Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d833ca5-4ba6-3737-973c-a9b2b4cb5501.roa
File:                     1d833ca5-4ba6-3737-973c-a9b2b4cb5501.roa (raw, json)
Hash identifier:          XQTPL6UOXK1JSei/JkgFJ4K53SMlpasrfF9uWf0zprA=
Subject key identifier:   55:BE:CB:F1:11:C8:A7:78:E5:F7:43:48:0A:66:35:BC:2E:F8:17:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF95AF1D228D22277BF340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d833ca5-4ba6-3737-973c-a9b2b4cb5501.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.73.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:95:af:1d:22:8d:22:27:7b:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=23ef2481-8eba-47ed-be6f-94eed8ed3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:31:c3:3e:7a:8f:3d:f1:3e:2d:56:20:41:
                    7e:dd:37:b8:1f:85:4a:31:47:cc:e0:a6:27:93:58:
                    56:8b:82:17:11:53:1f:a7:80:93:ea:74:02:e3:66:
                    95:ff:17:6f:64:28:ea:63:50:46:b2:77:e3:5f:ea:
                    85:6b:8f:cc:bc:09:73:ac:5a:23:9e:5d:a6:76:20:
                    f3:0f:5c:6b:8d:c0:a0:00:f4:e1:89:60:8a:7d:3d:
                    43:e8:05:64:60:9a:b4:2a:ec:14:84:31:79:0b:05:
                    98:4d:91:1d:d1:5e:99:f5:13:bf:10:0b:6a:86:af:
                    42:2c:4e:7d:92:a8:56:78:da:a9:df:6e:cb:a1:60:
                    b9:96:7e:47:3c:29:ce:80:84:a8:cb:40:fd:f9:cd:
                    92:2c:54:4b:e5:80:61:3f:1b:61:06:f9:e2:17:2b:
                    19:72:21:d1:cc:92:6e:51:6d:8e:35:ee:22:e9:e0:
                    b3:b8:4f:fc:46:f8:a9:32:e3:94:40:3e:cf:cb:c5:
                    0f:d6:f6:4b:e7:fd:fc:75:3d:50:de:b8:4a:4f:ba:
                    e8:ed:96:32:8d:e6:fc:58:f7:9c:22:e5:ae:a7:a9:
                    8f:01:81:a9:ff:a2:66:7a:a7:b4:a2:cd:2c:9e:45:
                    ea:b7:5e:09:61:94:b8:9d:e3:01:cc:8a:4b:ea:e1:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:CB:F1:11:C8:A7:78:E5:F7:43:48:0A:66:35:BC:2E:F8:17:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d833ca5-4ba6-3737-973c-a9b2b4cb5501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:00:fc:0e:7c:18:fa:8b:6b:51:e8:37:60:52:21:1f:b9:1f:
         94:7b:3c:42:24:ed:17:07:c7:d6:35:56:e7:7d:ff:7b:06:e7:
         d8:dc:77:d6:b6:a0:b0:4c:9f:9d:01:81:73:d0:8c:92:d4:54:
         1f:ca:4a:6e:1f:31:64:bf:1f:69:e8:0c:42:df:aa:11:eb:6e:
         2b:da:22:d5:23:cc:e0:e2:28:94:a8:8d:05:d5:2b:e6:7d:0d:
         42:4b:35:04:4a:f5:26:93:22:d9:5d:cc:71:1b:5c:0e:77:7c:
         49:63:c7:95:0d:44:42:cf:d1:7a:36:ad:de:9e:30:5c:92:9b:
         b5:ec:b3:7a:80:f1:71:e1:19:ca:db:0b:50:6f:fe:a8:c4:b6:
         8d:d0:1b:2c:d3:fe:80:6c:17:e1:9a:1f:b3:b5:54:d1:10:b8:
         27:6c:8f:d6:d4:34:08:e8:c7:b3:94:d2:ef:ea:59:ae:c5:78:
         c0:b3:ad:07:4c:f9:e4:0e:f4:76:b4:e1:1a:39:a4:2e:90:4a:
         aa:e2:02:ec:9c:a7:20:28:2f:ad:bf:32:76:83:91:e6:c9:c8:
         b5:6c:ec:8b:a1:1d:1d:f1:5f:05:85:25:75:8a:5e:23:64:c9:
         9e:ef:98:49:fe:4d:a7:95:2d:5b:33:0a:c0:9f:96:fd:a7:4a:
         26:41:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:21 2025 by rpki-client