Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/514eff0a-5bcb-3863-a999-c16858658f4f.roa
File:                     514eff0a-5bcb-3863-a999-c16858658f4f.roa (raw, json)
Hash identifier:          3bxlpAifsMu6bz7L2Xcam2jNHKpl6qyB9H/RJY0ulsw=
Subject key identifier:   6E:94:93:9B:88:FE:6A:73:04:A0:6A:41:2E:2C:D7:1A:21:36:D7:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75C3E97F4DF1D0F5CA3880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/514eff0a-5bcb-3863-a999-c16858658f4f.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.7.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:c3:e9:7f:4d:f1:d0:f5:ca:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=75d3191d-9c4c-4190-a551-c632eb29d107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:f5:90:57:36:63:12:3e:8d:59:a3:1b:11:
                    14:a8:13:82:1e:35:cd:fd:e8:e2:e9:6a:f1:aa:d8:
                    e8:bd:a1:76:17:87:3a:8d:6f:0a:08:4d:55:55:64:
                    cb:9e:51:6c:5e:7a:1e:f7:e2:a2:dd:eb:04:1c:96:
                    dc:09:3c:29:43:da:8c:5e:da:69:ff:d9:18:6e:c7:
                    c7:e1:d1:0f:ae:33:bd:45:54:b8:14:4d:79:59:9b:
                    eb:71:1c:3f:d6:45:b6:38:bf:14:e1:b8:c3:54:41:
                    9e:82:5f:a8:9e:1f:49:cb:6a:f4:01:fb:42:ec:40:
                    c0:dd:4a:73:b6:4c:c2:ef:34:ee:a1:1b:a7:bb:8d:
                    3d:1c:02:4a:a4:5d:b3:b3:55:fe:f3:bf:65:33:dc:
                    8b:ff:a2:4c:10:84:ed:89:46:42:1e:e1:33:e1:1f:
                    30:63:16:e2:67:6a:21:3b:d4:5b:11:df:13:ef:9e:
                    b7:cd:ce:d7:ba:d9:18:29:a0:b4:4c:e3:33:28:a6:
                    2b:41:aa:f1:77:80:66:51:6b:1a:a9:ee:b1:ff:98:
                    db:d0:e5:f3:b0:75:8f:b2:81:af:d7:d4:3d:9b:c9:
                    ad:eb:da:1e:d8:82:3b:cd:d1:0f:48:71:79:ff:1e:
                    06:bd:37:c0:06:f7:14:0b:dd:ed:5d:6d:11:ec:41:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:93:9B:88:FE:6A:73:04:A0:6A:41:2E:2C:D7:1A:21:36:D7:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/514eff0a-5bcb-3863-a999-c16858658f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:9e:ab:3f:4f:6f:c2:b0:d5:b3:80:49:8a:22:a3:8d:9a:
         58:89:b8:11:d2:47:a3:ba:0c:44:82:f4:f4:55:80:79:b8:53:
         75:12:2d:00:ab:96:e3:eb:5a:84:31:ec:0c:30:57:11:0b:16:
         c8:2c:cd:8e:15:64:12:c3:04:bd:fb:e4:3b:cf:e5:8a:37:ca:
         c2:0d:ea:c8:de:54:46:6c:cb:63:8d:da:2c:7d:53:87:ea:f5:
         8b:83:02:d5:28:d6:9c:90:4c:e2:f4:86:cd:a1:6c:d9:fa:46:
         4c:93:19:91:7b:04:88:ce:24:60:32:97:97:34:64:5e:7c:07:
         51:b6:6f:95:cc:20:09:49:1c:dd:b1:21:78:35:b9:eb:4e:c9:
         bb:e8:9a:0e:89:d2:93:38:44:06:c4:e5:20:68:e7:be:d4:68:
         38:7c:bf:fc:40:01:7b:62:12:9d:8f:a4:4a:ba:91:a5:3b:a5:
         c3:fc:8b:aa:d6:80:a8:44:64:6a:8a:33:3a:8b:9d:31:8e:02:
         ae:45:57:86:e9:11:3c:f9:5e:d6:07:84:99:c2:8f:fc:1e:7d:
         0b:a3:e1:24:c3:5e:1c:e8:31:ff:92:29:09:ee:04:0a:0f:94:
         32:ad:66:44:cb:f2:bb:2c:ab:7b:00:c8:6f:a3:0e:8b:a1:8b:
         e1:ab:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:08:08 2025 by rpki-client