Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c524d04-ae00-3420-bf24-f596cf5df722.roa
File:                     3c524d04-ae00-3420-bf24-f596cf5df722.roa (raw, json)
Hash identifier:          sAUDIRgTEZKwGup+7bvi6puYC/CEEhv7UIns3F+kzto=
Subject key identifier:   0A:DC:D1:24:16:2E:1F:C5:D2:1D:74:D3:BC:C2:E1:20:3D:7C:97:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75CC28FD85BAB40BD91600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c524d04-ae00-3420-bf24-f596cf5df722.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.145.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:cc:28:fd:85:ba:b4:0b:d9:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=59462167-5759-4252-904a-526c64c71e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:fe:e5:42:aa:f0:af:5c:3b:00:22:20:9b:
                    9a:ec:7f:d8:bf:a8:31:ea:48:44:74:a6:bd:e9:96:
                    56:c7:25:87:b0:79:07:01:a7:b2:8a:b8:99:47:30:
                    56:3d:86:d1:4f:62:c4:71:47:1a:32:a0:e8:3e:90:
                    d7:ab:ad:e4:e3:60:2e:64:03:7b:40:a5:51:74:29:
                    b6:8b:a4:6a:e9:b1:e6:6c:5b:3a:73:5c:4a:40:ca:
                    56:d4:f9:e0:e8:88:59:52:4e:18:de:93:ce:ef:16:
                    82:33:bb:87:a5:e9:db:6f:3d:53:66:c6:76:2d:16:
                    56:c8:89:8e:55:41:24:83:8a:d6:9e:b7:99:5c:b0:
                    30:b2:3a:5c:af:52:e6:1b:1c:e3:4b:2e:16:d3:be:
                    bf:2c:b5:03:ac:07:af:43:7f:14:62:43:b1:e8:2b:
                    b7:29:59:ce:0d:a3:25:ba:99:f8:db:2e:80:11:88:
                    cc:38:fb:4f:af:c2:bd:d1:df:bd:5b:89:5f:c6:96:
                    c1:61:b2:4d:24:f9:a5:5a:44:e2:e0:44:55:ce:8a:
                    dd:ef:9e:cd:60:1d:d4:f5:29:9e:55:28:14:27:77:
                    31:0d:dc:b3:3d:89:5b:66:6c:bb:8e:79:5c:e2:81:
                    cf:c7:15:7c:da:8b:22:60:86:81:e1:dc:93:b1:4f:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:D1:24:16:2E:1F:C5:D2:1D:74:D3:BC:C2:E1:20:3D:7C:97:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c524d04-ae00-3420-bf24-f596cf5df722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:1b:4b:25:ad:79:41:40:16:99:47:ac:55:00:73:78:90:
         b8:d0:50:24:ad:8f:35:f1:86:c4:cf:f6:ab:19:90:be:54:f5:
         56:f8:cf:9b:bf:1a:bf:f4:50:58:8b:ad:76:25:51:a2:98:24:
         5b:ea:e8:bb:d8:3e:c6:c8:b4:a2:5e:19:a3:7f:aa:b3:f8:e0:
         94:58:eb:02:77:4c:d9:93:a4:78:7e:37:f2:a7:1f:31:40:9e:
         15:9d:eb:62:a7:19:51:1e:3d:f2:39:85:57:b7:02:32:d6:6f:
         7d:1e:0d:1a:0d:48:66:3f:c5:f0:61:3e:80:d8:24:c8:23:40:
         d9:50:ab:43:cd:78:cd:91:94:81:d7:bf:de:57:fd:58:0b:31:
         fe:89:29:ca:27:68:1c:c1:61:c0:ea:ff:ed:3d:89:7d:86:53:
         ac:f5:bd:14:de:d6:60:25:ea:e7:72:6b:8b:29:16:4a:43:5e:
         12:73:17:23:a0:70:84:3b:59:25:a7:1e:1a:4d:3c:74:4e:21:
         01:ae:18:f5:6d:71:23:21:78:8e:27:b1:4c:10:48:ce:56:3b:
         e9:4c:6f:36:24:33:65:e3:9f:bb:4f:53:d6:43:56:f4:8f:0e:
         46:85:3b:00:bf:d2:41:87:3c:4f:31:64:05:4c:6e:1c:20:84:
         68:a9:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:44:28 2025 by rpki-client