Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ec25735-34c2-3603-b925-ea9405592005.roa
File:                     2ec25735-34c2-3603-b925-ea9405592005.roa (raw, json)
Hash identifier:          ocnQYhTlq+OVa6UH1Kbm104Ee4n/fF22YJt6e2X5iGA=
Subject key identifier:   88:6A:C6:CF:F9:88:60:2D:A3:1F:59:49:DA:58:11:A4:40:69:5B:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AE76CD6125FEBEDA39980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ec25735-34c2-3603-b925-ea9405592005.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.100.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:e7:6c:d6:12:5f:eb:ed:a3:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=3dd7978e-25ca-4287-9f19-c6c53d4a6d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:4e:65:f9:c3:09:36:df:55:6a:71:1b:92:
                    70:6d:50:78:a7:4d:89:8a:b7:75:54:cd:0e:41:16:
                    9e:9d:fc:7e:bf:dd:9e:ac:51:de:a6:df:99:64:4f:
                    ec:ea:66:e2:ff:48:58:d9:5c:23:a6:8f:c2:ba:19:
                    16:61:f2:e2:c5:f8:1b:cc:d1:eb:60:4c:6c:a2:fa:
                    f1:57:53:18:b1:48:b3:43:c4:c0:74:36:2e:64:c0:
                    2c:1e:ea:d0:28:2a:5e:c3:ad:a6:e7:ec:66:00:76:
                    00:6b:ce:7d:eb:de:8e:4e:5a:24:b8:86:c8:19:b8:
                    3c:1f:95:a2:68:d0:da:d9:dc:fc:49:06:a4:84:95:
                    2c:a4:f7:47:a8:92:4d:74:74:4e:62:08:72:98:25:
                    60:2d:03:e9:fd:f9:0c:4b:8d:d4:9a:e1:22:3c:77:
                    ec:6b:e2:73:57:57:80:81:40:f8:d6:d5:34:e4:55:
                    dd:12:c9:18:4d:c0:35:c1:f5:03:3e:7b:b1:b8:ec:
                    37:b6:46:4c:5c:4b:6e:ef:83:0f:38:68:66:3a:af:
                    19:93:c2:b5:cd:23:46:98:dc:02:e6:3d:d5:6e:93:
                    88:2e:bf:5f:fa:f9:c7:d7:99:e3:94:ee:1c:1e:0e:
                    88:42:44:64:a4:37:c3:04:31:59:6b:34:69:11:03:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6A:C6:CF:F9:88:60:2D:A3:1F:59:49:DA:58:11:A4:40:69:5B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ec25735-34c2-3603-b925-ea9405592005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:a8:4a:32:d5:9c:1f:86:a8:07:f9:8c:39:9d:f4:09:21:04:
         9d:04:d7:d8:f8:30:6b:76:41:7c:e9:94:24:60:71:a3:ee:3b:
         60:da:8c:31:82:54:df:1d:01:1f:c7:11:06:82:a7:23:10:2f:
         a7:2d:29:2f:99:79:6c:e2:ee:7d:a3:38:85:4f:7e:b4:05:10:
         6a:cd:10:c4:98:53:fb:59:28:dd:1b:a6:6c:84:2d:4d:51:1f:
         97:09:b2:cc:10:6e:9a:ef:37:42:d4:03:93:29:a5:ed:8a:23:
         03:66:b7:21:7d:81:9b:c3:65:d5:5d:0c:8c:e1:cb:3a:1e:6d:
         ab:2b:54:b7:65:bf:35:62:d1:14:5b:e3:3e:e1:9c:bb:78:d7:
         0c:c4:9d:68:63:a0:5e:fd:86:6a:57:81:23:86:6b:e5:4e:f3:
         41:de:45:a7:bc:05:eb:91:c9:47:57:2b:57:d6:c8:ee:50:23:
         a0:a2:d1:52:db:19:cf:01:5a:42:c7:40:48:95:ba:46:56:19:
         38:a9:eb:f2:b4:9b:23:9e:99:43:9d:2a:3d:18:38:4f:e8:87:
         cc:96:ac:f8:2a:72:29:d6:96:44:00:59:02:19:2c:1a:79:d9:
         80:fb:1d:af:9c:e2:f7:09:54:71:73:6e:60:cb:38:de:bb:cb:
         c8:67:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:43 2025 by rpki-client