Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a54127e-a28a-3be0-a72d-a7a391efa0e6.roa
File:                     2a54127e-a28a-3be0-a72d-a7a391efa0e6.roa (raw, json)
Hash identifier:          Je0Q3BEW5kc8W4+YGQHRmPMF980NyYBTeFOqaqeqKjo=
Subject key identifier:   45:0F:77:12:44:8C:EC:F8:68:EE:89:51:61:99:E3:1C:FD:AD:3A:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C072FDFE24F4BDE8172B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a54127e-a28a-3be0-a72d-a7a391efa0e6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        73.131.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:2f:df:e2:4f:4b:de:81:72:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3eaff6b5-71ca-4316-a539-2c51e6fa2114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:18:69:0d:d6:6c:14:1d:9a:5b:e1:88:b1:
                    f7:23:8c:88:cf:9b:cf:10:96:9c:17:ae:08:72:52:
                    91:f1:21:a5:0e:94:d3:d1:d5:b9:8c:55:e7:96:65:
                    f9:e4:fa:5e:98:8e:1d:6e:3c:d0:ff:b5:97:20:da:
                    0b:de:4f:96:2a:45:30:59:fd:f4:f1:d3:88:8f:7e:
                    13:ee:c3:0b:2e:14:a8:92:ee:8e:c7:db:bb:d1:96:
                    ae:f1:09:08:2b:00:cd:0d:ef:27:81:07:43:e2:42:
                    52:6a:8e:29:56:7d:41:4e:94:13:26:91:b2:7f:94:
                    c6:5b:eb:fa:dd:3a:35:6d:b0:3a:6a:90:53:fd:81:
                    b6:7d:ee:cb:e1:31:35:b9:40:83:30:6b:b8:5a:6a:
                    56:d0:01:90:cb:88:45:08:59:37:dc:bc:61:5f:63:
                    9a:52:42:08:49:e4:7e:9e:10:20:9e:c7:5e:39:00:
                    7e:38:32:3e:fd:10:10:99:d7:e0:56:e8:ed:f2:49:
                    e7:1a:66:f0:a0:ab:54:48:d3:b1:5d:c6:6f:6f:9f:
                    cd:2d:3a:b9:7f:46:eb:37:5b:d9:fc:62:f4:04:03:
                    b4:29:d2:5f:56:69:47:5d:6e:00:c9:42:bb:fa:af:
                    12:d9:11:16:13:d0:eb:34:2d:d8:61:11:ab:d2:5e:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:77:12:44:8C:EC:F8:68:EE:89:51:61:99:E3:1C:FD:AD:3A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a54127e-a28a-3be0-a72d-a7a391efa0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.131.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:ab:c3:c8:a6:6a:68:87:99:17:f5:f6:6f:34:36:7c:24:
         0b:f1:fe:c1:6b:96:ca:57:02:1f:94:ed:c2:70:bf:f5:10:9b:
         cf:ac:f9:48:44:f7:c2:dc:45:45:19:fc:c3:31:47:84:70:36:
         b9:08:e8:37:21:33:ec:c3:8e:ba:89:16:07:8f:6d:0b:cf:01:
         dc:bf:bd:ce:52:e5:0d:89:63:c3:ad:08:30:d3:67:ca:f6:34:
         c4:13:75:e4:73:3f:ce:cf:d2:10:73:1e:84:c9:52:e7:71:a1:
         eb:0d:84:a5:77:5d:17:2a:bd:47:e3:1b:58:fa:3d:33:19:72:
         88:31:ab:9c:99:eb:d9:84:ee:f0:93:de:be:84:21:9b:0a:08:
         80:5d:f8:0c:54:77:d5:1a:59:70:7f:99:fe:b0:c7:ae:f8:e5:
         2c:27:60:eb:72:2a:0c:e1:e8:13:ed:d6:cd:4e:79:d6:ac:15:
         75:b6:92:b2:ee:99:81:bf:f2:94:c8:fc:8f:9b:cc:93:ce:0b:
         02:86:15:05:a1:a3:7e:dd:89:9f:18:82:f8:6c:d3:39:4c:f4:
         40:5c:f3:9a:43:41:f2:65:6b:dc:25:17:a2:dc:25:3a:53:16:
         cb:5d:2e:a0:84:56:94:ec:49:62:e3:89:91:c3:92:17:1e:a5:
         b0:94:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:42 2025 by rpki-client