Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503ca096-01e6-329c-a64e-1ae75bcc4907.roa
File:                     503ca096-01e6-329c-a64e-1ae75bcc4907.roa (raw, json)
Hash identifier:          MNu+mp4kFuBkGazdI5fODx+YYQlt9flqja/wEfXTNo0=
Subject key identifier:   E7:6F:15:BE:2A:2D:58:E7:17:54:E6:B4:48:E7:CD:80:5E:A3:72:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC431974C4057AEA7A0240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503ca096-01e6-329c-a64e-1ae75bcc4907.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.238.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:43:19:74:c4:05:7a:ea:7a:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=34418c7e-28c1-4a2e-85e3-bd9df18808b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:be:28:47:d8:53:08:81:23:f7:9d:1c:79:
                    71:7e:38:50:57:f5:20:3c:c9:57:ed:f6:46:ca:db:
                    90:89:a2:02:13:71:14:6b:e2:1a:a0:57:e5:ec:d9:
                    9d:25:98:ea:5a:6b:61:ff:10:ee:81:12:85:bb:1c:
                    5c:c2:b6:34:b4:d2:16:1f:e9:5a:16:d8:3b:51:f2:
                    70:98:69:53:0c:f1:c2:cd:71:29:14:7c:bc:0b:c1:
                    c6:4c:13:b2:af:79:24:b7:e3:61:58:9a:e3:4a:7b:
                    56:53:2b:90:33:29:11:a9:cb:c3:df:fb:cc:98:01:
                    63:d9:1d:9e:35:b4:97:07:9f:83:2d:47:75:5d:35:
                    53:ef:ef:69:47:a4:2e:fa:8a:29:0c:51:38:af:94:
                    2c:86:bd:ae:5b:cf:99:88:40:a3:1c:19:88:b9:e6:
                    26:10:89:76:09:d1:d4:8c:14:a9:78:c1:72:37:a1:
                    24:f8:9f:fd:46:99:73:93:14:a4:a0:c2:e2:92:9f:
                    29:54:42:18:c2:fe:32:66:21:59:dd:51:f9:a1:4d:
                    42:b4:b1:98:b0:58:47:5b:16:af:98:3e:7a:b9:c4:
                    61:66:cb:30:dc:c0:8b:de:d8:57:bc:58:6c:e9:08:
                    39:38:f1:ea:f5:0f:3f:4e:c5:ff:01:8a:13:34:cb:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:15:BE:2A:2D:58:E7:17:54:E6:B4:48:E7:CD:80:5E:A3:72:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/503ca096-01e6-329c-a64e-1ae75bcc4907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:24:c5:8e:f9:24:6d:70:0a:c9:3b:37:c4:1e:8e:a9:b8:bd:
         97:b0:62:d0:58:d7:cb:bc:d4:cd:d1:98:1d:1b:a5:91:09:44:
         f9:2c:f7:2f:05:96:87:81:12:6c:41:c6:ac:21:37:f6:1c:ce:
         15:18:5a:c1:95:a1:96:a8:cc:b9:bc:e5:84:1c:0d:aa:16:75:
         1b:06:27:e6:b1:b8:13:31:ca:50:15:63:d2:74:b0:bc:d0:c2:
         ec:81:d2:b9:af:ac:8e:b6:d6:04:5b:ad:5b:0c:2b:a9:7c:40:
         16:e5:3d:6a:21:97:27:4e:26:19:6b:84:8b:22:b9:c6:4b:a1:
         c6:4d:bd:6a:3c:5a:98:23:52:bf:d6:6d:51:e9:4b:55:e1:35:
         c1:19:a9:2a:a6:71:8b:cc:f5:e4:0f:86:fd:6e:1a:88:ce:ff:
         21:f4:64:c2:20:9d:6e:f1:25:8d:9c:4c:18:5f:3d:08:bf:75:
         d1:00:f4:22:0e:7f:ee:4c:46:19:83:2e:b9:2a:1b:6c:3f:4c:
         e5:3a:ae:70:ce:f7:31:b7:fa:6c:86:f0:53:34:1b:a7:f8:2e:
         4e:f6:ca:2e:d6:78:1c:04:fd:1a:22:71:fc:9b:32:e8:5e:78:
         53:5f:b4:df:93:31:af:79:da:54:a3:12:8d:9f:0c:68:4e:8f:
         be:03:23:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07EMZdMQFeup6AkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MzQ0MThjN2UtMjhjMS00YTJlLTg1ZTMtYmQ5ZGYxODgwOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXu+KEfYUwiBI/edHHlxfjhQV/UgPMlX7fZG
ytuQiaICE3EUa+IaoFfl7NmdJZjqWmth/xDugRKFuxxcwrY0tNIWH+laFtg7UfJw
mGlTDPHCzXEpFHy8C8HGTBOyr3kkt+NhWJrjSntWUyuQMykRqcvD3/vMmAFj2R2e
NbSXB5+DLUd1XTVT7+9pR6Qu+oopDFE4r5Qshr2uW8+ZiECjHBmIueYmEIl2CdHU
jBSpeMFyN6Ek+J/9RplzkxSkoMLikp8pVEIYwv4yZiFZ3VH5oU1CtLGYsFhHWxav
mD56ucRhZssw3MCL3thXvFhs6Qg5OPHq9Q8/TsX/AYoTNMtAAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdvFb4qLVjnF1TmtEjnzYBeo3JrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTAzY2EwOTYtMDFlNi0z
MjljLWE2NGUtMWFlNzViY2M0OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANMkxY75JG1wCsk7N8Qejqm4vZewYtBY18u81M3RmB0bpZEJRPks9y8F
loeBEmxBxqwhN/YczhUYWsGVoZaozLm85YQcDaoWdRsGJ+axuBMxylAVY9J0sLzQ
wuyB0rmvrI621gRbrVsMK6l8QBblPWohlydOJhlrhIsiucZLocZNvWo8WpgjUr/W
bVHpS1XhNcEZqSqmcYvM9eQPhv1uGojO/yH0ZMIgnW7xJY2cTBhfPQi/ddEA9CIO
f+5MRhmDLrkqG2w/TOU6rnDO9zG3+myG8FM0G6f4Lk72yi7WeBwE/RoicfybMuhe
eFNftN+TMa952lSjEo2fDGhOj74DI7E=
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:25:00 2025 by rpki-client