Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef22b2-6c93-38a3-8364-832993d339a5.roa
File:                     0eef22b2-6c93-38a3-8364-832993d339a5.roa (raw, json)
Hash identifier:          pNYEOmbTUGvawUWaLmnDnzpSRgTfw6zkgyfn/VXE55A=
Subject key identifier:   DE:48:49:47:78:7A:65:4C:CB:90:02:FD:1B:A8:09:23:20:FF:CE:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B97DC061CDE6955BE4280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef22b2-6c93-38a3-8364-832993d339a5.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        73.237.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:97:dc:06:1c:de:69:55:be:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=bb7f4495-47e9-4d4f-bc4e-7a223dc245bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:ca:20:7f:d1:34:be:9b:45:1f:63:b7:2f:
                    f1:5e:49:81:e7:86:f9:f3:66:3f:55:23:4b:16:45:
                    9e:cd:7f:17:cc:a0:54:8f:08:70:4b:9a:fe:78:06:
                    16:6b:39:b6:6a:0a:6f:c0:d1:ff:c2:c2:39:2d:44:
                    d9:76:5c:be:c8:ab:64:6f:e6:4b:6e:77:97:aa:f6:
                    87:a8:fc:d4:4a:24:6d:f7:d3:9d:b4:ab:9c:86:2e:
                    e1:07:4d:24:b1:6c:83:80:07:97:9e:ed:c1:9a:3b:
                    e1:fd:09:a1:c8:fb:f9:89:aa:07:92:ec:54:49:94:
                    3c:64:fc:d3:6a:ff:17:1b:44:ed:19:3d:ce:81:c6:
                    36:92:37:2b:d9:26:85:7b:9f:df:ed:0b:9a:75:31:
                    9a:1e:77:c7:0f:61:94:7f:d7:a2:7c:00:c4:7c:c5:
                    e6:d0:80:9c:d7:2c:25:63:60:28:d4:44:bc:25:8b:
                    7e:d7:fb:21:67:17:dc:f6:ed:1a:d8:30:d6:a4:4d:
                    45:d7:c2:47:48:00:59:19:0c:0f:c8:87:9c:bf:f3:
                    2e:0f:06:7b:ba:5d:5c:08:92:1d:41:b3:57:12:f9:
                    50:ce:34:43:7f:aa:b5:82:e0:ba:14:71:bb:5c:89:
                    77:3f:96:79:29:38:35:25:c9:43:54:e8:79:60:35:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:48:49:47:78:7A:65:4C:CB:90:02:FD:1B:A8:09:23:20:FF:CE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef22b2-6c93-38a3-8364-832993d339a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:46:12:08:3b:29:17:f3:fe:f8:91:e5:56:a5:01:6f:41:
         44:9b:91:2d:bd:f8:bd:d8:d0:4a:a8:d8:6e:f0:f0:ec:35:5e:
         72:97:cf:6a:42:61:f3:e0:6b:c8:9f:15:b8:09:9e:ae:32:46:
         30:72:3a:14:0f:77:6f:23:4d:84:09:4d:5c:96:af:a0:d5:85:
         22:51:0e:8a:0c:1a:86:02:58:e0:53:b7:81:94:dc:81:74:cc:
         56:95:82:10:21:df:59:a2:0a:49:02:d4:38:98:4a:8b:85:64:
         99:3b:4a:15:66:f2:1a:2a:6b:1e:19:fb:6f:00:da:be:b4:8c:
         8d:5c:3d:56:8d:3c:79:a9:18:3d:a8:1d:c8:a9:fb:2c:74:08:
         8b:55:39:31:76:dc:73:4b:5d:eb:ed:74:a4:ab:67:7e:fb:c5:
         cd:ef:4e:19:b2:66:47:3f:a6:d4:3f:9f:8b:e2:87:1d:56:ed:
         aa:fb:5a:44:05:82:d3:22:fb:eb:40:91:c1:5d:91:b4:84:18:
         ad:83:20:88:c3:ab:79:d2:be:46:90:89:24:b3:02:0c:bd:3f:
         51:8c:2c:71:c2:d2:39:64:d5:5d:0f:6c:d2:b5:2c:74:0b:6e:
         6f:74:5a:7b:49:07:03:5f:05:e8:d8:9d:18:46:fc:e5:ad:c3:
         74:13:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:11 2025 by rpki-client