Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f448260-cf39-39ca-8382-e9e9922bc16f.roa
File:                     3f448260-cf39-39ca-8382-e9e9922bc16f.roa (raw, json)
Hash identifier:          LUX13g4bn1nm8rUTxsqg+T9bAS/IS/WVVYeeuCy97zg=
Subject key identifier:   C2:46:20:20:80:B1:F9:C2:9A:03:6B:50:70:19:71:22:C7:A6:D5:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431B9CAB2E5BE6EF14CD780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f448260-cf39-39ca-8382-e9e9922bc16f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.38.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:b9:ca:b2:e5:be:6e:f1:4c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=46ccecf8-72bd-4e8b-a811-8c926ece7a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:65:13:5e:6c:09:df:c6:31:75:2b:48:fb:
                    94:91:be:0f:9f:fd:8f:4e:1b:ae:3f:75:37:b8:5a:
                    30:80:78:8f:c7:b2:ab:86:bd:8d:35:2d:fd:8c:3d:
                    6f:fe:8a:b0:38:ed:f0:fc:03:2c:8c:84:47:76:a2:
                    0f:f1:8a:34:e9:7e:44:09:72:04:5b:6e:54:f9:7c:
                    67:64:7e:26:e9:25:c2:b8:51:43:a6:5e:58:bc:bc:
                    0a:8c:1e:64:e6:6d:8c:32:f3:c6:4d:cc:be:7c:ef:
                    25:a5:ae:94:0f:6d:25:6e:21:0e:9a:2b:02:43:08:
                    44:1c:ac:67:2a:4d:c8:c0:ea:0c:de:64:b6:7f:cc:
                    67:89:c6:ad:21:4b:70:64:5d:af:66:b9:63:dc:a0:
                    27:ba:a1:45:e4:21:9a:3a:15:2b:e4:50:e9:f3:5e:
                    a2:69:26:b6:47:36:fb:60:57:e9:e7:31:77:3f:31:
                    5a:0b:c7:c5:c2:db:32:37:47:2f:b6:3c:46:73:58:
                    c3:b4:bb:01:a6:bb:ab:21:49:7a:24:8b:19:b9:5b:
                    90:2f:b0:51:7c:dd:47:93:64:ce:7e:07:46:f6:89:
                    3f:6f:10:02:04:e7:66:bd:b7:ca:58:48:b5:66:2b:
                    16:46:e0:7d:9a:17:bd:30:67:2d:5c:c9:15:2e:25:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:20:20:80:B1:F9:C2:9A:03:6B:50:70:19:71:22:C7:A6:D5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f448260-cf39-39ca-8382-e9e9922bc16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:56:0a:ce:d6:15:a6:d0:70:e7:7b:26:44:d2:58:f5:98:29:
         39:8c:08:22:15:00:d3:57:c2:4a:7c:7d:e2:da:ca:ba:e8:99:
         74:00:65:96:7c:5f:be:8e:2c:c3:ce:14:fa:01:6c:86:96:6d:
         96:47:54:a2:df:cb:e3:aa:fe:dd:06:a3:59:24:a6:a6:67:d1:
         f9:5f:9b:57:7d:6b:ad:fe:68:8a:2a:37:45:fc:91:b4:b1:c9:
         c2:f1:33:c2:8d:78:1b:fe:88:42:31:1a:12:72:2c:c1:ee:3d:
         c1:c4:32:28:9a:77:b3:35:14:f4:63:f6:3e:98:7d:35:39:29:
         21:5b:52:42:a2:49:ec:fc:ca:f7:7f:b0:9c:43:e1:2b:bb:ad:
         67:d6:92:0d:54:3d:38:22:1f:0d:7e:f6:1a:6c:ff:c0:52:02:
         da:15:3a:da:46:08:82:ce:1b:0d:7f:15:da:fd:34:a5:c5:5d:
         7b:4e:41:8b:54:b1:ac:eb:60:24:b4:e4:63:98:8b:cc:b1:3d:
         cc:1a:c6:9d:43:75:a5:43:99:a1:54:0d:47:8f:fc:47:d8:aa:
         4a:ae:48:11:3f:8b:73:6a:27:99:c7:45:16:3f:bd:18:21:31:
         b5:01:d7:54:a6:96:30:da:a6:1a:92:86:94:88:cf:17:3e:cf:
         19:2b:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:30 2025 by rpki-client