Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/341c6ba4-3ea1-37ae-919d-89b59d41913d.roa
File:                     341c6ba4-3ea1-37ae-919d-89b59d41913d.roa (raw, json)
Hash identifier:          E3+7Tp1lSxkSYUd20ZA6Zk05kSnkMeYl67VQbhG9IJw=
Subject key identifier:   04:7D:C6:EE:F7:C4:6F:BB:FE:D3:B8:E9:CC:F8:8C:44:41:65:F9:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C5979D11965871066E4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/341c6ba4-3ea1-37ae-919d-89b59d41913d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        73.228.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:59:79:d1:19:65:87:10:66:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=c0280ce0-884d-4647-b4a2-226341a3963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8d:ba:65:58:a8:5e:51:97:4e:4a:78:58:00:
                    c6:ec:ad:b3:2e:3f:d2:36:06:44:a9:2e:48:4c:d9:
                    48:48:81:b1:9b:09:1f:38:df:2a:02:11:57:b9:69:
                    e8:73:30:3c:9f:a3:74:82:82:21:3e:5f:03:f6:13:
                    9e:fd:30:98:ce:09:11:c0:11:c5:3a:ea:b4:82:5c:
                    ba:1f:61:a8:56:00:0f:3a:9c:8f:49:99:13:3f:b4:
                    48:6d:bb:19:da:ad:4b:ba:79:d3:04:10:cf:35:4b:
                    03:ea:3a:0e:6d:e5:dd:fe:60:fd:55:f1:f2:12:cb:
                    8a:d2:4a:20:77:86:5b:f5:1a:c1:5c:4d:36:8a:55:
                    96:3c:73:18:33:90:9d:b9:96:4e:e1:05:13:c1:80:
                    4d:5f:0d:9b:17:5c:92:fa:aa:a4:41:1d:ff:4b:88:
                    26:16:e0:31:6f:18:99:26:83:cb:b9:fb:37:cd:54:
                    04:94:0f:f8:af:17:00:84:15:f7:1f:ba:94:5d:f2:
                    96:94:ad:2e:86:3c:87:12:2c:04:e2:aa:ed:76:87:
                    8f:55:c4:f8:77:18:20:0d:51:21:dc:b8:c2:93:3f:
                    3c:69:96:b4:86:8b:1c:a1:c4:48:f5:a1:96:9c:cf:
                    64:3c:df:7d:2b:e8:72:79:85:28:ff:17:be:8c:6b:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:C6:EE:F7:C4:6F:BB:FE:D3:B8:E9:CC:F8:8C:44:41:65:F9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/341c6ba4-3ea1-37ae-919d-89b59d41913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:31:96:d2:ad:2c:f4:4f:e1:19:95:37:bd:e8:37:71:a0:
         46:e8:7e:a0:1a:64:ef:1f:39:c2:3d:e4:03:d1:22:e1:c6:8e:
         c4:96:b6:66:31:ef:0a:9b:a8:54:80:0a:17:8a:54:4f:22:15:
         fb:c0:2c:5c:a8:a3:b4:6b:16:90:0d:4d:f4:3e:42:12:6a:b2:
         86:7c:0d:34:ee:84:ce:70:46:8e:7e:91:95:98:17:a8:8f:ce:
         c3:b7:de:b4:e8:42:26:1b:45:ec:e1:13:11:35:7a:60:ac:f7:
         aa:7a:59:be:d7:c0:2f:4e:6f:cb:e8:39:de:16:d1:9e:d5:a4:
         3b:42:4d:8c:1c:bd:4f:d9:e8:14:9d:92:94:79:3d:6d:39:b4:
         14:b2:3f:f4:62:f1:3d:60:70:ef:9f:82:f0:e7:e3:04:22:14:
         56:17:03:cc:42:c9:d5:c8:2c:5e:5c:40:79:d3:74:86:61:5a:
         58:91:6e:ff:f1:21:05:c4:02:9b:7d:76:3e:52:1f:af:d4:71:
         58:13:bc:51:0f:2b:c0:1d:47:a3:d4:06:ec:35:62:d9:41:f4:
         e9:0c:cf:3c:7b:23:85:0c:83:df:e8:e0:1a:cc:b5:83:8d:f1:
         a4:3a:0f:4f:89:d9:91:a4:fc:0e:ad:9a:19:c3:70:44:33:fe:
         f9:f5:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:37 2025 by rpki-client