Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c5d5dc9-151c-3116-8de8-feb2517dae27.roa
File:                     7c5d5dc9-151c-3116-8de8-feb2517dae27.roa (raw, json)
Hash identifier:          X2RynmBD5vhH8eC9MvtTNFLAbvrVLyoTzHxQ21N9BDE=
Subject key identifier:   29:2D:E6:D0:CA:D5:89:9E:16:CC:8B:5A:50:88:4B:1E:F3:D8:59:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4318E9EDA681E2A85BC8680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c5d5dc9-151c-3116-8de8-feb2517dae27.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.149.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:8e:9e:da:68:1e:2a:85:bc:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=cd5f0aa5-282b-44b3-aaef-c04c48d75821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:b5:98:12:03:bc:0f:1f:6c:38:09:ef:7b:
                    25:06:73:3c:c7:77:c7:d2:75:c8:84:12:4c:ac:57:
                    c9:89:9b:6f:d6:eb:f6:a8:9f:7f:77:dd:6f:40:fb:
                    37:14:3f:3b:76:17:98:88:c1:ab:75:5a:d2:bf:0e:
                    a1:7f:42:40:a2:23:ee:c6:32:96:ac:1d:ec:f6:8c:
                    4b:db:70:5c:7a:bb:2d:43:89:89:98:a5:7e:ef:c4:
                    de:64:18:69:28:91:7c:c8:73:89:e4:0b:66:62:37:
                    cd:dd:b4:84:06:0c:d5:35:0b:f5:f8:4e:f4:e5:9e:
                    df:06:5e:6a:d4:52:f2:5b:3e:46:4f:77:39:81:9d:
                    38:81:18:31:ee:bd:7d:55:24:f7:24:07:f1:cf:72:
                    2f:d5:6b:1b:42:e2:5b:36:a8:d4:fd:09:9a:93:7b:
                    9e:37:38:a7:1e:4e:5c:75:0d:f2:47:e3:4a:2d:c6:
                    f4:4c:d9:3f:24:89:04:09:9e:61:fa:52:a7:22:1e:
                    bd:dd:96:89:4b:a3:13:e0:4a:74:fa:8f:c5:f0:63:
                    e2:bc:92:89:6b:cb:57:41:c1:08:5c:c6:d3:db:30:
                    12:4c:40:a2:0e:b6:25:b2:af:0b:da:19:c9:ec:d6:
                    d4:a4:ae:d4:63:82:00:ff:7f:4a:97:e8:c3:f4:c9:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:E6:D0:CA:D5:89:9E:16:CC:8B:5A:50:88:4B:1E:F3:D8:59:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c5d5dc9-151c-3116-8de8-feb2517dae27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.149.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:23:a2:9b:15:77:90:29:e7:4f:7c:ab:44:08:9e:9c:c2:f3:
         7a:0d:27:be:6a:f3:de:10:fd:cf:a7:c7:71:11:8c:16:66:2c:
         af:a3:41:58:8c:38:b2:0d:56:b4:a8:75:e8:11:72:4e:8d:d9:
         9c:5c:cb:b9:ab:47:af:42:ec:f9:78:dd:0d:46:5b:ad:e8:c6:
         e4:9e:53:42:75:48:1b:11:e3:cb:20:15:56:3e:51:e9:bf:33:
         59:bf:cf:b7:d1:0a:15:92:a5:98:77:63:66:ca:6e:21:7a:80:
         ab:d2:2a:29:b4:6e:fe:34:f3:38:29:88:e0:73:01:f0:d8:65:
         17:38:29:b6:fb:8e:e6:72:39:4f:4d:fc:90:e3:87:29:9e:13:
         5c:34:68:3d:ab:d1:7b:93:17:4c:3c:eb:83:1d:e2:a0:9a:92:
         91:29:17:85:2c:fe:08:8d:8e:6c:fb:1c:65:fd:a4:1c:ea:ff:
         50:46:d5:79:b5:6e:cb:58:44:fb:f2:cd:ee:22:5f:7f:9e:07:
         03:5e:5f:47:ae:23:dd:0d:32:fc:97:36:ee:66:55:5f:81:04:
         6e:d3:28:da:28:7a:9a:c4:68:ba:b1:64:d1:f2:fa:9f:d2:9e:
         a0:06:fd:77:9f:58:00:46:1f:6a:cd:5a:c1:a7:8c:ef:a8:1d:
         1f:79:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:38:15 2025 by rpki-client