Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68729132-981e-33c2-abc7-03c19e9b8b81.roa
File:                     68729132-981e-33c2-abc7-03c19e9b8b81.roa (raw, json)
Hash identifier:          oGvK38aOK1pUMc0pHfrbtFB0FtR8XrVSYgBexw2pZeI=
Subject key identifier:   A8:ED:5A:90:DD:D7:B1:CF:D8:1A:A7:90:19:EE:9C:85:85:CF:26:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB22105EA090D7070D004DF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68729132-981e-33c2-abc7-03c19e9b8b81.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.252.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:05:ea:09:0d:70:70:d0:04:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e09285c8-3d79-40a5-ab70-56314d81538f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:02:eb:95:25:ce:47:63:45:d1:03:03:e2:2a:
                    26:d9:45:93:28:a3:e8:6f:7f:a4:d7:9f:27:1c:3c:
                    3c:31:a1:8a:57:d6:37:fa:0a:b7:7e:82:b6:91:e5:
                    88:22:e9:a3:ea:ca:99:d4:e6:42:0e:16:39:09:8a:
                    82:ef:0b:e9:75:9e:66:35:74:24:f3:35:4a:02:fb:
                    61:7a:e8:b9:49:b0:2d:61:2d:e2:53:f3:46:e3:a2:
                    ad:db:02:73:94:9a:cc:48:5a:05:0a:37:4e:8e:03:
                    a1:de:24:05:06:31:ea:d4:5d:e2:ad:61:81:35:6e:
                    d7:50:1d:21:e8:c6:ab:f7:2d:9e:47:5c:11:b6:e7:
                    b5:37:b7:a5:80:5d:8f:9e:09:7b:cb:86:d3:46:8c:
                    6a:eb:be:50:f5:a5:3b:3d:cf:1e:24:bc:eb:f2:a5:
                    81:bc:8d:14:5c:52:ac:c0:85:b3:f0:68:1e:9d:49:
                    4c:a8:38:73:61:e2:12:d7:b3:a3:cd:2c:dc:e0:2d:
                    4c:bf:a0:b3:e2:ae:64:18:dd:1a:44:28:23:4d:04:
                    18:57:b9:8f:00:18:25:3c:5e:f3:b4:48:34:bb:b0:
                    0b:b9:4a:2e:a9:bf:aa:c3:ee:ae:8c:b7:6f:5f:8c:
                    aa:19:3c:f3:f2:7a:4e:7e:96:63:cf:2f:32:1c:04:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:5A:90:DD:D7:B1:CF:D8:1A:A7:90:19:EE:9C:85:85:CF:26:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68729132-981e-33c2-abc7-03c19e9b8b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:84:a9:4b:e7:03:18:85:a1:79:d0:52:1b:cb:45:8e:37:70:
         36:78:d4:0a:0d:37:b8:23:b5:24:39:09:27:7a:b0:23:54:04:
         d9:70:7c:ec:48:62:78:c8:a4:c0:86:af:4e:1f:68:91:83:4e:
         c2:ea:fe:57:eb:7b:81:5b:0d:54:7a:bf:d0:df:dc:1d:2e:91:
         32:19:9b:48:64:27:bc:a7:9e:97:27:94:ba:aa:76:06:d0:e1:
         06:af:93:02:cd:9b:3b:76:9b:9a:80:84:45:de:03:dd:76:a2:
         ec:b0:25:12:8a:eb:c3:91:32:94:97:a6:1d:2a:f8:b7:5a:80:
         b2:f5:1b:c5:e0:2d:f5:e0:cb:72:34:f9:fc:e3:14:57:c9:d9:
         2b:1d:41:f0:ce:3e:94:9a:0b:68:68:86:b2:e3:35:c2:be:36:
         05:fd:a7:36:6d:45:fa:1f:d9:78:34:05:8b:7f:27:58:34:47:
         a8:15:43:7d:19:3c:e7:57:21:33:a5:42:e4:fd:3d:7c:68:71:
         c4:7f:78:11:d4:f7:12:57:ee:88:2f:5b:a2:ca:b0:bb:b7:a1:
         03:6f:66:95:78:53:5c:b8:c5:32:b4:99:60:bf:2b:11:58:a8:
         f6:87:6b:77:64:23:d6:2a:3a:84:95:7f:07:bb:69:e4:f3:37:
         3a:5c:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:29 2025 by rpki-client