Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b44e512-f053-3272-97a7-692278cc3319.roa
File:                     8b44e512-f053-3272-97a7-692278cc3319.roa (raw, json)
Hash identifier:          aKxVDpo2grHxWwuPpJWjp8Z6XLzmpA5IV1RPh2c33Cw=
Subject key identifier:   33:D5:84:79:61:20:52:1E:38:C2:91:83:97:FE:7F:0A:42:0F:BF:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C3F24600892FED7E8FD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b44e512-f053-3272-97a7-692278cc3319.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.106.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:3f:24:60:08:92:fe:d7:e8:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=bdb2585c-08c1-4899-9961-a49fb5de7d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:d5:14:45:06:45:c5:3a:e7:37:62:c3:7f:
                    e9:3c:81:fe:e4:40:82:b7:33:c2:d5:5c:44:ba:9c:
                    47:09:e4:5e:be:c5:a1:0f:82:89:f7:3f:ce:37:54:
                    40:90:1e:1d:12:e1:d5:5a:c9:7e:f7:a4:d4:73:e7:
                    8d:b3:ab:8a:95:50:b4:a9:7d:2b:f8:ef:3b:49:d2:
                    b1:aa:f9:75:a2:28:7a:31:67:df:fd:46:81:1a:4c:
                    e8:24:cc:26:f9:b8:fc:0f:42:ab:d2:df:8f:89:4d:
                    c8:4b:73:af:01:b3:83:53:45:27:0a:97:12:f9:a0:
                    83:8f:5a:b8:9c:37:90:df:51:7c:42:e4:b9:24:8a:
                    15:60:b4:37:8f:cc:0c:78:2f:88:92:e2:53:d6:ca:
                    ba:1c:18:d3:a5:91:ba:6b:bf:eb:9d:50:f2:8a:81:
                    19:d4:29:cf:0b:09:97:11:76:64:fa:5c:d7:ad:41:
                    d8:1b:bc:25:d3:6a:02:37:b2:9f:4c:53:d3:fb:dd:
                    3a:e9:43:8f:37:b9:6d:8a:bf:fc:09:24:a9:f1:f8:
                    87:2b:4f:34:1e:a8:9f:a5:36:24:7d:41:c4:34:2e:
                    46:8c:08:d4:0c:e0:d5:38:26:df:5c:2d:51:e1:b9:
                    7e:de:97:5e:81:a0:a3:af:7a:a9:bf:04:64:89:6a:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D5:84:79:61:20:52:1E:38:C2:91:83:97:FE:7F:0A:42:0F:BF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b44e512-f053-3272-97a7-692278cc3319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.106.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:43:b5:de:fb:5e:36:5f:27:49:02:cf:80:42:8e:6f:08:8d:
         87:6c:77:2e:b0:66:b0:42:98:71:00:77:55:f9:77:6a:3c:07:
         21:ce:5a:88:98:79:9a:a2:d6:aa:a3:54:a8:d0:13:55:34:bd:
         7c:f6:b1:47:0b:db:27:c5:8a:4d:45:e6:06:e7:e0:db:07:5e:
         12:50:e0:42:ab:96:bb:6c:ba:64:a0:44:ab:3d:31:24:36:80:
         34:37:85:0a:9f:66:a1:18:95:aa:ed:f3:8b:81:d8:d8:66:a4:
         c1:d8:8f:79:92:27:99:d3:b4:39:c2:ef:4c:eb:9f:00:88:1f:
         29:01:12:ec:9a:95:3a:fc:51:4a:9f:5b:8a:e8:a7:b7:35:9a:
         42:f6:36:fc:37:14:ba:56:b7:6c:72:a8:df:25:f8:f0:1b:2c:
         6b:8d:b4:89:2c:5b:83:ae:27:97:3e:f8:ea:48:5d:1f:50:00:
         c2:70:0e:38:5d:b4:15:5f:20:67:76:15:b2:d5:01:5a:7b:a6:
         24:a8:87:3d:e5:08:d6:7e:ed:19:40:21:b6:83:29:da:03:6f:
         10:7a:29:38:f8:d5:9c:2c:06:87:2b:b2:dd:04:7a:b1:7d:9b:
         da:83:f6:5b:2a:e9:58:3c:85:ec:f3:45:45:3a:70:95:84:6c:
         c2:25:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:49:05 2025 by rpki-client