Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b1fa5a-98b0-3dea-8192-22f3bb497381.roa
File:                     62b1fa5a-98b0-3dea-8192-22f3bb497381.roa (raw, json)
Hash identifier:          IzQ0t6tGWnfMJvEP/aeoI8BmAazszmJ2TYd/hIFake4=
Subject key identifier:   72:F3:AA:41:96:90:54:AA:E8:C8:57:74:47:B7:3E:E5:38:82:39:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FD25752221DCAA55A8650
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b1fa5a-98b0-3dea-8192-22f3bb497381.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        71.63.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:d2:57:52:22:1d:ca:a5:5a:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=58028135-2175-4b23-b14a-a64a415ed155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4e:7e:55:b0:30:60:e5:07:4b:cf:8d:3a:96:
                    10:62:5d:fb:7c:e3:16:9a:96:e6:2b:6a:80:24:85:
                    7a:ba:d1:6d:21:c5:dd:ec:76:ba:ff:2b:30:24:4b:
                    e9:04:0f:6b:7e:98:3d:46:0b:db:a2:bd:45:8b:84:
                    b2:b0:ad:bd:96:0b:bb:21:27:28:5d:ef:22:ec:44:
                    a2:a1:86:2e:60:24:27:e8:b6:1c:cd:47:9e:18:85:
                    37:1c:15:ba:ce:1b:12:8d:d9:11:6e:80:12:59:47:
                    ba:c1:0a:7b:d2:48:66:65:ff:a7:7e:66:db:0b:83:
                    2d:1a:66:ba:37:e2:0a:1a:82:32:9e:d3:c2:69:cb:
                    43:ec:65:21:d3:17:30:d7:f6:df:38:d1:cd:45:7f:
                    84:71:ad:7a:e2:93:6f:ac:3d:27:20:be:9d:50:5a:
                    cb:c8:14:46:61:6a:8e:96:d0:a7:1c:74:ee:d1:91:
                    6b:4e:09:3d:94:33:65:02:3b:b6:aa:91:1c:80:23:
                    40:d6:a6:98:4f:a3:94:0d:c6:db:ef:32:2b:6c:cb:
                    e4:84:de:a3:fc:7b:31:a8:47:72:c4:4c:43:c5:33:
                    57:49:ae:3d:4a:01:25:31:72:a9:1c:7d:ef:1a:7b:
                    d5:fe:d1:36:94:0a:e4:20:c0:30:0c:c5:15:8e:e5:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:AA:41:96:90:54:AA:E8:C8:57:74:47:B7:3E:E5:38:82:39:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62b1fa5a-98b0-3dea-8192-22f3bb497381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:0f:a4:0e:dc:9b:3c:5d:2d:b7:52:3b:fa:70:c4:6c:ef:
         5f:77:2b:69:50:1d:c1:b5:e7:97:33:0c:d3:01:32:29:c0:0e:
         aa:16:db:17:c8:70:9e:ad:0b:d3:26:fe:43:d1:42:63:a5:fb:
         dc:2b:7c:cf:d1:1d:32:c7:61:8f:e9:69:54:ae:d0:af:b1:c9:
         b4:2a:05:a3:3e:51:e8:9d:18:2f:d1:3e:42:9d:57:3e:79:c6:
         e0:60:ca:95:94:2b:fe:47:6f:38:00:3a:b2:c6:a6:e1:f7:64:
         1f:00:d1:0e:e0:60:7d:91:4d:3f:a2:db:04:4a:77:8a:b9:17:
         65:9b:ec:a0:5f:a6:44:fd:94:60:dd:10:bc:20:0d:18:58:1b:
         9f:93:14:67:60:b3:96:5f:75:b8:4b:54:9e:3e:10:df:02:5f:
         c7:b4:bb:ae:1b:44:8b:7a:e7:ce:e4:9e:6d:78:9b:a1:11:74:
         f8:c8:96:00:ef:fb:96:16:fa:0f:46:32:ac:5b:7b:f4:ec:81:
         9d:50:90:27:e2:17:c9:1a:73:91:b6:d6:a0:c7:4d:ff:37:d9:
         78:c4:fe:3a:c1:73:d2:d3:cf:3e:b1:dc:76:65:da:7c:aa:37:
         24:1c:39:f9:0e:7a:77:44:0f:f4:3f:a1:96:2c:5d:ca:7b:fd:
         36:e1:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:34:02 2025 by rpki-client