Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25171da4-28f8-33e3-b38f-f8609715381f.roa
File:                     25171da4-28f8-33e3-b38f-f8609715381f.roa (raw, json)
Hash identifier:          2bmbbGk6b3y3E9yVsY5QJzMI8x5v8FbAMmHjJQzGR6E=
Subject key identifier:   C2:94:EA:8A:D7:33:F5:DE:34:6C:D3:FC:60:D0:79:BE:A2:C9:2E:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319F9748ABEE2FA9C26D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25171da4-28f8-33e3-b38f-f8609715381f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.218.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:9f:97:48:ab:ee:2f:a9:c2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ce5fb2d6-a0b8-479c-9a31-f5c6e16b7ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:1a:78:ed:46:6f:77:3d:ce:4d:e8:4f:25:
                    19:64:c9:b7:e9:e5:62:a7:fb:6d:b4:33:8e:16:84:
                    aa:d6:ff:93:c6:e7:33:95:50:d2:2a:44:93:92:5e:
                    81:f7:dc:c0:a9:62:1c:02:ad:80:35:54:6e:0e:79:
                    58:ad:6c:d1:e3:e6:d4:3a:7e:94:85:0d:ba:28:c4:
                    60:fc:b9:b1:21:ea:44:ed:64:4d:7e:91:0e:63:cf:
                    47:7c:10:49:30:5d:7a:a2:45:12:50:23:c4:07:64:
                    66:bf:07:61:5b:1f:70:e2:42:88:2e:ea:ea:8a:d4:
                    35:c9:ee:24:f7:0f:2a:d9:c2:24:cb:0f:eb:98:43:
                    b3:c6:6d:c2:46:dd:57:e6:9b:dc:1f:cd:dc:38:bb:
                    86:43:93:31:3a:78:11:68:84:41:0f:32:29:ef:04:
                    29:95:3f:57:8c:d8:ab:2a:19:92:30:e9:bb:52:47:
                    87:ab:40:81:22:2b:01:46:8c:13:a6:8f:6f:1e:20:
                    10:4c:32:34:df:cf:e4:c1:16:46:5b:c6:7b:f6:86:
                    46:85:36:18:55:e6:b2:fe:f8:de:c9:26:96:47:c3:
                    41:69:e1:96:97:d7:b2:70:41:c0:1a:53:6b:f4:81:
                    ce:c6:a8:f0:b7:90:b6:4e:23:0b:ea:e2:67:5f:3b:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:EA:8A:D7:33:F5:DE:34:6C:D3:FC:60:D0:79:BE:A2:C9:2E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25171da4-28f8-33e3-b38f-f8609715381f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.218.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:03:1a:a4:a1:42:7a:4b:32:65:92:01:73:ad:d2:04:85:ae:
         ec:45:00:1b:2a:2c:e6:26:d5:4b:f3:4d:c8:cd:f4:89:e0:c5:
         28:d9:f1:d3:2b:bd:36:e2:32:f5:3a:67:6d:39:f4:d9:78:00:
         72:97:05:99:ce:f1:54:e6:43:72:33:f9:b9:62:ce:3a:cc:6c:
         14:dd:e5:9a:3e:e7:a6:86:e8:8c:8e:16:f1:7e:10:d7:9d:5a:
         41:a9:2f:8c:78:cb:95:d5:38:ba:e2:68:8f:a3:77:3b:f8:b3:
         42:fd:c1:0a:02:1d:06:f5:6d:ea:ad:7d:3a:6f:bf:fb:52:1c:
         0e:1f:b4:46:64:5a:49:a0:4c:ce:de:f6:21:7a:56:69:43:1e:
         89:26:27:5e:17:c6:27:b0:8a:34:95:bc:58:81:e9:1c:61:85:
         fe:0d:06:41:bf:1c:e0:56:48:34:00:0f:da:32:43:0d:73:46:
         78:81:49:e4:0f:1a:58:36:6f:3b:2f:d3:d2:b2:5f:ba:cb:39:
         05:72:40:2c:eb:7f:93:f9:a7:82:f2:2d:f1:cd:bf:de:ea:d4:
         6c:55:ea:05:47:80:e8:64:b6:35:c6:d1:1b:51:a5:8c:ba:cf:
         51:64:a8:f4:d6:6c:69:a8:b9:aa:ae:65:0f:67:63:45:09:95:
         54:73:3b:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMZ+XSKvuL6nCbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2U1ZmIyZDYtYTBiOC00NzljLTlhMzEtZjVjNmUxNmI3ZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ8aeO1Gb3c9zk3oTyUZZMm36eVip/tttDOO
FoSq1v+TxuczlVDSKkSTkl6B99zAqWIcAq2ANVRuDnlYrWzR4+bUOn6UhQ26KMRg
/LmxIepE7WRNfpEOY89HfBBJMF16okUSUCPEB2RmvwdhWx9w4kKILurqitQ1ye4k
9w8q2cIkyw/rmEOzxm3CRt1X5pvcH83cOLuGQ5MxOngRaIRBDzIp7wQplT9XjNir
KhmSMOm7UkeHq0CBIisBRowTpo9vHiAQTDI038/kwRZGW8Z79oZGhTYYVeay/vje
ySaWR8NBaeGWl9eycEHAGlNr9IHOxqjwt5C2TiML6uJnXzscoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKU6orXM/XeNGzT/GDQeb6iyS4tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUxNzFkYTQtMjhmOC0z
M2UzLWIzOGYtZjg2MDk3MTUzODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdqMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMDGqShQnpLMmWSAXOt0gSFruxFABsqLOYm1UvzTcjN9IngxSjZ8dMr
vTbiMvU6Z2059Nl4AHKXBZnO8VTmQ3Iz+blizjrMbBTd5Zo+56aG6IyOFvF+ENed
WkGpL4x4y5XVOLriaI+jdzv4s0L9wQoCHQb1beqtfTpvv/tSHA4ftEZkWkmgTM7e
9iF6VmlDHokmJ14XxiewijSVvFiB6Rxhhf4NBkG/HOBWSDQAD9oyQw1zRniBSeQP
Glg2bzsv09KyX7rLOQVyQCzrf5P5p4LyLfHNv97q1GxV6gVHgOhktjXG0RtRpYy6
z1FkqPTWbGmouaquZQ9nY0UJlVRzO3Y=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:36:39 2025 by rpki-client