Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31607e41-8468-31f4-881f-7bda15ef4074.roa
File:                     31607e41-8468-31f4-881f-7bda15ef4074.roa (raw, json)
Hash identifier:          voAkIagkeWAmgIRfXxgGlFbEmNzuKC4iO4KZyFC8aS0=
Subject key identifier:   48:8E:BE:EF:51:52:11:AE:B2:00:89:0B:B7:EC:04:72:08:88:F0:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430542513091A38A6754380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31607e41-8468-31f4-881f-7bda15ef4074.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.249.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:54:25:13:09:1a:38:a6:75:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f9088a1e-2f4f-42c9-bce3-a12112b8bb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:98:dc:89:d3:ab:78:eb:8b:3f:2e:4d:b3:
                    7a:5e:43:5b:93:05:d7:23:cb:52:ec:7a:ff:bf:ef:
                    a8:12:94:89:c0:49:5d:70:85:52:2c:b3:73:22:d1:
                    2f:a7:5d:ac:bd:14:29:e9:48:ab:8d:db:64:a1:ec:
                    09:b3:cd:0d:5f:4e:41:e9:b5:20:4c:64:4a:83:40:
                    b5:c3:53:a0:12:05:7e:02:6a:22:4f:01:b0:f7:de:
                    3d:9a:96:af:be:fc:48:e6:f9:18:af:a8:33:fe:ca:
                    e4:e8:07:59:40:0b:a7:4a:66:08:da:ff:0a:59:7a:
                    71:32:bf:6b:95:49:78:c0:e1:b3:32:ba:5b:51:24:
                    41:29:21:65:26:a4:ad:5e:72:86:cb:ce:d2:ab:9b:
                    ea:08:fd:55:98:7a:df:f3:3e:4e:bb:54:4a:29:e6:
                    39:4b:2f:6c:9f:f6:c3:7b:59:b8:68:47:f7:56:e1:
                    ff:c6:28:9c:fc:5c:a1:ac:f3:89:3c:bc:a8:a2:e2:
                    d2:0f:70:3e:0d:97:08:d7:ff:cc:df:e4:0e:fa:47:
                    e0:47:ad:77:28:4d:ab:39:fe:5c:88:e1:87:e4:8f:
                    39:c4:bc:bd:62:13:cc:28:98:2c:60:37:03:27:0d:
                    80:54:87:32:8d:7d:ef:63:af:95:cb:35:9c:ea:b9:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8E:BE:EF:51:52:11:AE:B2:00:89:0B:B7:EC:04:72:08:88:F0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31607e41-8468-31f4-881f-7bda15ef4074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.249.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:05:9f:34:d1:f5:81:e9:e5:47:00:da:83:46:f8:66:87:88:
         21:40:7d:63:ba:c1:85:66:2f:f0:77:31:ad:13:dc:49:cc:fd:
         0c:d2:1a:d1:dd:fd:ad:64:2c:c8:17:8c:d2:09:a5:6c:d2:87:
         40:48:8e:be:d9:f6:95:00:45:dd:c6:f2:67:fd:01:48:7f:e0:
         a9:d5:be:3e:bc:b3:07:d7:c0:7a:d8:5f:5c:fb:80:e5:4e:44:
         24:f9:47:d0:0c:34:1f:4e:e0:ab:83:e7:57:bb:a5:71:6b:b9:
         a2:4f:47:de:c2:a2:f8:c0:16:2b:3d:2c:fc:96:69:a3:a8:38:
         d4:c6:c4:9f:c4:a5:7c:30:8a:5d:d8:4c:2e:2f:f4:0c:53:e0:
         fe:65:6c:b9:06:99:6e:4d:c1:20:87:c5:d0:bc:17:fa:53:6c:
         c0:c0:ad:3e:c8:2b:51:a8:7c:c1:25:8f:8b:d0:dd:e2:11:1f:
         90:34:6a:9f:89:b0:37:ef:1e:8f:cc:18:4f:e4:0a:5c:2c:e9:
         79:c9:ef:6a:3c:cc:85:79:fd:31:b1:19:4f:bb:ba:a4:18:ae:
         c8:92:66:5b:5e:2a:3b:b2:ad:1e:ac:ca:a4:fc:14:71:a4:f4:
         4a:d6:00:98:ee:35:0e:1d:4c:3f:2f:25:d5:3d:3f:1d:8c:9a:
         e6:de:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:05:27 2025 by rpki-client