Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10c0fc-734d-3d05-a8e4-132e1634cf9e.roa
File:                     3a10c0fc-734d-3d05-a8e4-132e1634cf9e.roa (raw, json)
Hash identifier:          2X+1BmCGuKDd3Rc2Q5cPzIQ8P6++k2sWrhT75wHKdgY=
Subject key identifier:   C2:22:12:B6:48:45:B6:72:B1:49:BA:6A:81:53:F0:0E:AF:ED:BE:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFF28C7448786B4C8D1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10c0fc-734d-3d05-a8e4-132e1634cf9e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.158.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:f2:8c:74:48:78:6b:4c:8d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b981a72e-953c-4aef-a0e1-829dd9003037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:53:2a:ae:f7:36:2f:f0:a5:5f:d2:e1:e7:
                    72:36:79:b7:1d:ab:bd:3e:88:95:db:2b:a2:b7:37:
                    d6:ed:ab:67:8d:cc:9a:c1:86:d7:d7:e5:13:b0:5f:
                    6d:b2:c4:16:9c:79:7f:c2:5d:99:b8:79:ab:90:c8:
                    9d:14:9c:00:37:dd:8b:d2:67:dd:cc:70:a5:fd:b0:
                    a5:23:39:f4:70:2b:bb:49:ce:81:19:f7:7d:c0:b5:
                    7b:c1:42:5c:27:6f:e6:26:0c:41:6a:c4:87:2f:0f:
                    7f:42:9a:a7:c1:41:c8:6c:0c:be:35:b8:bd:86:a5:
                    43:81:b1:fd:be:83:ec:7a:34:f3:99:de:bd:cd:92:
                    5d:14:e9:2d:f7:a4:0d:32:21:ab:92:11:c6:d8:a1:
                    81:41:6e:6c:7e:e5:3e:58:0a:90:48:45:16:a0:11:
                    92:f7:e7:64:dd:01:7d:9b:49:d1:41:6a:c8:12:f1:
                    e7:7b:09:57:7a:7e:d9:32:e5:55:59:e3:bb:08:fa:
                    c7:7b:8c:79:f0:78:34:7e:7d:f7:ed:d3:36:24:a2:
                    01:94:a2:77:57:cc:04:8d:f4:4a:09:69:09:92:d7:
                    84:8a:8c:34:7b:eb:ff:d5:cd:40:eb:db:63:21:32:
                    9c:2a:f2:42:b9:41:4c:a8:a5:f2:06:cf:ee:05:28:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:22:12:B6:48:45:B6:72:B1:49:BA:6A:81:53:F0:0E:AF:ED:BE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10c0fc-734d-3d05-a8e4-132e1634cf9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:69:f5:72:75:33:a0:24:15:55:a3:52:38:e4:bf:75:64:6c:
         fe:4f:ea:d1:a6:0d:1a:49:85:12:b7:30:a1:b3:a4:8f:9b:af:
         e9:d7:e8:5a:1b:7d:a8:21:40:47:0b:cc:cf:6a:b8:7e:af:00:
         10:30:04:da:ca:67:53:70:af:b6:94:8c:d0:12:61:70:df:36:
         f0:32:89:b5:0e:32:dd:dd:4d:5b:86:a3:14:5a:6f:7f:39:e3:
         15:b1:d9:d5:e8:da:46:08:11:e6:66:5e:34:97:d0:e0:22:fc:
         65:e5:76:60:b0:6a:5f:79:db:06:72:5c:fa:b4:0e:eb:38:e6:
         78:79:90:bf:5a:3b:8e:3d:bf:c9:61:01:56:7e:a8:ca:40:e7:
         e9:e9:a5:8d:04:e1:6b:85:db:6c:49:cf:da:93:c3:fc:92:b1:
         26:0c:5f:56:9e:34:b0:64:53:aa:df:8d:19:50:ac:b0:1e:de:
         af:9a:dd:bb:79:d8:e8:c6:e4:77:48:a3:18:cb:af:b9:eb:ae:
         24:41:4f:89:6d:98:38:dc:5b:49:3c:5f:2b:3b:5d:d8:df:30:
         ee:6b:51:a4:6d:ba:96:99:84:85:6e:54:a7:72:99:3f:0c:88:
         9a:be:ef:a1:5d:35:19:d3:59:de:9c:57:a6:86:15:50:c6:80:
         98:8d:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:57 2025 by rpki-client