Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d9c674-de60-3e0d-9d71-66912fdaa52d.roa
File:                     87d9c674-de60-3e0d-9d71-66912fdaa52d.roa (raw, json)
Hash identifier:          y122z+sg3uPJV4oDB/2onGLYh8j9v8Hl0kw96dqCfEU=
Subject key identifier:   0A:94:2B:10:76:CC:28:1B:0F:D0:7E:AB:4F:27:F3:0C:5D:31:3F:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C067DCE9E7DE99FA8555D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d9c674-de60-3e0d-9d71-66912fdaa52d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.36.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:7d:ce:9e:7d:e9:9f:a8:55:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a9086548-4c6b-4447-ab3b-cb4ab84d9935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:a1:ea:cf:91:8f:82:6b:1f:ed:51:eb:72:
                    ac:c4:3b:56:a2:48:46:91:15:f8:a4:85:52:21:45:
                    b3:bd:79:47:3e:c5:7a:f7:3c:fd:a8:d9:c0:ab:09:
                    0e:e4:24:5a:72:3e:e0:05:56:04:dd:d6:d6:31:86:
                    fa:ef:80:d2:19:9b:a3:d2:43:a8:00:7f:3d:cd:3e:
                    84:0a:7c:1d:cb:7b:ad:96:af:a0:de:ed:dd:a3:c7:
                    49:66:a1:fd:d8:3d:28:e5:a8:bb:31:08:8c:f8:3d:
                    88:fc:e5:df:9f:ce:34:df:2f:84:36:94:a5:76:ce:
                    ad:a6:a8:e9:5c:89:20:57:d5:fd:49:ff:73:e0:4f:
                    27:24:ec:b6:a7:4d:23:5f:f8:29:39:c4:03:a7:69:
                    13:7b:b1:67:0a:00:a3:67:fc:60:97:2c:f3:c6:c2:
                    59:b1:fa:94:14:b1:81:5e:2d:bb:cd:5e:6a:37:cc:
                    c3:0f:5f:56:8f:4d:6c:77:42:c8:ba:ba:5c:e2:5e:
                    d3:7a:c0:9b:30:2b:a0:c7:67:43:17:65:6c:41:5d:
                    de:e7:18:22:df:64:6a:b0:1d:ea:60:58:1a:d1:1a:
                    17:e1:8c:58:46:47:08:a8:6a:c7:6a:2b:53:16:f8:
                    71:18:51:b7:0e:c3:0b:98:f8:95:d3:53:91:8e:fb:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:2B:10:76:CC:28:1B:0F:D0:7E:AB:4F:27:F3:0C:5D:31:3F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87d9c674-de60-3e0d-9d71-66912fdaa52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:de:4b:67:f5:1a:c7:d7:17:c8:b4:8e:9b:2c:e0:f8:e0:
         ef:37:3b:63:cb:e1:1d:bd:03:df:0a:fe:f2:ef:aa:c9:29:9f:
         43:1b:d0:da:d2:f6:57:39:bd:72:fb:61:38:48:72:e5:0a:c8:
         44:fc:b0:3e:ea:c3:52:3e:d4:7f:a9:a7:d5:3e:d4:59:86:cf:
         a6:7f:e0:48:55:b3:df:1e:7f:59:fc:99:9b:a0:06:df:98:14:
         d3:41:2a:fb:8d:07:38:4c:ed:ed:8a:83:29:99:76:95:b5:4e:
         aa:71:4a:a6:98:f3:57:d6:1e:d4:95:c1:40:c0:d1:1f:9f:67:
         0d:05:cd:78:58:27:44:bd:42:e9:a1:5c:72:c6:ef:b3:5a:07:
         85:25:7d:17:9e:23:42:19:e6:2b:aa:94:04:6b:e5:77:13:2a:
         d0:28:2c:3b:b4:e0:70:af:63:83:2c:10:fd:5a:5c:5b:c0:8b:
         38:bf:d9:16:74:52:7e:9e:0d:5a:2c:a1:5e:3e:d6:6e:6c:17:
         d7:07:36:0f:f4:62:09:4a:f2:bd:81:29:cd:e2:82:c0:a1:2d:
         7a:83:42:1b:a7:fa:f3:38:9c:eb:89:0b:b4:3f:44:65:ed:02:
         62:75:cc:fd:67:ad:b4:22:7f:72:67:6c:21:f1:62:b4:f2:ea:
         21:91:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:34:30 2025 by rpki-client