Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10060b2a-9d8f-3578-950c-f49f31d81408.roa
File:                     10060b2a-9d8f-3578-950c-f49f31d81408.roa (raw, json)
Hash identifier:          DNbRPAGdy5pHtsn04exRRGiS70u4CBbWGZPWIK6MOX8=
Subject key identifier:   8C:97:56:6D:EB:DC:5E:E7:C9:BC:F4:5F:31:1B:A5:65:BD:FA:27:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC5C98EA5908A6D227F080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10060b2a-9d8f-3578-950c-f49f31d81408.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.69.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:5c:98:ea:59:08:a6:d2:27:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=01795485-d847-4c78-9a6f-748d883d45d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:37:b2:bc:5d:f9:29:cc:f4:18:ae:ef:9f:
                    a1:27:18:9c:e4:82:5a:e1:22:04:b9:91:f1:a2:b6:
                    b1:6e:ec:48:0b:a4:36:66:59:26:94:7b:4e:ef:72:
                    74:f8:f2:68:a8:e6:05:92:33:54:ea:a2:2c:3f:15:
                    b5:83:f0:0c:93:f9:a1:0c:17:b9:bc:ff:cb:4d:99:
                    b2:64:19:34:a8:cf:0b:fc:09:34:2d:f3:9b:24:fd:
                    a3:d7:41:49:27:43:ec:31:57:7e:88:54:00:c7:e1:
                    b0:86:27:1a:e1:0f:69:ea:07:66:6c:03:20:86:ee:
                    a2:b7:fc:0c:65:37:ab:9c:96:b7:6b:b7:85:2b:cf:
                    bd:21:8e:49:5a:82:41:7a:9c:e5:af:90:34:2c:77:
                    8f:16:c9:5e:53:af:2a:bc:39:f0:4f:d0:d5:9c:c1:
                    df:bd:fc:2d:c5:ee:8c:14:bd:f0:f5:e2:fc:1f:85:
                    80:22:ad:a8:49:5d:d9:37:d7:3f:d9:36:72:d6:66:
                    9c:01:a3:2d:9c:25:61:c5:b6:8f:02:f9:7d:4e:ca:
                    0a:6f:d9:2b:33:b5:fc:5e:6c:b1:b3:6f:c2:11:ec:
                    fa:d1:a2:b7:e3:94:11:17:8b:fb:1f:95:ea:d5:3b:
                    34:e9:15:42:26:52:5e:1b:e6:29:ff:9e:52:a5:36:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:97:56:6D:EB:DC:5E:E7:C9:BC:F4:5F:31:1B:A5:65:BD:FA:27:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10060b2a-9d8f-3578-950c-f49f31d81408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.69.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:9f:cb:b9:5a:1d:d8:6e:09:f1:60:ca:a9:88:af:35:bf:
         f7:f6:98:27:d0:a8:e1:e1:59:eb:54:76:c6:4e:fa:09:b4:bb:
         7a:16:39:6a:8d:f6:80:4f:85:a5:e4:f2:47:81:f6:cf:87:92:
         6b:90:93:1e:9c:94:9d:c5:63:00:c5:ad:7a:8e:c9:5f:4c:60:
         27:93:bb:d2:80:b4:b3:67:37:09:87:51:ec:85:d3:70:8a:63:
         63:9e:f1:49:22:eb:4b:98:51:9b:8d:c5:92:14:be:55:ae:86:
         62:7c:c2:9b:7d:ff:bc:76:45:7e:1a:72:ae:8c:6a:00:60:c2:
         e8:f9:1b:c6:f2:a3:b6:b5:ba:20:fb:ef:3a:73:2e:4b:36:c4:
         53:6c:db:9a:85:47:83:8f:dd:5c:e8:a7:7a:03:56:67:b1:5c:
         29:c1:dc:af:e0:53:7f:33:b0:c2:86:d6:ec:0d:36:d7:d4:76:
         90:7d:2b:5c:9b:6f:fa:27:7a:4b:d1:d8:c1:2a:ae:5e:e5:5a:
         7e:8c:b3:2e:52:39:0f:1d:17:a2:65:ff:8a:d2:37:2d:27:98:
         c4:2b:49:e4:7d:fd:9f:6d:c2:5f:98:a9:60:8a:66:0b:59:47:
         ac:69:0b:d8:18:a8:95:1d:04:e6:fc:eb:f6:fe:5e:06:2f:74:
         f1:f5:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:51 2025 by rpki-client