Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53106148-c605-3bd4-a1bc-6746d26444bd.roa
File:                     53106148-c605-3bd4-a1bc-6746d26444bd.roa (raw, json)
Hash identifier:          +aoNo1i9O6RsQje6K52xj/yU6c6nc3XPH7G5Dzv87C4=
Subject key identifier:   D4:94:76:C7:6B:BF:E6:E4:AC:2D:8E:3B:77:6C:8A:BB:27:91:8C:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4305AC31D2756F8436435C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53106148-c605-3bd4-a1bc-6746d26444bd.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.4.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:5a:c3:1d:27:56:f8:43:64:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=e2ae8d29-a6d4-4f1f-a892-8c01c5199ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:c2:6e:f8:d9:dd:58:4f:46:60:cf:78:4e:
                    ba:80:ca:99:53:71:08:b5:4c:f9:ba:d8:56:31:35:
                    86:08:d4:45:50:53:ba:a0:d9:d1:ef:6b:2a:0c:10:
                    7c:6d:2d:34:cf:50:cb:f1:d5:c4:42:50:99:a7:62:
                    54:86:06:88:ee:ac:40:b9:83:1a:7a:ce:c6:ac:45:
                    67:29:c6:65:7d:b9:81:2b:18:75:93:d9:f5:d0:3d:
                    a5:31:61:eb:a8:b6:8d:70:64:d3:5d:55:cd:a7:76:
                    10:f3:85:7e:9d:ac:11:f5:1d:6e:4e:a0:ac:d5:37:
                    6a:93:fc:64:cd:25:ae:d4:ee:4d:d6:d3:48:f6:14:
                    b5:41:58:df:ad:d3:b1:76:c9:17:ed:11:d3:ae:80:
                    f8:7d:ad:0a:59:d3:85:0d:3d:ee:2b:f2:76:cf:5e:
                    c5:8a:fe:9f:4e:70:a2:58:a9:f6:94:d3:6f:98:c7:
                    67:aa:88:ef:04:fb:3d:21:4d:97:74:8c:14:7a:bd:
                    77:89:e0:09:9f:3f:21:e0:d6:d6:4b:6f:27:a2:31:
                    e7:53:7c:b8:1c:53:a7:10:3b:ad:e7:2f:a2:05:8c:
                    91:04:51:6f:73:3b:b2:12:49:13:54:07:33:ff:44:
                    1d:c7:90:a8:c4:ed:7e:a5:4b:1f:d8:de:d8:ee:78:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:94:76:C7:6B:BF:E6:E4:AC:2D:8E:3B:77:6C:8A:BB:27:91:8C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53106148-c605-3bd4-a1bc-6746d26444bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.4.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:88:54:c6:7b:36:19:d5:ac:ee:fa:db:83:13:f2:70:45:58:
         34:3c:b5:1c:91:78:ed:53:47:90:a5:53:47:fb:2b:09:7b:4a:
         e0:29:4e:ac:d8:f8:19:eb:da:0c:c6:3b:92:cb:e9:96:0c:9d:
         e4:66:83:52:97:23:2f:3c:6e:18:47:21:bd:08:48:d0:66:74:
         41:4e:1c:5d:92:69:0e:43:6b:d3:fb:8b:63:f8:fa:f8:7e:13:
         09:10:51:2c:f1:11:a0:c5:43:09:d6:83:22:e2:9b:69:d4:d7:
         5a:20:58:ea:75:11:81:a2:aa:3f:01:39:46:db:20:79:57:c4:
         da:98:46:24:40:6f:a9:66:d6:db:12:04:41:86:a1:ad:58:7d:
         58:6a:49:3b:51:ec:99:56:d2:8f:c7:3b:7e:f9:67:ee:13:60:
         6e:dc:6e:71:aa:ae:23:ca:76:c7:fa:c7:21:d7:13:c3:d2:e0:
         b3:af:18:38:45:80:78:38:90:63:45:8d:c7:fc:20:96:24:2a:
         3f:0c:65:0c:f6:2e:77:f7:c8:36:cd:77:7d:d5:16:0a:e5:30:
         89:19:7b:17:88:56:67:85:91:ec:92:51:ba:d3:0f:b6:36:73:
         50:d0:c3:f9:12:1e:d9:d0:d1:a5:62:d0:34:b3:eb:22:50:92:
         8d:b4:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:57:17 2025 by rpki-client