Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef16beff-9d1d-37e7-b689-edc354291df4.roa
File:                     ef16beff-9d1d-37e7-b689-edc354291df4.roa (raw, json)
Hash identifier:          5F2dt85heyz0rtnVTn6XK6zDi8V+Pr8QJc6kpNss3rQ=
Subject key identifier:   A3:38:A6:CC:B3:52:1D:64:A1:13:7B:12:6F:47:27:C9:F0:C2:8F:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEBA27EE21786A81A43F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef16beff-9d1d-37e7-b689-edc354291df4.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.32.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:ba:27:ee:21:78:6a:81:a4:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0a0b20f7-1dbb-4c13-9e5c-6db262282905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:c4:43:5a:9a:9e:c3:7a:cf:c8:9b:ef:88:
                    31:4d:41:36:ce:7e:69:d4:2f:ba:a3:e5:92:aa:73:
                    24:d8:fe:16:57:ae:2c:a8:19:2a:a7:cc:6b:28:08:
                    c9:ca:1d:bf:af:ee:30:5f:d8:ba:27:6b:50:30:01:
                    96:05:8b:01:62:8e:3e:3e:30:ce:07:de:12:2e:5f:
                    b6:40:da:4c:ce:e0:19:fe:1e:87:ba:95:da:0d:71:
                    0f:93:dd:c2:b8:7f:5e:82:36:78:c1:7f:fa:6b:08:
                    b1:d1:54:06:17:eb:dc:ea:bb:29:59:ef:a5:80:30:
                    17:64:ac:d2:0f:c6:27:0e:2e:43:2a:a2:c8:db:b2:
                    38:2e:ed:61:dc:55:63:ec:ff:f5:eb:0b:33:08:b4:
                    ad:0b:2c:f7:b9:2e:bd:21:b7:55:6f:a3:57:4c:57:
                    a8:9d:02:35:8b:61:22:14:55:e5:ea:8a:f1:7d:ba:
                    b7:38:b6:34:b5:3b:23:63:2e:53:0a:76:b1:46:14:
                    c3:e7:85:24:e7:42:1f:9f:a9:1a:de:20:95:d4:f6:
                    67:fc:9e:93:f9:75:8e:1e:a9:67:cb:f5:6a:07:ad:
                    88:a3:9f:0d:50:66:df:56:03:04:02:30:7e:fb:10:
                    5f:76:b2:05:a0:0d:32:76:19:0b:3a:f3:77:aa:6c:
                    8b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:A6:CC:B3:52:1D:64:A1:13:7B:12:6F:47:27:C9:F0:C2:8F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef16beff-9d1d-37e7-b689-edc354291df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:9e:06:b3:41:9e:0e:00:2c:44:0b:46:99:66:e4:40:2f:
         cc:5e:4e:c0:71:90:88:59:9f:4e:3a:a6:cc:39:65:ae:35:d1:
         46:e5:c1:93:d0:e1:8b:51:2f:e8:6f:80:52:e3:84:24:ed:f0:
         cc:d4:60:9d:f7:43:bc:2b:57:4e:ba:30:76:a0:26:e1:ad:9d:
         52:7d:19:1d:13:e9:31:82:51:eb:bc:9a:47:81:f2:d5:2b:ea:
         69:fc:c3:5f:a9:98:eb:31:90:6a:f4:51:8d:b6:d0:af:6c:ab:
         72:02:fd:e6:b9:8a:b8:5f:8e:30:cd:a2:12:f3:f3:84:c4:39:
         09:35:a3:ed:fb:82:55:33:c6:b2:a9:cb:86:22:47:68:14:3a:
         39:39:f3:0a:25:58:62:3d:8a:a0:2f:6c:69:3f:00:ec:42:6c:
         bc:9a:91:21:7a:9b:87:d2:18:fa:6f:5b:79:62:b2:83:bc:24:
         bd:24:cf:85:c3:af:b6:6d:9a:3b:f1:81:9b:bb:26:f0:3f:d2:
         e4:1c:81:43:d3:03:c4:80:76:71:60:de:f6:09:8c:92:cb:1f:
         dd:7c:74:b3:44:d6:45:59:e2:44:84:a9:40:85:b4:2e:25:3a:
         c3:2b:7d:80:6f:c1:07:b7:c2:42:0d:32:40:f3:78:7b:ab:0b:
         a1:19:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:51:17 2025 by rpki-client