Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6c1d73b-f2c2-3f02-a795-b4b741c9b6e6.roa
File:                     b6c1d73b-f2c2-3f02-a795-b4b741c9b6e6.roa (raw, json)
Hash identifier:          Zi+ioMUG/2eoNn9BVslrPrfLvuboEYtWui+1902q21Y=
Subject key identifier:   8D:CC:70:34:3A:19:A6:E4:F3:BE:0D:40:A3:D4:E9:11:54:CA:71:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A85B9D276837E1EBB02880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6c1d73b-f2c2-3f02-a795-b4b741c9b6e6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.238.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:5b:9d:27:68:37:e1:eb:b0:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d29c6f48-bf0d-4f22-9238-90fe8ebbb55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:94:55:37:bb:42:25:dc:67:b2:72:78:f4:
                    e8:43:ec:91:fe:84:e8:b7:89:24:d3:0e:db:88:3e:
                    23:b6:20:40:a0:a7:67:88:42:e4:a5:c3:10:0c:2c:
                    38:5a:fc:1f:1b:3a:f8:4c:83:49:07:32:e9:4e:33:
                    67:a5:55:46:69:b1:54:4e:07:82:f7:86:d8:ff:d4:
                    02:ef:f6:2f:76:59:1d:e7:8e:03:67:26:ae:1d:aa:
                    96:12:5e:15:a8:c7:42:b0:9c:7c:ed:13:97:2d:16:
                    bb:cd:7e:d6:cb:01:2e:75:e0:da:dd:c1:4a:18:8e:
                    e5:f4:11:5a:e4:cb:d1:69:18:1d:08:42:be:06:b5:
                    e8:b9:df:df:1a:e7:ad:c3:8b:64:70:d6:ad:ac:a0:
                    7f:cb:55:52:18:3e:f4:de:de:74:75:dc:74:c6:c7:
                    c2:fe:25:8d:c7:d5:aa:3c:c5:4d:a7:aa:6f:c6:2a:
                    22:dd:00:86:71:df:c1:64:7e:47:1c:79:24:50:8c:
                    d1:a3:75:9b:a6:52:6d:3d:98:86:1c:6d:04:e4:3a:
                    bd:e1:e3:47:a4:7d:a3:73:da:b6:01:c8:f9:fb:88:
                    16:6b:41:8d:a9:5d:2c:1d:5f:74:9e:b0:ba:10:af:
                    c0:9d:6f:35:5f:0c:8c:9d:cc:6a:d7:fb:92:0d:27:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:70:34:3A:19:A6:E4:F3:BE:0D:40:A3:D4:E9:11:54:CA:71:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6c1d73b-f2c2-3f02-a795-b4b741c9b6e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:bb:ab:df:3e:02:38:3a:86:82:1b:86:6b:db:cf:32:61:63:
         1a:70:8b:16:31:09:d4:78:e4:01:be:51:c3:e3:07:8a:0a:be:
         25:dc:97:38:38:43:49:1d:b4:1c:9d:ad:a1:62:fc:1c:de:bf:
         58:1a:60:69:d2:ab:72:8b:9e:27:1a:a3:59:ea:19:ad:46:02:
         ee:ac:99:a8:0b:4b:94:71:a8:93:3a:a1:d2:3e:3f:59:12:54:
         99:74:18:1f:5b:54:6c:fb:05:2b:73:38:fa:f7:c7:98:9b:f0:
         66:6e:95:d7:c8:95:26:f2:a4:62:3f:22:50:4d:76:f3:e6:64:
         a1:8a:04:4c:e2:6c:87:96:d4:7e:9f:6d:87:b5:ac:48:85:85:
         f8:cc:ac:94:f2:d4:1d:7f:85:9b:af:f6:84:7f:c8:1b:13:a0:
         3a:ff:cc:1e:02:79:b9:9d:78:71:2d:0f:be:93:2e:02:d5:1a:
         fd:76:04:cb:06:d5:7d:3d:30:60:73:03:6c:25:58:1f:47:43:
         b5:23:1a:1e:50:3f:ef:8f:66:d5:3d:97:c1:72:bf:a8:5a:2e:
         9a:71:7a:c3:f1:18:22:b8:48:55:c3:b6:dd:13:a7:87:19:8b:
         ba:76:ba:82:f7:f2:95:74:08:48:82:57:40:d2:60:19:6e:de:
         e1:99:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:25:35 2025 by rpki-client