Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b635d721-11f7-3668-a7bf-794cff8a2b72.roa
File:                     b635d721-11f7-3668-a7bf-794cff8a2b72.roa (raw, json)
Hash identifier:          yZpHQ6WysBvso6cdvc3myevsc/KRcWWdDQAc1jeEip8=
Subject key identifier:   C0:28:8F:4E:43:E7:D9:40:E0:B7:27:CD:22:95:C5:DF:BE:C1:FE:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED73B7393328CB91E834E8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b635d721-11f7-3668-a7bf-794cff8a2b72.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        73.67.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:73:b7:39:33:28:cb:91:e8:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7f198225-6feb-4989-9f6b-bac4270a3897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:a0:b7:e5:c0:97:f7:ac:71:b7:b5:4e:b4:
                    05:8d:a9:05:d7:6e:27:22:0b:34:e0:31:5b:e3:0d:
                    67:c2:b0:3b:11:1c:bc:69:8b:6d:5b:80:d3:0a:ad:
                    65:5c:88:56:4b:f9:59:03:ef:92:87:d3:77:8b:1a:
                    08:c6:bf:31:43:9e:2d:fb:5b:14:8a:39:f9:49:88:
                    b6:2f:20:92:0f:3f:19:12:68:b7:77:fd:b5:77:12:
                    cb:d2:f2:88:15:cb:99:a6:ea:16:09:17:24:fd:2e:
                    eb:a2:58:00:6a:04:c2:eb:48:e6:b8:06:46:9c:8f:
                    7a:ae:5c:32:20:34:3f:78:9b:ca:e8:7c:a2:24:4f:
                    77:db:2e:83:9e:c6:fa:1e:e7:9d:9e:5b:c9:9d:d3:
                    72:a3:4b:4c:07:94:6a:1f:3f:d2:81:39:3f:f8:d1:
                    26:cc:87:ab:7d:97:6a:b1:92:d7:13:2c:2b:fe:a9:
                    95:d3:08:c4:a0:7b:97:8b:f0:62:18:99:2d:c5:12:
                    e0:cf:bb:31:9a:93:f9:0d:c1:6e:60:73:c9:42:fe:
                    83:3a:53:7d:05:28:50:5b:14:d2:21:dd:b9:72:c8:
                    1d:db:13:fd:46:05:c0:94:a1:84:2a:97:7b:a9:97:
                    c8:e6:4a:d4:0f:c9:ce:62:af:0d:39:16:1a:f1:e9:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:28:8F:4E:43:E7:D9:40:E0:B7:27:CD:22:95:C5:DF:BE:C1:FE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b635d721-11f7-3668-a7bf-794cff8a2b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:8e:51:b2:f4:1c:7e:91:75:bd:92:62:9a:53:9d:75:c2:
         54:86:92:3a:af:de:d4:48:20:c6:8e:cf:2b:ce:74:39:dd:96:
         db:19:75:fd:e3:76:33:7b:49:bc:8a:02:c0:ca:23:bf:5e:4c:
         35:00:75:9a:3a:51:9e:05:6b:a9:38:10:56:88:5d:a2:66:a3:
         df:c5:a3:89:97:b7:61:0d:f0:93:be:ab:d3:01:be:96:a6:dc:
         8d:0c:58:46:fc:96:bb:39:28:02:8f:c6:6b:ac:ee:84:52:10:
         de:a0:da:62:53:2b:85:fa:8f:23:67:04:23:05:0d:24:cc:c2:
         7c:e2:87:5b:74:62:7d:ca:95:78:e2:88:e9:98:e3:9f:04:72:
         7b:8c:37:d4:59:89:17:d0:39:49:34:5d:aa:cb:36:c3:71:e5:
         a5:71:42:b3:31:52:7b:cb:f9:6e:73:56:1c:cf:da:6d:a1:a3:
         fa:a5:f0:45:36:d5:ac:df:93:cd:c8:94:90:36:08:6b:1e:c8:
         d8:35:44:c3:56:4f:aa:24:2f:47:2e:da:0b:8f:e3:c0:e1:cc:
         4f:8b:46:5e:2b:f8:ee:5d:67:85:bc:e1:c4:f4:5c:c4:d7:86:
         6b:4f:67:2d:81:1f:be:be:ba:25:a6:52:cb:d6:0c:e4:f3:9d:
         ca:17:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:54 2025 by rpki-client