Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6cfd16-b2ab-3034-adab-69ffd9ed12d1.roa
File:                     7b6cfd16-b2ab-3034-adab-69ffd9ed12d1.roa (raw, json)
Hash identifier:          MgXK3HnKuMRAQuO6+ifKQvWUeScZDaq/+evbyR+LNtc=
Subject key identifier:   1E:52:50:C7:6D:7E:67:46:29:B1:D9:B1:16:10:A2:C9:00:B9:EC:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4324D066793C134B74673A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6cfd16-b2ab-3034-adab-69ffd9ed12d1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.206.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:4d:06:67:93:c1:34:b7:46:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=467e69c4-29f9-4faa-bd07-8c4afa9cd3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:37:15:30:90:e4:3f:04:e0:be:38:7f:c9:
                    cc:d0:46:5a:cf:75:12:73:b8:72:c7:08:85:f8:27:
                    f2:d2:3a:35:79:4c:3c:25:44:ee:b8:31:1e:51:2c:
                    0a:55:85:c1:ff:43:1a:af:09:92:2e:38:96:34:f6:
                    a2:f9:86:73:63:9b:03:ac:0b:ac:6f:43:50:f5:97:
                    7c:04:c1:08:83:d3:05:4f:15:ba:c6:57:b8:cc:3d:
                    ad:81:dc:35:3d:70:00:5e:1e:66:48:d3:25:f6:15:
                    92:49:0e:1f:b8:5c:1c:3b:26:d3:1f:20:90:52:fc:
                    55:3b:29:e6:98:13:da:b8:b2:e5:44:ce:a2:68:bb:
                    46:ba:ff:12:2b:b6:7f:fe:84:08:f8:d6:5a:bf:c8:
                    9e:c8:99:c1:72:15:48:51:48:57:e7:64:5b:18:2e:
                    08:18:72:ed:01:c7:46:83:a2:a7:ec:27:e1:9f:2a:
                    2e:d5:a0:cb:0a:3a:2f:49:ee:99:bc:4a:32:00:35:
                    11:ee:0d:3b:de:dd:35:47:97:62:10:9c:26:a1:20:
                    b0:c1:ce:18:05:c5:29:e0:79:61:81:d7:20:b8:9d:
                    a3:72:ed:39:9e:85:e7:f3:82:da:07:33:49:f9:e0:
                    c6:93:67:d2:df:d8:4c:a3:d7:0a:ca:78:58:b3:d1:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:50:C7:6D:7E:67:46:29:B1:D9:B1:16:10:A2:C9:00:B9:EC:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6cfd16-b2ab-3034-adab-69ffd9ed12d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:8e:b6:9f:aa:10:e1:6a:bf:cf:92:ab:fb:fb:ee:43:ac:ef:
         89:f6:3f:fa:71:9f:eb:3e:e9:f3:55:f2:aa:88:46:c6:d9:bb:
         0c:36:f0:e6:82:27:74:a8:bf:b6:ee:4c:b0:ba:40:50:4e:6d:
         4b:ef:4e:99:98:91:69:a1:26:b7:d9:26:e8:95:35:89:b7:5c:
         d6:5c:83:00:04:bd:6f:9b:a6:61:c0:d5:7c:6b:d1:8e:e6:f0:
         27:f3:5a:4c:5e:f3:5a:7b:12:a1:33:63:a5:0b:44:ba:b0:90:
         09:52:5b:db:83:f3:43:a4:68:79:81:93:8c:51:cc:54:e1:d2:
         dc:90:47:22:46:75:3d:b6:c8:1c:c3:73:35:01:9d:1e:87:b3:
         55:78:34:45:6d:8f:81:02:9f:c6:6c:ab:3b:e2:18:5a:32:4b:
         98:00:22:56:e0:1d:19:dd:f8:ae:54:28:22:f9:b5:dd:dc:d8:
         42:ad:5b:a2:b4:2c:a5:28:ad:61:f1:4b:de:93:de:02:85:de:
         7c:54:28:e9:99:77:a8:77:bf:69:2c:eb:97:ad:03:4b:99:3c:
         d5:44:7a:42:8b:7c:79:1a:67:16:4c:d6:a0:bb:12:65:32:0b:
         9f:41:a6:ba:e7:fc:ad:d0:aa:6a:2b:af:ce:8b:e9:e1:a6:ef:
         1d:56:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:22:31 2025 by rpki-client