Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c9d82c-8c9e-35f8-9edc-30f2ed99cb29.roa
File:                     66c9d82c-8c9e-35f8-9edc-30f2ed99cb29.roa (raw, json)
Hash identifier:          oRj7e2DS+171cYDnbxQtQvN6c9oImKpwS4uLaAcRCOE=
Subject key identifier:   3C:6A:33:38:64:C6:F3:32:FB:34:29:E3:83:A1:46:97:8C:FD:71:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC37EE6EBA513A040B1E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c9d82c-8c9e-35f8-9edc-30f2ed99cb29.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.227.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:37:ee:6e:ba:51:3a:04:0b:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ca3a6eb3-5676-40bc-8d8e-9d7c333e4c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:c5:6d:3a:e5:49:e4:37:dd:55:be:4d:31:
                    97:c4:7a:6a:b1:b0:4b:19:d8:91:b8:a2:89:b5:9f:
                    c5:e6:64:e0:d1:e5:d1:2d:dd:5e:2b:c8:fb:0f:02:
                    25:e5:4a:0b:9c:5c:9c:b3:e0:93:f5:2f:62:a9:9e:
                    03:2c:7a:68:ca:86:b0:6c:f6:db:9d:47:e4:35:97:
                    aa:b9:16:33:f8:0d:af:7d:f6:70:72:e3:c0:72:1f:
                    89:7e:66:77:d8:05:9b:b1:e4:45:77:74:e0:e8:5c:
                    82:64:9d:25:d3:dd:e5:4d:a2:f1:a0:80:00:93:e7:
                    ea:45:5e:e0:79:df:01:77:0e:4d:69:e5:36:50:d9:
                    03:2a:49:9c:fd:08:cb:0f:71:30:0b:23:2e:a5:51:
                    ce:0a:5e:53:d6:c5:ed:d4:4a:b6:9b:f7:36:15:08:
                    25:49:b9:48:5f:fd:21:e4:e1:71:f9:30:72:8c:a6:
                    d8:88:76:d6:f9:39:2b:e7:c5:d8:c2:98:1d:7b:b1:
                    b9:fd:10:17:c8:02:c3:f5:c7:78:d8:74:aa:36:40:
                    66:83:b0:cf:fc:b4:2a:f4:ea:4c:0b:9e:95:0d:2f:
                    fb:4e:ac:ca:87:e6:a9:6d:99:e9:50:32:7f:d8:18:
                    2d:dd:65:d6:fd:93:6f:7b:13:c2:59:f3:14:8b:d3:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:33:38:64:C6:F3:32:FB:34:29:E3:83:A1:46:97:8C:FD:71:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66c9d82c-8c9e-35f8-9edc-30f2ed99cb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:6b:56:54:38:6a:d8:ca:c0:e2:cb:e3:52:9e:f7:36:41:
         24:b0:52:1b:0d:c7:53:60:30:c5:09:ba:63:d2:3f:59:df:53:
         fe:8e:53:75:c6:20:db:a2:27:55:7c:11:29:e2:98:ac:a4:91:
         17:75:5f:4c:4e:16:e8:a8:ef:d1:98:f0:fb:ff:04:31:93:94:
         02:f2:2d:d8:7a:f3:ac:dd:4c:b0:cb:da:32:01:f2:c7:b9:06:
         6b:87:ae:94:cf:36:b9:fa:a4:ce:e9:e3:bc:d2:f5:e8:e6:68:
         74:98:0f:e8:55:ba:8d:70:7d:12:36:5e:59:e6:a7:8d:8d:4a:
         98:9e:1b:a9:5c:bf:4a:e0:5c:3b:3f:c8:a0:ab:76:37:4f:01:
         ea:32:88:40:df:27:10:7d:8b:1f:b8:8e:b3:1a:fa:1d:11:ab:
         bc:91:d5:2c:8f:41:d7:f4:ab:fb:86:7f:68:b5:a9:19:1c:87:
         bb:5c:45:28:5a:0e:e0:31:3b:2a:82:5a:30:11:49:bd:ac:10:
         00:39:05:cf:a0:21:39:b2:10:94:56:e8:ac:07:2a:cc:f8:bb:
         db:d6:02:da:3b:7d:c4:38:0c:49:d5:a0:8f:a7:21:f7:2e:06:
         ff:7d:f0:30:c3:55:92:02:81:d7:e4:ec:6e:3e:7b:6b:9d:6c:
         1e:65:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:50 2025 by rpki-client