Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94447c1-54ae-3c68-b9d7-9a997a773972.roa
File:                     b94447c1-54ae-3c68-b9d7-9a997a773972.roa (raw, json)
Hash identifier:          Y8bxeM6qIK4uHp8oIKu4yzIl61pd/zRua4vWoh9xKDQ=
Subject key identifier:   9D:93:B3:51:40:F7:A3:8D:E1:B7:CC:F8:D7:F1:84:E7:7A:EB:3E:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7CD9CEF1F8D197F8CFB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94447c1-54ae-3c68-b9d7-9a997a773972.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.25.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:cd:9c:ef:1f:8d:19:7f:8c:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=efc67b44-bd25-46df-9611-3507fd91e1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:7c:f7:7f:db:4d:c7:fc:9f:af:69:24:54:
                    0f:bd:5a:cb:a7:e2:39:3f:9b:a7:73:40:61:e4:18:
                    ba:60:cc:90:1f:ce:3a:5d:55:39:de:67:4b:4a:6f:
                    0d:8f:2e:9f:0a:28:b1:80:dc:fa:ad:a1:0a:68:32:
                    d1:b1:6a:e5:78:bd:c2:7b:12:20:ea:e9:54:67:46:
                    65:5e:0e:4d:03:87:3c:09:53:39:0f:59:4c:79:f5:
                    47:17:78:1e:82:62:52:8d:82:77:95:42:8a:7e:fd:
                    fc:25:d8:70:80:57:36:ea:c3:92:d5:25:50:09:af:
                    11:79:f6:6b:87:94:dd:33:f2:2c:4d:67:72:9e:e3:
                    44:07:d7:63:aa:2b:59:bf:a3:db:7b:7e:74:53:da:
                    7c:ca:8a:17:37:46:9d:cd:1a:af:76:64:b3:d8:60:
                    aa:0e:d4:00:77:e3:e3:fb:1a:7b:8e:d3:78:de:d7:
                    fd:e7:8c:9e:45:b4:8e:66:eb:3a:a5:6c:ee:94:76:
                    f2:f8:5f:c9:10:33:c0:b0:e2:c4:d4:53:01:92:f9:
                    26:10:b3:3d:dc:9a:30:ab:41:15:1e:d5:d4:1a:00:
                    df:b2:df:d9:29:25:ba:78:d3:23:ff:99:26:51:21:
                    94:04:c1:15:11:0d:53:19:2f:2e:31:76:e8:c3:03:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:B3:51:40:F7:A3:8D:E1:B7:CC:F8:D7:F1:84:E7:7A:EB:3E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b94447c1-54ae-3c68-b9d7-9a997a773972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:2d:e5:3c:5c:9c:4e:38:d1:40:78:93:5a:3d:9b:bf:6a:
         37:05:71:a3:be:8a:7c:e4:0e:89:7c:3f:53:3f:63:00:b3:d0:
         26:62:0e:a1:f5:e7:3a:6c:ce:37:8d:f5:17:08:e6:81:93:20:
         21:b2:8e:31:c7:77:a9:20:5c:47:9e:c1:3b:43:bf:5e:64:0c:
         d1:29:12:45:0a:32:f4:57:3f:ea:21:15:63:f8:58:66:fc:9e:
         2f:2f:a3:71:f5:99:39:4a:9f:8a:4a:bb:fa:9a:b4:56:0f:dd:
         19:77:f4:2f:82:c5:e0:5c:dc:d2:d1:e1:d8:67:b0:cb:a6:e8:
         4d:8a:b3:bd:34:d2:9b:1d:2d:a8:44:dd:eb:e9:b1:0e:58:9c:
         51:b5:46:92:67:c4:8d:27:8c:27:d6:33:54:f1:d6:05:4e:7e:
         a4:9b:51:fe:40:12:89:19:dd:b0:59:12:cb:3b:65:aa:3f:a4:
         c3:7a:68:64:ff:c3:63:cd:3c:b1:3a:85:aa:1a:dc:56:02:ea:
         c3:4e:f9:ef:69:c9:46:e6:c3:f3:dc:c5:25:8f:e9:2f:1d:05:
         39:12:d3:12:39:e6:b4:bd:6c:33:a3:79:ad:a6:5c:cb:2f:e1:
         8e:a9:f6:7e:51:5e:c8:f0:3a:9c:cf:f8:07:af:01:cb:3e:8a:
         63:13:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:58 2025 by rpki-client