Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50658709-d5eb-3a4d-a522-80125d4f8098.roa
File:                     50658709-d5eb-3a4d-a522-80125d4f8098.roa (raw, json)
Hash identifier:          eP/WPH7/NG/WAR3X0jhv9fj6YW8EGHxstom1kHrJUyE=
Subject key identifier:   4A:EA:24:A8:6B:DF:D2:DB:80:09:88:4D:9A:AB:D1:B4:55:D6:1C:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4325B2DCFBA295F74C5FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50658709-d5eb-3a4d-a522-80125d4f8098.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.76.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:5b:2d:cf:ba:29:5f:74:c5:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=acb8f772-d517-4b21-9f22-7a0f5762d793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:9a:88:1e:17:5b:8f:3b:ad:db:ba:06:c6:
                    f6:96:f1:c6:38:34:b5:0a:f6:64:b1:d8:ee:7e:70:
                    c6:58:2a:a3:00:fd:07:c4:3a:2f:59:7c:9d:33:8f:
                    9b:16:28:97:8a:70:80:ad:f5:cf:88:78:e5:6c:8b:
                    d5:3f:79:e7:30:94:e1:95:fa:b9:62:30:db:c4:53:
                    e7:2b:c5:24:ff:7b:58:1e:81:92:d7:e0:09:bf:4b:
                    95:12:f2:2a:b5:6a:d9:e8:d6:6a:f1:86:2f:32:eb:
                    0f:f2:f7:9b:08:98:5a:89:7b:b2:61:db:2e:64:6f:
                    bd:20:f5:a5:fc:dd:5e:5b:86:4f:dc:f7:cb:52:92:
                    ba:11:3d:e0:94:be:15:85:4c:69:29:31:4c:21:ef:
                    69:ff:0e:c4:e4:94:ee:92:9a:7d:9f:c3:4a:b3:2c:
                    c2:df:71:2d:34:da:f3:78:ad:14:27:7b:d7:49:f9:
                    66:24:73:00:83:e1:2b:39:ba:51:01:d7:bb:50:3f:
                    cc:c3:69:a5:ef:87:3c:53:74:d6:cf:1a:68:31:aa:
                    61:c3:3c:2d:4a:b0:0d:67:da:52:5d:cf:7c:8e:53:
                    09:c8:12:4a:8f:d6:48:82:91:cb:45:07:72:79:1a:
                    48:de:51:b3:c0:32:e3:da:b4:fa:f2:86:1d:7f:a7:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EA:24:A8:6B:DF:D2:DB:80:09:88:4D:9A:AB:D1:B4:55:D6:1C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50658709-d5eb-3a4d-a522-80125d4f8098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.76.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:fd:99:a2:15:16:ac:80:59:60:03:34:82:82:3c:f6:9d:
         59:e1:60:ac:05:31:24:6c:3d:33:d7:68:c8:64:c7:11:2b:3f:
         12:aa:22:f7:6c:40:92:2e:4f:02:d8:1a:78:e3:59:24:da:0f:
         ee:45:a8:70:3e:5e:80:ff:61:e6:1f:94:4b:6b:f3:b6:04:ec:
         ab:bf:f7:da:b7:f2:1d:40:b9:eb:cd:08:af:d8:5f:f0:71:4d:
         24:7b:6b:38:cd:fc:f5:58:eb:50:ba:1f:24:ad:6c:0e:0b:ca:
         59:ea:b5:9a:f8:72:68:06:65:83:dc:a2:3d:d0:88:ec:18:c7:
         68:a3:d9:78:4b:ae:ee:ef:13:bc:2f:94:17:f7:c7:5e:48:39:
         77:e6:00:42:08:e2:53:fb:4a:54:c5:e2:99:6e:41:d5:c5:44:
         bb:81:ac:b5:b7:35:ce:a0:f6:1a:46:54:03:72:e1:c0:a1:ad:
         a9:9c:1a:ee:ee:03:86:a2:42:80:ef:1a:f9:c3:c4:eb:5b:e5:
         88:e1:5e:f8:cf:a2:da:cb:e8:22:5d:9c:59:59:11:0d:5c:7a:
         87:fc:38:b0:28:62:39:ca:84:63:4e:4b:e7:c9:bd:0a:82:f7:
         eb:31:8a:13:65:a2:24:4d:19:39:e8:da:5a:8f:a7:7a:ba:2a:
         b9:d7:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:50:08 2025 by rpki-client