:5d:30:11:d9:93:81:
         de:e1:f9:25:a1:1c:c8:c7:d4:fd:1a:95:ef:2d:b7:07:ac:a7:
         45:1c:90:46:19:e6:b5:17:7a:22:30:c6:23:0f:28:d2:8a:cb:
         15:01:f7:88:61:26:f4:09:ef:6e:76:6e:90:ef:90:ce:4d:57:
         5c:43:63:36:0a:15:27:6b:34:cf:d6:81:f6:8c:55:ef:97:57:
         87:61:d0:0e:a4:d6:85:5a:c8:fe:06:9e:15:04:da:a3:29:a8:
         3a:be:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:14:05 2025 by rpki-client