Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86711b6f-35a5-3c55-9445-81ef81488a62.roa
File:                     86711b6f-35a5-3c55-9445-81ef81488a62.roa (raw, json)
Hash identifier:          cpUa4T0WBlWPBE2YvY/w1jF0EPlkdx09Rib2pzn8evw=
Subject key identifier:   95:8E:20:FD:D4:ED:5C:93:1F:CB:C5:95:75:9E:AA:D5:80:29:B1:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F74D3D5A232902EC3EB320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86711b6f-35a5-3c55-9445-81ef81488a62.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.47.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:4d:3d:5a:23:29:02:ec:3e:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a3fcc5d1-ec7b-44b1-8c42-e966e65807ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:bc:11:fb:f1:9b:d3:ed:b1:ed:9f:f7:80:
                    89:35:df:aa:92:38:3e:dc:92:17:22:76:12:50:f0:
                    2e:9d:a1:0a:95:1f:51:a8:19:b7:95:e6:fc:27:b6:
                    3c:92:94:a8:ba:9a:cc:10:1a:4d:8b:4b:98:2d:7b:
                    be:43:d8:ec:fa:aa:de:fb:be:3e:f2:62:bc:bc:7f:
                    c0:42:10:9e:35:cb:1a:dc:a7:fc:4a:4c:eb:ae:37:
                    d3:ea:84:a4:b2:8c:2d:33:eb:09:6e:bf:7d:b2:8d:
                    a0:32:cf:50:60:dc:8a:3a:97:87:04:8e:93:25:a7:
                    68:fb:73:45:a6:ab:e4:bd:72:1d:67:91:91:26:e5:
                    8f:9b:0a:ea:04:94:23:fe:30:91:95:84:f7:88:e5:
                    a0:8f:8d:d8:83:b1:86:00:b2:80:97:e1:96:73:44:
                    c4:84:91:e9:5b:71:ff:e1:7e:f6:4b:1c:81:37:55:
                    80:d4:29:e8:08:7f:ef:65:25:ef:36:7f:c3:55:5a:
                    a3:a7:99:e6:fd:cf:d0:03:06:ae:1e:1b:7f:65:28:
                    34:69:a9:6e:dd:65:d4:11:e5:fd:4b:2e:0e:12:10:
                    a7:66:1f:30:63:2c:ce:5b:21:8e:91:7b:9c:a5:7b:
                    c5:0d:34:7c:92:97:db:4e:72:69:2a:23:6a:a1:59:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:20:FD:D4:ED:5C:93:1F:CB:C5:95:75:9E:AA:D5:80:29:B1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86711b6f-35a5-3c55-9445-81ef81488a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.47.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:47:a3:a9:fc:fb:a6:e4:28:d4:48:d2:1e:0d:3e:b3:cd:67:
         73:8d:d1:7c:f1:da:a9:20:d4:b7:d2:58:41:3d:1b:51:ae:75:
         75:e7:c3:02:9a:9b:f5:ff:c2:f4:75:1d:af:45:78:92:1c:e3:
         3a:ee:f3:a3:6a:6b:ff:87:6f:33:69:e8:31:5b:24:9f:c3:22:
         69:24:93:be:fe:3a:a7:85:4b:f2:67:fb:6d:82:c2:a0:16:05:
         4a:8d:76:1e:48:b8:3f:69:a3:97:f7:13:16:f9:0c:d1:25:93:
         4f:10:85:be:6e:8b:95:19:0f:63:d0:e5:85:cf:6c:15:2f:1b:
         f1:60:db:ea:8e:37:5a:bb:6a:7c:bc:68:37:3b:9f:92:7d:70:
         07:0e:a5:fc:c5:cb:8f:5a:f5:6e:fc:2f:f5:ea:c9:93:d3:68:
         83:6b:52:44:af:86:86:9b:0d:bc:ac:75:e6:58:ba:44:94:ee:
         e5:45:68:5e:20:d7:9e:69:80:3d:a5:f5:d2:8e:e2:6c:04:27:
         d4:1b:10:63:7a:66:c0:bc:2c:e5:5c:14:7e:e4:e2:32:07:5e:
         cf:15:ad:6a:72:97:85:be:b0:72:3a:65:94:b6:d0:14:1b:24:
         65:17:9d:68:ae:f8:e6:ea:2b:5f:7b:c6:3e:2a:a5:d4:05:dc:
         cd:72:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:43:37 2025 by rpki-client