Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86320c2d-c091-3437-a203-c9a788a0df01.roa
File:                     86320c2d-c091-3437-a203-c9a788a0df01.roa (raw, json)
Hash identifier:          87WVj9o7e2ykr0Oz0rCk1/HklUtBnv07m88q5nLlzjs=
Subject key identifier:   96:35:9D:A1:58:E7:D7:3E:B5:B5:78:63:A7:FD:B2:C2:E8:E2:33:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F894513B03380A91201480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86320c2d-c091-3437-a203-c9a788a0df01.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.219.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:94:51:3b:03:38:0a:91:20:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c33fcc89-29c7-463f-ac43-e8d6c697d23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:76:a4:40:44:f0:f4:80:a6:e1:45:0f:41:
                    54:6d:1e:33:e9:74:4b:42:05:13:ea:3e:22:9f:a6:
                    99:d4:13:3c:1a:c8:5c:18:ba:3e:61:fa:9f:41:f6:
                    14:f7:97:0d:52:ff:de:ca:d9:e3:1d:63:96:d9:7a:
                    b7:a0:1a:38:41:84:5a:15:75:85:a0:a6:d3:3d:19:
                    58:44:91:13:cd:ea:1f:48:ac:8e:10:13:96:63:78:
                    3c:9a:6e:1e:9d:8e:6c:a7:1e:ea:13:3e:f5:98:5c:
                    31:b9:ee:23:09:d8:34:f9:5c:4b:ee:c7:6f:b2:08:
                    ff:56:f1:05:5b:1a:49:37:e2:98:3c:3d:d9:70:48:
                    c4:b6:25:89:d9:73:89:14:41:6b:23:0c:c6:1e:52:
                    b7:22:aa:e4:47:cf:cb:ce:c4:47:bc:79:18:14:b1:
                    f7:f4:ad:27:72:f1:99:e3:b1:89:9b:51:86:1c:62:
                    35:09:f5:ea:8f:77:c4:49:e8:3b:57:32:78:3f:77:
                    56:1e:14:c7:8b:c7:6e:15:eb:24:a7:0e:e1:3b:28:
                    41:cd:db:cb:0a:05:f4:c4:39:e0:4c:c3:92:80:ac:
                    9c:75:89:45:e5:ab:f1:e1:c2:40:d5:c8:8c:d9:18:
                    30:8c:ce:5c:ca:3d:ec:32:06:72:67:c5:3a:a2:09:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:35:9D:A1:58:E7:D7:3E:B5:B5:78:63:A7:FD:B2:C2:E8:E2:33:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86320c2d-c091-3437-a203-c9a788a0df01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:90:a4:d6:67:f1:27:5d:2c:6b:37:2b:5a:d6:2e:bb:fe:58:
         75:99:90:58:5b:eb:c0:6d:a8:76:8e:fc:99:00:f3:b5:0a:cb:
         c6:66:2c:e0:51:49:be:1c:85:9a:c1:02:2f:96:c2:d7:e7:ab:
         6c:fd:cb:89:bd:79:b5:ca:c4:27:75:98:f1:34:4b:6c:1d:8b:
         83:01:95:3d:ab:80:ee:d3:28:40:4c:39:89:b6:61:02:92:0e:
         42:ad:da:d7:b5:99:4c:07:99:28:93:8f:06:65:46:cd:84:fa:
         f1:15:00:d0:32:5c:30:21:68:4d:4c:bb:0f:4f:d3:f1:e0:40:
         05:55:07:12:3a:ff:43:8d:17:a4:aa:c5:81:7c:b0:5e:69:1a:
         ba:f6:6c:6f:78:7b:36:c7:59:3c:51:56:33:5a:57:4f:b2:2c:
         42:38:3f:42:c4:29:98:12:08:c5:80:3a:5c:cf:c1:b7:04:c0:
         1c:76:ca:06:98:fa:45:88:74:ac:eb:d9:a7:fa:fe:e1:8d:74:
         3a:00:87:d6:a3:7e:e1:74:b4:f7:02:be:9e:c9:2c:7b:a2:6c:
         e3:9b:a7:3b:93:2e:db:28:5b:b3:d3:f1:fa:03:56:3a:cb:60:
         a9:e1:4e:b4:bc:08:56:4e:b0:32:24:a5:4b:cb:f0:cd:4e:68:
         03:44:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:07 2025 by rpki-client