Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa
File:                     5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa (raw, json)
Hash identifier:          hXvGj4KG4zZxzppSWR0j0T92rnvzQNitt2qOPsaC+NM=
Subject key identifier:   A8:C9:EA:17:A9:81:01:ED:D7:3D:DA:44:F2:25:D2:56:93:C0:19:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEBC3539ECFFFDC07C2D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.55.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:bc:35:39:ec:ff:fd:c0:7c:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9795ef7e-188e-423d-b692-ef5bad9784d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:5e:b4:24:97:0b:92:81:a5:d4:52:37:7d:
                    c5:f6:bc:74:c1:df:58:e4:43:36:1f:4e:cc:4b:0d:
                    ba:cf:e4:aa:f2:bf:c1:27:cf:a3:86:f5:ae:32:c0:
                    58:76:af:ef:84:a8:fc:5d:ef:e9:a1:2d:5a:00:0a:
                    f3:17:e9:ef:72:23:48:cd:a8:12:ad:61:47:f8:70:
                    c2:63:0c:4c:e7:8a:96:42:bf:8a:26:6d:11:a8:9b:
                    a6:24:52:9e:12:17:fd:8c:c2:47:57:38:b4:53:1d:
                    0c:e5:38:56:91:e0:08:37:03:22:33:7b:fb:77:86:
                    af:40:05:67:bf:a9:f4:ad:bc:24:2a:6a:00:c7:7c:
                    53:ac:cc:84:d4:cc:33:48:fd:cb:57:e1:bf:bc:43:
                    c1:d0:34:e4:c9:11:8b:3c:dc:e1:39:ed:d6:7f:19:
                    7e:ca:76:22:31:8e:2b:80:29:2a:ba:b2:9e:2f:cd:
                    c9:b7:8d:02:e0:2a:c4:eb:35:5d:e1:2a:ba:a3:85:
                    b3:9b:63:05:19:e7:7c:c7:ce:04:94:21:b6:10:3a:
                    f0:1a:fd:ab:5a:84:a4:ac:b7:e5:b2:21:06:00:4d:
                    c8:46:16:7f:9d:5e:cb:49:28:89:74:db:3e:4d:61:
                    56:f3:6f:dc:3d:06:ec:e9:3e:b9:f9:a5:df:2c:17:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:EA:17:A9:81:01:ED:D7:3D:DA:44:F2:25:D2:56:93:C0:19:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:f7:5e:17:9a:44:a6:32:6e:3b:41:52:58:72:de:40:7c:
         5f:b7:ba:b0:2a:69:14:e7:25:25:22:df:6b:90:48:8a:4d:4f:
         14:fd:45:30:e7:db:26:4b:2e:b7:81:af:82:15:10:41:77:38:
         1a:fb:56:06:0f:f5:4d:ca:08:c0:39:22:ec:b9:58:43:64:53:
         29:39:d7:09:36:8c:8a:f6:13:73:78:6a:f4:7b:40:c2:6a:d1:
         29:81:ab:30:4a:04:03:31:63:b8:9b:e4:f2:9b:4b:e3:50:a9:
         27:50:05:f5:21:a9:23:14:f7:ae:44:ac:5b:e9:d0:5c:b0:4c:
         1b:88:75:14:b1:2d:76:f6:03:30:49:71:67:b6:03:60:e5:9f:
         31:bf:8a:7a:0d:df:33:75:4e:7e:3b:b9:bc:d1:df:62:51:c1:
         ee:71:c1:55:41:27:19:7a:7d:86:38:6e:2d:69:86:ad:62:93:
         a1:c9:e2:0a:e5:74:d1:bc:31:a4:09:90:7b:36:40:88:40:94:
         df:30:31:ee:82:03:64:48:c1:e7:45:c3:e1:b5:61:21:d4:f6:
         85:64:82:bd:59:ac:5c:52:3a:f9:f5:91:da:11:2e:9a:77:12:
         be:78:bb:98:68:47:b5:88:0c:f7:ea:c4:fe:e7:4d:14:dd:cc:
         64:be:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:36 2025 by rpki-client