Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b25154-ea04-3e88-a891-ffa592704e81.roa
File:                     00b25154-ea04-3e88-a891-ffa592704e81.roa (raw, json)
Hash identifier:          2xvXXO/5F7RTt8sX54bPwPGBkXNsgFklV1ukyfzeGjI=
Subject key identifier:   9C:D1:21:AB:61:1F:50:77:6B:32:53:C2:0D:45:55:9B:80:12:CB:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECFDC664FE8DBBFE3E2D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b25154-ea04-3e88-a891-ffa592704e81.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.183.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:fd:c6:64:fe:8d:bb:fe:3e:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9d88c6d3-c6dc-4545-931d-dc26b174bfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:3c:3c:cc:12:c4:65:60:96:8a:be:73:67:
                    91:8b:94:4a:99:f1:8c:5f:ce:75:3c:4c:6f:90:45:
                    00:00:58:55:19:5e:15:40:8f:df:da:22:17:27:bb:
                    74:b9:16:48:c4:9d:bc:df:15:ed:d4:7a:85:22:af:
                    ab:fe:2f:2d:22:63:f4:ef:c6:30:74:dc:da:a2:62:
                    bc:d7:75:f2:b9:07:5c:ce:0b:94:65:7c:a4:1b:ea:
                    7b:fc:99:67:1e:b9:77:ee:57:45:76:4f:56:29:67:
                    00:fb:53:30:b9:40:cb:e8:f0:86:51:4f:22:9a:a1:
                    37:74:a7:6b:64:94:d9:de:d3:dc:b9:91:dd:21:46:
                    28:ec:da:ba:fc:f2:92:14:71:10:32:62:18:4f:a8:
                    3e:f6:61:a2:ec:fc:ce:93:2a:13:7d:9c:12:40:bd:
                    00:4d:27:2f:50:ac:1f:90:05:8d:fd:31:b8:01:d8:
                    cb:0c:48:1f:53:bb:d3:4b:d4:fe:f1:d8:cd:a3:c7:
                    15:26:ab:5e:5f:f9:86:b1:b0:eb:47:7f:22:32:91:
                    d1:e8:75:f6:f3:41:cf:33:ef:cc:e5:02:0d:bc:42:
                    f1:cf:96:e0:90:d2:40:4e:1f:3c:b7:d3:b2:a7:12:
                    58:00:37:a2:d2:f7:e0:a8:e9:fc:cb:23:e4:61:b9:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D1:21:AB:61:1F:50:77:6B:32:53:C2:0D:45:55:9B:80:12:CB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b25154-ea04-3e88-a891-ffa592704e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.183.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:e9:b7:c9:df:8b:54:e0:3f:96:b2:c5:2b:09:3d:db:13:
         f8:75:f2:ee:31:1c:48:7f:ab:03:0e:85:d9:c8:db:09:1b:17:
         d3:f2:2c:d8:35:ed:87:59:56:2b:cc:18:df:c0:d0:35:88:df:
         c5:92:dc:6a:df:ab:cf:f0:dc:1a:bb:b0:18:eb:ad:d4:19:62:
         14:8a:6e:58:53:dd:33:9f:db:96:70:ce:70:69:33:a6:13:91:
         05:93:5a:32:98:66:16:31:d6:29:93:e2:5b:f1:be:e8:a8:2e:
         0a:42:50:9f:31:5d:a9:00:ea:26:e3:f6:46:54:3a:ea:31:f0:
         70:f1:b9:99:06:ea:f8:40:33:e2:3e:66:2d:31:59:50:d5:e3:
         89:f0:0e:3f:97:85:2c:c0:6d:b2:db:30:1f:1d:0a:8a:29:c6:
         fe:17:a6:b9:48:0b:7a:aa:c3:ff:7f:1d:b1:40:9e:e4:3f:37:
         39:e5:83:aa:ef:15:aa:d7:cb:7a:cb:06:6c:47:c7:06:a0:e0:
         ac:89:47:35:2c:0f:4c:92:67:8e:71:08:de:2d:2c:26:4c:52:
         97:a6:e2:86:5f:f3:e6:9a:a5:15:d9:93:f6:c8:a1:20:d0:32:
         79:eb:42:86:37:8b:f8:21:78:f0:58:a0:73:22:ea:b9:7a:b5:
         0c:24:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:34:43 2025 by rpki-client