Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a39ee0a-310d-3025-b8e0-03d68bda9c6a.roa
File:                     9a39ee0a-310d-3025-b8e0-03d68bda9c6a.roa (raw, json)
Hash identifier:          NS6UPONwK9ttcQN1MKK0SB9Qpm07WEeF8orx5VhJC2U=
Subject key identifier:   66:CA:89:DC:9D:08:3C:FA:23:E5:E7:26:BB:34:F4:C3:02:FD:21:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC2DC005B98904878C2000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a39ee0a-310d-3025-b8e0-03d68bda9c6a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.186.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:2d:c0:05:b9:89:04:87:8c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d9150d83-51ca-4130-9c3d-a3c36427e3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:68:85:34:b2:de:36:3e:12:7f:1e:9d:d7:
                    b4:7c:4e:95:0c:59:87:4e:99:aa:8e:0c:0d:87:ab:
                    02:ca:66:74:21:a5:29:5f:d9:8d:b6:3b:d7:2d:70:
                    cd:54:52:6e:c2:7c:f1:e4:b9:c1:04:7b:2e:c4:08:
                    7c:cf:01:32:7f:2b:58:56:1a:88:9f:73:bb:c6:41:
                    83:d6:12:9e:a5:8c:f2:d4:d8:1b:d3:03:2f:8c:89:
                    23:e6:40:94:d2:8a:de:05:56:4a:24:84:02:fe:92:
                    f5:0b:3b:f1:26:57:c4:f1:5e:0f:ef:3e:d1:de:f0:
                    5e:ea:d3:41:77:3e:e7:27:dd:ce:ee:d0:32:30:41:
                    1a:11:3d:e8:ec:ca:e2:76:c7:34:77:42:87:50:2b:
                    0b:77:f3:b8:48:cd:1a:6f:ba:55:21:b6:e6:53:0a:
                    b1:e6:f4:b9:36:75:a3:1a:be:85:fa:93:d4:92:ac:
                    aa:bc:16:cc:55:a5:09:75:fe:13:ff:ed:10:fb:a1:
                    7b:ab:a6:07:45:00:49:ef:fa:2f:dd:db:e7:90:cb:
                    f0:2e:c6:60:80:a0:82:f4:3d:0b:e8:24:23:4f:c7:
                    b4:9e:a3:05:a8:89:ce:67:d6:ed:6d:ee:b2:5e:b4:
                    32:7d:b2:c9:46:d7:21:d5:32:d6:5d:17:9d:68:ef:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:89:DC:9D:08:3C:FA:23:E5:E7:26:BB:34:F4:C3:02:FD:21:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a39ee0a-310d-3025-b8e0-03d68bda9c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:f2:35:9f:fa:05:74:bc:9b:5e:2b:30:19:c4:0c:f9:e6:
         00:f0:16:34:17:b1:5b:81:da:1b:ea:9f:e6:87:7a:34:fa:38:
         cb:da:98:22:2e:b1:46:a1:36:dd:f9:53:04:2a:dc:bf:cf:d3:
         ad:84:4e:ca:3d:9d:78:6a:3e:15:82:79:33:04:b1:63:59:1b:
         9f:2e:a5:62:07:62:f0:5e:0b:34:39:12:4a:b5:69:2e:4d:92:
         69:e2:cf:18:5a:37:e2:c9:a4:c6:af:fc:ab:4b:62:a7:3d:3f:
         b0:0d:31:a9:7d:86:07:8d:3d:66:65:0a:ce:d3:87:3f:21:2e:
         9c:08:e8:6e:a2:36:4d:28:79:4f:59:22:cf:b2:21:5c:32:48:
         38:66:d6:b7:3d:8c:57:e9:71:77:0a:1c:cc:c1:fd:c1:9a:b5:
         a3:0a:8b:8d:70:4d:86:79:73:97:11:cb:db:c9:79:da:34:7e:
         6a:44:ed:34:af:08:5a:1e:73:85:4a:f3:03:0e:2f:3f:aa:4d:
         65:fe:49:20:e4:77:5b:6e:10:dc:4f:c6:6d:6b:0d:2f:71:9d:
         2d:ee:55:75:70:fb:6d:31:44:17:df:55:9a:83:57:74:17:65:
         33:ff:55:32:38:a3:94:f4:03:d6:91:64:9e:11:e5:c0:2d:cd:
         1c:ff:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:35 2025 by rpki-client