Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6317bfe9-8646-3444-958d-e63203f66023.roa
File:                     6317bfe9-8646-3444-958d-e63203f66023.roa (raw, json)
Hash identifier:          mO8RlT2MtvTqTy8LSmzb5W3ZtIllza7Ob47QeKnQ8X0=
Subject key identifier:   0A:2A:72:06:3D:C1:00:40:4D:C9:AA:E9:25:A3:21:C3:91:1E:DA:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43218BDF481EBA4AEADC000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6317bfe9-8646-3444-958d-e63203f66023.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        73.190.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:18:bd:f4:81:eb:a4:ae:ad:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=5f2420f8-c93f-4961-adb6-8af0b62ebb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:78:4e:66:ab:6c:b9:9c:6f:8d:67:85:9d:
                    0f:bf:1d:d0:af:7f:98:65:b8:e0:94:e5:e8:ad:b7:
                    47:80:22:5c:d5:0c:b8:da:7b:a7:db:04:d5:2a:02:
                    26:cd:bd:dc:2c:bd:35:c9:18:4a:5a:cd:70:cd:11:
                    74:13:dc:10:f6:f4:a1:27:20:a0:13:f2:91:30:0c:
                    3f:ff:25:41:38:6a:f2:9f:03:93:4b:16:ac:5a:c2:
                    10:ee:a0:a5:c1:6c:2f:9a:38:4e:23:f2:24:22:cb:
                    6e:2c:05:b8:77:47:2b:bb:88:45:78:69:c9:11:45:
                    af:a9:44:d3:81:c4:12:81:f7:62:39:f4:99:61:21:
                    81:b4:fe:d2:9c:31:d2:e4:0c:85:a9:1f:a6:79:3d:
                    0f:09:16:db:57:a3:c6:74:0c:92:e6:bc:1f:61:3a:
                    b3:95:db:3a:3f:a4:3c:9b:1f:1b:82:1a:99:dc:06:
                    f8:03:46:ea:f8:11:71:b3:77:8f:57:d5:fb:3d:0a:
                    81:38:47:bb:c8:68:57:d8:97:27:ed:5c:e0:17:97:
                    60:76:57:7a:01:9f:f0:39:a3:b7:46:fe:20:0c:81:
                    fe:d7:fe:64:c0:97:a8:31:e5:9d:98:ba:64:5d:ec:
                    fe:74:65:44:f4:4c:91:e0:ac:d8:c8:2e:65:74:a3:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:72:06:3D:C1:00:40:4D:C9:AA:E9:25:A3:21:C3:91:1E:DA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6317bfe9-8646-3444-958d-e63203f66023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.190.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:f7:79:00:ff:bc:17:19:c8:bc:22:a2:2f:e8:d5:aa:9f:
         96:87:bf:0b:67:37:5e:a6:c1:70:ff:45:1f:ef:c8:0c:d8:61:
         f8:85:e8:2d:19:11:b1:4b:4f:05:24:19:bb:82:2c:79:a9:fe:
         08:1a:a8:39:38:95:b5:29:b1:70:a8:30:da:ea:dd:aa:83:56:
         62:d9:05:c0:33:07:a8:de:6a:0b:91:9d:f5:90:8b:f5:21:c2:
         32:1e:80:9f:85:ef:9d:16:24:49:64:6c:dd:9d:c8:64:63:e4:
         77:d8:73:80:22:6c:7f:71:2e:4f:ce:a6:6f:23:0f:37:61:d3:
         30:a5:63:9a:b4:89:25:d7:f1:0d:2b:03:96:db:8f:f8:f4:20:
         ca:15:f7:b2:2a:90:36:fe:bf:6d:65:d3:27:85:f6:31:df:89:
         da:d9:19:be:9e:79:fa:9d:e4:75:20:97:08:6a:ab:11:2c:fb:
         9c:f3:e4:e4:7d:bc:e4:ef:91:67:43:4d:a6:9f:c0:b1:d9:2c:
         ba:f1:79:a8:79:b4:bf:14:34:db:60:5d:a3:55:c7:59:7d:9d:
         12:7f:05:e1:f6:d3:79:b9:22:cf:da:58:3b:d5:ba:c2:77:4f:
         ba:de:4f:23:2c:f3:96:ae:9e:4b:cf:0e:8b:79:69:5a:06:85:
         cd:94:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:57:08 2025 by rpki-client