Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7428bff5-4450-3f63-bca2-8c9ec7b01255.roa
File:                     7428bff5-4450-3f63-bca2-8c9ec7b01255.roa (raw, json)
Hash identifier:          FuJruFXOBVgNFZDUNi4uwRmD/K80nlJVTlJ8U1zr6Xg=
Subject key identifier:   95:30:A2:60:E9:A7:A7:BF:D4:89:2F:7C:0B:29:88:C0:52:E8:35:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C078BFCBE6E408AB6DA4100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7428bff5-4450-3f63-bca2-8c9ec7b01255.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        71.225.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:8b:fc:be:6e:40:8a:b6:da:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=00be5e93-82c6-42c4-9e8c-71c21523e46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:fe:26:6f:ab:88:7f:8f:45:36:98:86:63:
                    b3:3a:8d:40:f4:60:f9:3c:db:7a:5b:74:e9:2b:d9:
                    ff:34:a7:74:2d:28:29:1e:7f:f6:c5:ec:1e:f3:44:
                    c2:f8:23:39:17:9b:6d:ca:64:44:bc:87:e9:76:e2:
                    28:84:ea:0b:3a:d4:26:ca:8e:81:15:5e:ed:dc:06:
                    ec:fd:d2:bd:f9:85:b9:0c:ba:71:e1:5d:5e:88:dc:
                    44:7d:2c:08:aa:c5:84:a2:e2:42:7e:de:03:59:ab:
                    0a:d1:85:33:11:f9:88:e6:c7:b3:01:b2:f2:27:91:
                    a7:97:94:96:62:d5:13:63:96:5b:19:20:d7:8f:29:
                    db:e1:21:16:39:59:50:3e:0a:15:64:b2:04:42:0c:
                    ad:09:e9:ff:77:67:24:d8:21:a2:00:8b:9e:04:5f:
                    90:8b:bc:6f:66:80:9c:58:09:c7:f9:2b:85:d9:a3:
                    97:75:1f:04:d7:c7:25:98:b7:76:21:89:c8:68:eb:
                    21:f7:b0:e6:43:2b:62:c0:fd:e3:37:89:48:b9:2e:
                    08:86:b8:24:8e:27:db:d9:6f:fe:96:24:e9:8f:60:
                    6b:ec:58:68:b7:e2:08:73:40:84:85:04:9f:17:83:
                    ab:e9:4d:ab:a8:3a:1a:a3:05:94:aa:1a:8f:56:11:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:A2:60:E9:A7:A7:BF:D4:89:2F:7C:0B:29:88:C0:52:E8:35:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7428bff5-4450-3f63-bca2-8c9ec7b01255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:aa:bc:24:e3:c2:a1:d7:2c:3a:77:bb:ee:d0:e4:5e:f2:58:
         51:a3:6a:b5:68:11:fc:a9:6c:34:7e:5f:f4:a7:d4:09:b6:1d:
         61:c1:c0:df:9d:a4:d1:84:f5:0f:34:08:23:1e:64:99:0a:1a:
         7d:52:41:1a:62:11:25:ab:6c:a3:cd:d9:75:80:82:27:b7:2d:
         fe:d0:92:bd:cb:34:1e:20:c6:e1:27:74:6a:54:63:59:9d:5d:
         82:e9:71:82:8d:c3:28:ad:06:99:8b:11:25:4b:2d:a6:90:42:
         d1:a9:21:14:35:2e:a9:27:d1:a4:95:6b:1a:88:88:83:8b:66:
         61:b9:8e:bf:8a:fd:e9:80:e1:cb:0c:9c:b6:4b:48:a7:de:7e:
         1e:5e:f8:ca:4d:80:15:88:4b:67:0b:bb:77:4f:e4:b9:8e:83:
         53:f2:61:9c:b9:b2:e9:7f:62:90:f2:09:6b:5a:f5:ec:e0:4b:
         35:49:63:69:85:94:19:48:0e:15:c9:c0:be:0d:75:58:60:0d:
         9a:4c:54:a8:f0:48:4c:5c:1c:49:06:09:fb:cc:2d:e5:b7:ed:
         4e:04:34:5c:4d:6e:c1:eb:f6:01:b0:89:98:97:12:d8:83:5c:
         36:f5:de:06:0a:ed:93:47:af:3c:ac:00:ce:2b:d2:fe:5c:cc:
         e7:2e:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:13:09 2025 by rpki-client