Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc0aef2-b02b-3ca0-aca8-213b3284d2b8.roa
File:                     0bc0aef2-b02b-3ca0-aca8-213b3284d2b8.roa (raw, json)
Hash identifier:          dkKyowpFAHYxkGKn3RM0TRNAzj0xcyeWW9Jpjqn3tvw=
Subject key identifier:   AA:63:3F:72:18:A0:17:0E:3B:D7:DD:0B:28:CF:A3:5D:C0:43:78:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319573286D513B4AB8FF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc0aef2-b02b-3ca0-aca8-213b3284d2b8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.167.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:95:73:28:6d:51:3b:4a:b8:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=6536c7bf-127f-4ee8-8ae5-a6ecbf13e6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:41:2e:b2:de:3e:55:ea:c6:63:7f:8d:bf:
                    2c:8f:27:fb:a4:dd:78:d9:14:a1:7d:6e:0c:13:70:
                    76:cf:4a:63:5e:e3:ed:e4:c4:f1:87:b9:8d:c5:30:
                    91:58:35:d4:eb:be:1c:07:df:c7:7e:d1:14:63:c2:
                    f3:ff:ed:57:a5:1b:a2:90:5e:79:85:29:2e:37:4b:
                    b7:15:e2:40:dd:6d:f7:60:12:15:a9:a1:d9:02:ee:
                    1f:62:1f:d7:c5:ee:a8:eb:a3:98:f3:c8:9c:f3:31:
                    a1:ce:f4:8f:bb:e1:6a:af:9a:0b:8d:6e:74:0d:f5:
                    7a:1f:6c:62:7c:d1:45:b8:dc:97:17:70:de:09:a8:
                    93:e5:d6:e4:69:02:c3:c1:79:8a:b0:50:d9:e1:44:
                    68:15:ec:2e:d1:9a:34:69:ad:d1:30:4a:7f:c1:4e:
                    3d:28:66:39:93:8b:e2:4e:94:f0:82:56:51:8f:6b:
                    83:9c:76:44:b9:a4:0e:cd:4e:d1:55:44:9a:be:30:
                    53:d1:04:e6:bf:62:76:5d:48:36:c5:48:d3:61:fc:
                    88:fd:5d:d9:08:54:00:60:2c:69:d2:37:f2:f4:60:
                    84:0b:fa:41:62:71:39:44:ac:61:3b:f1:e3:87:ce:
                    00:60:c1:6e:08:93:d6:4e:fe:ae:7e:93:2f:d6:53:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:3F:72:18:A0:17:0E:3B:D7:DD:0B:28:CF:A3:5D:C0:43:78:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bc0aef2-b02b-3ca0-aca8-213b3284d2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:54:19:05:a6:2f:a4:1c:b4:6d:17:31:5a:55:25:36:c7:f4:
         75:e8:b8:78:51:bf:56:8b:31:f1:f0:32:69:1b:53:01:82:5b:
         5c:d6:d1:df:d7:67:ef:54:3e:55:74:4c:5a:f9:65:97:7d:55:
         19:ad:d9:86:56:5a:59:41:3f:55:4d:77:4f:3f:6c:47:b5:9f:
         91:5c:74:e1:0a:69:1d:e4:04:0c:b6:b9:eb:07:0c:de:e7:5f:
         3a:19:bd:5a:ea:47:5b:f3:bf:06:13:8b:46:a8:2f:40:4c:2b:
         f9:b1:3b:a9:fc:cb:de:58:52:c3:67:56:5f:3c:2e:27:9e:9c:
         97:44:15:80:97:61:e1:8a:52:5f:fe:15:04:bb:81:78:12:43:
         1f:73:9d:2e:a6:18:24:43:86:92:3b:94:14:fa:44:7b:1b:cc:
         7f:51:ac:9e:28:75:49:09:d8:59:bb:e2:28:16:a6:3e:74:5a:
         23:d1:29:d7:0b:47:78:de:b8:cd:12:a8:d1:ac:92:74:34:45:
         d3:fd:10:d3:57:90:16:3b:4e:d4:a4:8c:69:6b:5c:9f:43:6f:
         51:d0:dd:b5:ea:12:85:a1:1a:e1:67:0d:07:c2:33:72:32:ac:
         01:70:a0:dc:2b:23:7b:2d:f2:a3:9b:1a:0c:9d:7d:d1:20:03:
         dd:7e:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:12:41 2025 by rpki-client