Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddbdb4cb-6881-3775-b041-1c8f2e4479ab.roa
File:                     ddbdb4cb-6881-3775-b041-1c8f2e4479ab.roa (raw, json)
Hash identifier:          roR9j/7EzNjrbSSoXNhMbKh/VvTa8+/xB71DFuA2O+0=
Subject key identifier:   24:F9:4E:B0:72:58:A5:40:FE:D2:5F:DA:1A:D8:8E:84:D7:40:F6:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE0D6C2E196A39D50311E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddbdb4cb-6881-3775-b041-1c8f2e4479ab.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.4.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:0d:6c:2e:19:6a:39:d5:03:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c1391673-fc8b-4860-8c48-02c199a3c995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:db:8f:e8:ec:77:71:d5:14:ca:f4:39:74:
                    92:aa:17:6a:46:02:26:90:8c:64:c3:b9:a9:12:a5:
                    10:97:fd:ff:f6:a8:71:c4:3b:63:fe:01:aa:3c:8c:
                    a1:9b:5a:8f:d9:7f:ee:25:77:8d:5b:3e:18:64:40:
                    93:d9:67:c7:f1:c7:3c:a8:6c:7c:8e:4a:28:bc:64:
                    ee:3f:85:81:9a:f4:f8:31:e5:01:45:50:10:98:46:
                    60:8b:3f:fb:94:ca:31:e3:fa:0c:09:15:7d:a2:d0:
                    0f:a2:fc:81:8c:92:45:b9:95:3a:e9:cd:d9:24:a4:
                    8a:ed:01:da:8d:d7:c0:89:b5:a5:8d:42:60:a1:be:
                    f5:02:42:b4:c1:d7:a7:8e:ba:0e:f4:e5:8c:a7:00:
                    8c:08:18:3d:09:df:47:80:ea:87:ed:c5:17:ac:ca:
                    20:5e:77:d4:54:ad:b5:b3:22:e1:98:ef:1f:d5:bf:
                    1f:4c:0a:1d:4e:66:cb:e6:d0:91:65:c0:f1:8b:80:
                    8c:7e:a8:26:58:dd:d6:ce:3c:f6:94:ee:b4:5e:b7:
                    87:b4:6e:2e:ae:e1:6e:d9:d1:cf:b8:b5:71:ba:dd:
                    fe:c7:ed:3b:80:fa:4e:d8:90:bd:5a:34:11:e9:1e:
                    8d:31:61:81:a6:e4:39:67:cd:f6:eb:96:15:30:4e:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:4E:B0:72:58:A5:40:FE:D2:5F:DA:1A:D8:8E:84:D7:40:F6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddbdb4cb-6881-3775-b041-1c8f2e4479ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.4.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:29:3b:4e:c5:cd:bc:aa:75:f2:c6:5b:90:03:8c:89:33:22:
         d9:16:98:a3:01:c1:ae:11:1a:c1:76:7b:ea:a5:c1:39:50:7c:
         67:ba:d8:39:3d:c9:90:bc:eb:c1:65:9b:8e:e9:93:50:ab:ae:
         76:fe:ae:82:c7:49:36:dd:08:56:f5:40:3a:70:69:38:a6:c3:
         83:11:8a:55:5e:ad:59:85:ef:4e:ac:de:97:17:4f:fa:5c:be:
         f8:d8:df:3e:51:50:ac:bd:3d:b8:76:3c:eb:35:ff:5b:f2:ca:
         93:c0:ad:fa:d9:44:08:b5:a3:89:f5:63:41:63:c9:95:05:52:
         bd:81:81:60:16:c4:f1:79:32:e8:8d:27:87:56:fe:3f:78:86:
         da:60:b0:33:f1:1a:4c:e2:3e:69:fe:27:4a:60:56:d2:73:58:
         44:8a:67:38:8f:b7:9c:d4:5e:e6:44:3c:0f:63:f1:6b:45:dc:
         70:1b:66:25:4c:2c:52:46:34:d2:04:06:dd:ba:86:88:33:c3:
         71:78:fa:ed:8d:1d:c2:1a:d1:68:05:5b:c2:eb:46:e4:66:87:
         af:32:bc:1c:5f:b7:08:2c:eb:25:76:7e:30:a2:dd:04:6b:20:
         f1:c5:37:c5:dd:28:18:e3:5b:78:57:e1:2f:3b:46:31:58:42:
         11:89:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:28 2025 by rpki-client