Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0f891-0d88-3187-b08f-df1e1bf5ec70.roa
File:                     70e0f891-0d88-3187-b08f-df1e1bf5ec70.roa (raw, json)
Hash identifier:          o2dByWOIkgLI3hxMtyj/02Ug5wOKjg+ewuauUfvJUbg=
Subject key identifier:   91:58:12:C5:4D:CD:18:A1:70:63:78:BC:A7:52:9B:97:A1:4A:C5:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220FA8C943313B8F7D602E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0f891-0d88-3187-b08f-df1e1bf5ec70.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.177.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:fa:8c:94:33:13:b8:f7:d6:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=1ad8102b-9041-4681-8ba1-cba209249e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:bc:e9:7f:18:17:c4:e7:86:a5:4b:bc:66:
                    2d:01:16:76:bf:e0:93:83:aa:ff:df:6d:fd:80:49:
                    7e:47:ac:88:bc:7f:27:dd:65:d3:9b:0b:42:f4:90:
                    0c:99:92:67:d8:93:98:4b:e4:2f:d2:a0:4f:fe:c6:
                    33:e4:0f:c0:f6:95:10:9f:c1:11:e8:1f:cc:85:50:
                    60:5f:df:56:fb:05:f5:4b:b4:6e:81:24:fb:a7:4f:
                    11:93:5e:18:54:86:b4:ea:df:5b:9c:df:cd:bc:75:
                    57:27:27:b0:a3:cd:d3:dc:9b:31:fd:19:d9:80:d3:
                    34:25:59:aa:82:26:4e:72:8d:75:3a:c5:28:20:55:
                    68:70:a5:63:ee:1f:4d:43:3f:08:e0:9a:69:96:f4:
                    e8:84:f2:d0:22:79:45:75:df:30:45:ef:4b:55:db:
                    49:ec:1a:d0:ae:19:4d:22:f4:e3:18:d8:4d:e6:ce:
                    86:32:26:9b:f0:a7:a5:cb:29:46:73:7f:44:c4:91:
                    3b:c8:3a:4e:fb:50:65:95:bb:7e:90:42:2c:e0:20:
                    82:7f:0e:eb:59:8b:7f:d5:df:78:4b:12:6a:65:d2:
                    a6:dc:0f:f2:09:46:49:e9:9d:28:88:4a:aa:6a:5b:
                    a4:38:98:bd:57:72:57:49:49:eb:0e:05:db:58:b4:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:58:12:C5:4D:CD:18:A1:70:63:78:BC:A7:52:9B:97:A1:4A:C5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0f891-0d88-3187-b08f-df1e1bf5ec70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.177.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:33:6e:56:e6:97:d3:db:51:aa:71:b4:0a:67:1e:42:ae:8a:
         c3:59:e9:cf:ac:41:3d:f3:05:8f:a5:f3:63:40:db:69:cf:eb:
         13:6b:ec:28:cb:05:91:18:20:83:c4:7a:d8:98:38:9c:4a:81:
         7c:df:b6:91:27:64:dc:0e:c4:bc:99:b2:29:3c:48:0e:ea:5f:
         6a:56:78:ab:ef:f9:72:52:57:63:af:6c:31:f7:53:e1:59:22:
         c3:89:b2:7c:73:10:cf:be:05:9b:4f:00:43:9c:52:66:ce:74:
         c0:96:6d:1d:4a:5f:53:65:53:81:aa:36:ea:d8:6b:ac:2b:6b:
         00:8c:81:00:bf:69:7f:4e:a7:07:ea:16:40:15:ba:84:f8:44:
         2a:82:1f:ee:25:b9:6f:8c:43:9d:e3:96:9f:d3:16:5b:4f:3e:
         f7:8b:15:b9:82:0c:44:c8:21:ee:6a:f6:f9:59:c1:2b:07:ff:
         c1:1d:ac:2f:84:a5:19:66:3e:4f:2d:02:ee:7a:ff:44:6a:58:
         31:93:57:5a:64:e2:4d:d9:34:3d:33:92:64:33:01:35:21:13:
         39:14:23:98:13:c1:e8:aa:87:7d:e5:0d:4e:d4:a9:6a:18:67:
         5c:3a:ef:e1:d5:04:50:99:e0:f4:08:12:d8:0b:d7:24:94:62:
         d2:01:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:26:42 2025 by rpki-client