Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e3b3c7-8c92-3403-8cda-5bebc7cd8ba6.roa
File:                     a4e3b3c7-8c92-3403-8cda-5bebc7cd8ba6.roa (raw, json)
Hash identifier:          CCoRaw0vg/tDSsQz/m6kiu6xe+iB+OMG7eJxz0pl2z0=
Subject key identifier:   3C:AF:91:23:CE:52:2B:DD:B8:46:98:38:4A:5B:89:55:50:BE:C9:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A97E3BA47A935B8095EC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e3b3c7-8c92-3403-8cda-5bebc7cd8ba6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.25.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:7e:3b:a4:7a:93:5b:80:95:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e1a476f2-b8f4-4c58-9113-df84449903e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:be:67:31:83:53:ec:7d:73:89:5b:4e:04:
                    40:57:fe:84:b5:85:a2:87:c7:33:ff:da:70:ec:03:
                    70:89:a0:19:e3:94:38:f2:46:13:48:15:a0:8d:be:
                    f1:40:b3:97:d5:f4:b4:ce:69:22:4c:a6:93:35:a1:
                    9e:52:47:7e:d0:93:e7:09:94:10:cd:3e:cb:a3:5f:
                    7a:21:29:8d:9c:d5:f0:f3:c4:be:a0:3e:30:eb:d1:
                    22:62:9c:be:d2:0e:b1:41:ea:6a:be:29:a3:f7:9a:
                    ae:bb:d0:0b:d5:22:6f:ee:2a:6b:07:cc:a8:84:17:
                    07:e8:a2:7f:2a:ce:b7:eb:e0:66:20:4e:2f:62:0b:
                    52:a8:6d:84:bd:c6:d3:44:f0:17:d5:55:c9:d8:3b:
                    7e:0f:28:19:c5:6b:68:3d:54:cc:79:91:55:f6:85:
                    51:85:b7:16:f4:15:95:87:9f:17:0c:49:48:0a:4a:
                    c1:49:e2:70:5a:38:da:5b:ce:58:87:35:ca:dd:35:
                    f8:66:47:bf:85:d0:97:3f:d2:8b:c2:cd:9c:b4:ae:
                    bc:4e:b7:69:d1:3d:16:93:3e:a1:ef:9b:ed:1e:dd:
                    45:5e:51:27:db:a9:27:26:6a:c0:5b:b4:d9:88:d6:
                    ef:78:a4:92:98:60:25:cb:35:09:83:b2:62:87:c7:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AF:91:23:CE:52:2B:DD:B8:46:98:38:4A:5B:89:55:50:BE:C9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e3b3c7-8c92-3403-8cda-5bebc7cd8ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:05:07:d8:17:9f:86:02:7a:6a:5f:24:09:2d:4d:73:80:89:
         a9:3e:c1:94:6d:e6:17:23:0d:8d:e4:78:93:1e:db:97:ca:7a:
         a4:b0:3c:92:ec:d8:9e:fc:c0:51:d8:6c:28:42:eb:60:ca:93:
         45:15:d7:fc:d5:b9:7a:01:91:e5:f7:79:00:7c:d5:d4:94:23:
         64:e1:57:a7:c3:f9:bd:bb:9b:4d:77:62:01:61:7d:68:e9:cd:
         81:b0:75:3f:4e:5f:b3:92:ad:8e:ba:8a:15:ae:ad:9a:1f:f5:
         d5:9f:eb:e4:b5:dc:7b:df:f5:ff:2c:ad:2d:ef:4e:be:e8:e4:
         7c:b2:6b:31:6b:4d:94:7f:5e:61:63:66:61:af:11:0d:de:39:
         55:7f:84:57:df:29:38:5e:69:0c:5a:0e:c1:a5:94:90:63:12:
         65:51:81:03:65:b6:f0:d6:07:06:ba:67:08:71:c3:7c:e0:bd:
         11:f6:12:74:ea:3e:4a:17:bb:c3:bc:57:d3:07:0d:52:cc:c9:
         64:d8:39:ea:d9:19:cf:39:43:6f:14:5c:1c:1a:17:a4:27:1a:
         d9:bb:99:46:99:d1:9a:82:a0:be:6c:f7:2a:fb:d3:62:42:88:
         bc:1e:f1:76:90:3c:bc:68:29:1c:05:4d:cf:0f:b1:2a:83:1e:
         2c:b3:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:22:50 2025 by rpki-client