Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa
File:                     13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa (raw, json)
Hash identifier:          pRYLLlJeBPp1fals407hahcGwUX5tYjwM5eFriHGYXg=
Subject key identifier:   95:F3:6C:42:77:2F:47:E8:75:5E:AB:C2:C2:33:2A:8B:7A:A4:6D:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07672A20AD6A921B1D6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.215.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:67:2a:20:ad:6a:92:1b:1d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b77d20f3-86bb-4bb1-bf44-a1aa475caa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:20:62:93:4d:c4:89:c1:45:84:89:73:76:
                    3b:e5:1b:13:97:3e:03:a9:f5:5a:4c:0a:2c:14:28:
                    60:11:4e:6a:19:56:52:2d:bd:a3:5e:d9:29:0b:06:
                    f6:c0:db:f2:28:02:1a:47:f0:c6:82:3c:02:ce:f8:
                    d5:ec:86:00:1e:d6:7c:85:7e:1a:32:ea:fe:05:db:
                    05:0c:9d:e8:76:9b:78:1f:28:4c:46:04:2b:6d:49:
                    28:ed:d6:2d:a4:18:68:33:47:21:4d:c6:99:d1:f0:
                    3a:f4:2c:8c:02:a6:85:ca:13:6a:83:7c:54:b7:86:
                    84:1b:01:16:85:65:e7:e1:c5:5f:ce:f4:fe:e7:98:
                    ba:c5:24:28:52:00:6e:50:bc:6a:17:ff:15:08:f8:
                    22:8b:e0:1c:3b:50:f0:09:71:6f:70:02:2b:b5:77:
                    1e:39:1d:6c:fb:63:93:26:22:60:b6:ce:59:c8:38:
                    12:c5:77:16:ee:84:f5:3e:3e:9a:9c:4e:a1:43:c2:
                    62:4d:71:da:e8:d7:02:83:62:3f:7d:5e:fa:17:c8:
                    63:f0:b6:43:85:5c:47:99:c6:c4:68:9b:50:19:f1:
                    a6:06:be:b5:30:5f:02:ea:ea:02:d2:ff:7b:0a:f0:
                    3c:51:48:8f:27:31:ff:2f:62:c4:15:2b:89:47:9f:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:6C:42:77:2F:47:E8:75:5E:AB:C2:C2:33:2A:8B:7A:A4:6D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.215.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:9e:1d:fd:54:c5:ca:70:18:94:e4:d2:af:29:d4:46:71:
         86:31:db:8a:18:c1:35:81:36:b1:57:b1:45:33:7b:be:bb:bf:
         42:9c:32:5a:c8:06:8c:68:6c:b5:31:b2:ea:25:97:5a:53:73:
         2f:cb:49:d1:45:4e:7f:8c:7c:25:4d:9d:fd:ad:70:76:e0:ca:
         35:41:01:8c:a3:81:e9:b9:73:50:d2:4e:52:a8:60:e1:8a:10:
         43:8c:6f:e4:9a:1e:c3:47:0b:bd:d5:f8:7d:09:bf:71:62:48:
         a8:65:ec:4c:40:e0:c3:96:03:88:43:df:75:34:87:19:b0:25:
         f6:e5:71:4f:a1:6c:8d:58:0c:9c:74:b6:77:f4:8c:27:ae:be:
         ee:72:77:f9:21:96:38:31:c2:63:79:4d:3f:b5:ee:71:17:ed:
         08:17:e4:b2:f7:8f:f5:e2:61:fe:76:43:9f:3e:15:de:b0:35:
         82:3f:7e:fa:36:95:01:02:43:5f:03:6d:b5:19:0b:9b:19:ec:
         6f:43:49:c2:e2:07:8c:65:2d:cc:6b:19:df:f0:fe:11:1a:7d:
         1a:57:08:00:17:67:87:3b:17:cd:43:34:be:60:b7:f4:93:7d:
         0c:e4:19:bd:fe:b4:2f:32:ac:e3:d1:9c:9a:30:9e:4a:21:24:
         e2:fc:cc:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB2cqIK1qkhsdagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
Yjc3ZDIwZjMtODZiYi00YmIxLWJmNDQtYTFhYTQ3NWNhYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G8gYpNNxInBRYSJc3Y75RsTlz4DqfVaTAos
FChgEU5qGVZSLb2jXtkpCwb2wNvyKAIaR/DGgjwCzvjV7IYAHtZ8hX4aMur+BdsF
DJ3odpt4HyhMRgQrbUko7dYtpBhoM0chTcaZ0fA69CyMAqaFyhNqg3xUt4aEGwEW
hWXn4cVfzvT+55i6xSQoUgBuULxqF/8VCPgii+AcO1DwCXFvcAIrtXceOR1s+2OT
JiJgts5ZyDgSxXcW7oT1Pj6anE6hQ8JiTXHa6NcCg2I/fV76F8hj8LZDhVxHmcbE
aJtQGfGmBr61MF8C6uoC0v97CvA8UUiPJzH/L2LEFSuJR58ohwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXzbEJ3L0fodV6rwsIzKot6pG03MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNiMjUxMjAtZWUzZi0z
Zjc3LWE1ZWMtM2Q0ZWYxMGViMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+Mnh39VMXKcBiU5NKvKdRGcYYx24oYwTWBNrFXsUUze767v0KcMlrI
BoxobLUxsuoll1pTcy/LSdFFTn+MfCVNnf2tcHbgyjVBAYyjgem5c1DSTlKoYOGK
EEOMb+SaHsNHC73V+H0Jv3FiSKhl7ExA4MOWA4hD33U0hxmwJfblcU+hbI1YDJx0
tnf0jCeuvu5yd/khljgxwmN5TT+17nEX7QgX5LL3j/XiYf52Q58+Fd6wNYI/fvo2
lQECQ18DbbUZC5sZ7G9DScLiB4xlLcxrGd/w/hEafRpXCAAXZ4c7F81DNL5gt/ST
fQzkGb3+tC8yrOPRnJownkohJOL8zHA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:55 2025 by rpki-client