Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702115e4-b424-3416-b592-4ab95c74a072.roa
File:                     702115e4-b424-3416-b592-4ab95c74a072.roa (raw, json)
Hash identifier:          b4SBbKCITgtma5LMBrdNSO7LhYi3cU4/q8FWebjBUg8=
Subject key identifier:   0E:5C:94:04:3B:61:BA:E1:59:2D:40:D7:B8:BB:B2:4C:EE:42:CA:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43249CCC96EB8735DBE6020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702115e4-b424-3416-b592-4ab95c74a072.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.166.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:49:cc:c9:6e:b8:73:5d:be:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=af88d230-dd4b-4cac-af4b-a45bf708ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:36:dc:db:1b:02:51:c3:f5:25:26:2f:1b:
                    a9:ef:8a:09:38:9f:72:2d:b5:15:67:92:92:eb:8a:
                    04:64:b2:65:56:b0:d0:9f:aa:72:b2:95:ea:e0:16:
                    92:e7:a1:08:50:c6:60:4d:08:31:a5:4e:b1:87:30:
                    a9:fa:cf:bd:20:6c:49:1c:e7:4b:a3:ab:5f:96:bc:
                    b2:de:d9:11:d2:ac:85:32:d6:a0:be:95:55:83:e7:
                    6f:57:5f:c1:cc:ff:84:4a:4e:a9:5f:93:a3:d9:f8:
                    bd:b0:b3:54:19:db:d6:3d:0c:bc:65:eb:d6:72:f8:
                    5d:76:44:53:4e:2c:00:d9:16:fc:4b:f7:3e:5e:5b:
                    df:61:a9:c5:d5:f8:24:97:ef:70:ed:21:2e:b5:64:
                    c1:d3:35:9e:bd:95:24:94:04:99:09:e5:7f:34:56:
                    1f:53:a5:94:ec:e3:52:5c:a3:1f:d8:97:62:3f:62:
                    57:f2:c7:7e:d1:ae:81:28:7c:ea:5b:4f:30:d0:b6:
                    ea:bb:f1:62:f1:81:00:c1:b4:57:8d:7f:32:38:39:
                    65:09:c9:64:37:b1:ef:3c:22:b3:55:01:44:18:9b:
                    8b:38:9e:5c:29:05:0e:5c:00:46:4a:a6:2e:32:a0:
                    a0:fe:33:5a:6c:72:87:cd:9a:19:d0:a9:32:71:96:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:94:04:3B:61:BA:E1:59:2D:40:D7:B8:BB:B2:4C:EE:42:CA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702115e4-b424-3416-b592-4ab95c74a072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.166.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:1f:8a:19:94:90:e7:33:a0:02:43:a6:d0:01:24:80:3f:54:
         b0:f2:d1:4e:8e:5d:73:fc:1c:24:cf:38:22:db:2e:35:12:c3:
         c5:1d:e3:3b:35:3d:93:b5:77:d9:93:b0:fd:64:3d:c7:26:06:
         a5:1f:8b:c1:76:92:d3:8d:ae:96:09:95:43:db:21:43:7b:dd:
         8c:77:e0:e8:7b:90:79:54:0a:c0:1c:e6:2e:c2:d8:e0:00:8b:
         67:18:cd:2b:50:3b:ed:bc:8a:9e:21:23:9c:4b:e4:52:37:f4:
         a3:f7:b1:b6:c5:cf:92:cc:6b:10:ca:51:94:fb:04:34:35:c9:
         5c:cf:6b:21:cf:9e:f0:82:41:07:3a:bf:b8:b0:1d:02:ca:13:
         4c:6a:d5:ce:60:4a:85:5c:01:ef:9a:e4:47:27:7d:b9:45:7f:
         83:41:b7:fd:59:75:e9:39:14:33:68:a8:bc:4b:7c:34:92:a5:
         5d:c0:cb:af:68:c6:af:e4:7a:4f:fa:12:30:b2:98:3b:5e:63:
         68:6d:7f:75:9d:75:00:ad:e3:c5:1f:bb:f2:0c:a1:94:9d:39:
         40:44:df:b1:83:e0:47:6e:eb:ad:f7:32:a1:39:3e:ea:68:28:
         ef:62:4d:b8:27:f9:14:7b:d9:d3:78:e5:7e:17:fa:36:48:ff:
         81:b4:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:04:05 2025 by rpki-client