Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c611b9-9b48-32ce-b17a-1b0a84b6609f.roa
File:                     d3c611b9-9b48-32ce-b17a-1b0a84b6609f.roa (raw, json)
Hash identifier:          eEvZgUKH8DrLkc3o6oH23su4xSVotf1Mky361AJn870=
Subject key identifier:   86:D3:46:46:89:DF:41:36:DE:C1:98:E5:6D:AC:2E:3E:89:F7:E9:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECF0F25A4F1A48117AC680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c611b9-9b48-32ce-b17a-1b0a84b6609f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.115.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:f0:f2:5a:4f:1a:48:11:7a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6560fe5b-1d80-49e6-a9ca-365365358c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:2e:e7:48:7a:a8:13:ce:5c:42:58:95:da:
                    9a:af:b6:4d:02:d9:74:fd:d5:54:a2:e4:1f:a5:ad:
                    df:97:ec:f1:e1:ba:5b:3f:d1:b4:f2:ef:b8:95:75:
                    c8:78:9f:23:dd:70:cb:cd:d0:06:80:d7:fe:07:2a:
                    c1:13:a1:f0:65:af:87:f9:f6:e2:bc:6a:e9:6b:32:
                    b0:4f:f1:01:c1:66:9a:9f:4f:73:3e:ac:00:aa:13:
                    bf:ce:80:79:ee:a8:b8:73:3a:ae:ec:19:69:bc:53:
                    07:b4:8b:67:a9:da:1d:8d:a9:ea:c1:ca:87:3f:31:
                    36:8e:c6:21:ec:4f:8c:92:0c:98:a1:f7:a1:e8:92:
                    9d:37:1b:27:3c:97:a9:f7:a6:aa:91:6b:65:af:3d:
                    34:71:85:45:a9:3a:50:01:be:57:64:eb:60:2c:42:
                    b2:ac:ff:b2:eb:98:cb:5e:68:00:74:b3:60:b0:7b:
                    94:a4:82:94:66:dd:a8:b6:b6:18:26:65:24:22:20:
                    b2:54:1f:a2:c5:e3:99:23:c1:34:8a:44:63:17:c6:
                    8c:70:a5:9a:91:99:5e:42:86:f0:1c:03:e6:81:8b:
                    a8:77:bb:65:71:ef:bd:63:02:5f:2d:e7:0d:0b:9b:
                    7c:36:60:dc:91:7e:e1:c6:a2:03:d4:64:6d:eb:28:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:46:46:89:DF:41:36:DE:C1:98:E5:6D:AC:2E:3E:89:F7:E9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c611b9-9b48-32ce-b17a-1b0a84b6609f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.115.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:9b:7d:36:9a:84:4e:54:ab:99:5b:11:0b:cd:59:d3:38:
         8c:7f:0c:ce:6f:27:a0:95:4d:d8:12:45:3c:e5:cd:b4:ad:a9:
         5c:31:ef:70:aa:e3:dc:bf:be:94:83:75:33:be:3a:c8:af:b6:
         a4:0f:03:8e:7b:58:f5:88:70:3b:e1:d1:c0:e1:bc:1a:08:2a:
         9e:27:9e:38:b0:29:43:e9:bd:c6:30:5c:8c:ca:f7:5f:ff:48:
         89:52:1d:e0:46:f4:cb:2c:1f:17:97:b9:4d:31:6b:a8:53:09:
         ef:ed:9e:48:f3:32:f7:e1:56:a4:bd:3d:83:1d:57:c4:64:08:
         50:ab:8b:c5:21:dd:4b:e3:79:78:49:c2:54:4f:4a:9b:7c:54:
         e3:50:4f:a7:22:3d:ac:34:06:48:6f:c0:d7:e6:54:5f:f7:04:
         0b:9e:71:50:ce:4e:c5:ae:96:b0:19:e2:a5:8c:92:7d:0b:28:
         f5:89:96:c2:13:b3:bf:d0:36:9d:5f:5a:06:52:2e:67:68:e7:
         4c:fd:47:71:2d:db:3e:6e:45:4e:2d:e2:05:e7:a0:61:7e:d3:
         32:6f:a3:27:82:a8:30:d5:2f:64:fb:fc:11:30:c5:2f:dc:51:
         0e:78:58:1f:b4:47:5e:37:9b:61:0a:4f:c6:14:d3:a0:e0:cb:
         a7:3d:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:35:46 2025 by rpki-client