Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9762a1c7-d7c6-3d41-ab9f-84f1012483ae.roa
File:                     9762a1c7-d7c6-3d41-ab9f-84f1012483ae.roa (raw, json)
Hash identifier:          m2U8BsyCI0HOP94FwkVkc5nJ3YIcu7iV85QAZbrWx4g=
Subject key identifier:   5D:DE:92:70:86:9D:6E:8E:41:0A:8D:5E:FD:5F:92:12:BB:81:35:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431A5781BE7548A15CA16E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9762a1c7-d7c6-3d41-ab9f-84f1012483ae.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.219.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:a5:78:1b:e7:54:8a:15:ca:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=06e86808-81ec-4bb7-93f3-d039bd84ec40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:c4:8e:78:02:0e:9a:44:9b:0f:58:fc:5c:
                    f7:c4:34:97:0d:d7:96:44:7e:a8:0f:fe:02:7c:18:
                    73:9c:75:cb:9c:b4:a3:e4:db:4e:79:8e:f4:19:8f:
                    ac:df:6e:5a:fe:b1:80:a8:21:01:a5:8e:a6:8a:38:
                    91:7d:12:7f:89:b9:98:cc:6e:d4:19:68:57:2f:ae:
                    d8:7d:0d:c8:ae:5b:cf:df:cd:3f:9e:32:07:e2:63:
                    61:a5:e9:fd:e9:bb:21:45:9f:35:c8:fa:49:65:66:
                    03:45:af:9e:3c:25:1a:0c:3b:6b:c2:dd:70:84:10:
                    30:72:e0:13:55:bd:0d:a5:45:19:cf:35:45:1e:5b:
                    dc:99:83:e0:37:ae:51:b9:ed:66:8a:a9:88:6f:07:
                    93:96:2d:2b:ea:63:2f:e0:ad:98:c3:4a:ae:a4:02:
                    3d:79:aa:7e:36:db:e2:42:03:f9:0e:ed:3f:ce:9e:
                    7d:e9:33:88:79:1b:10:79:3b:07:ef:a0:cd:c6:7c:
                    72:40:63:40:1b:6f:43:4e:cb:ff:8d:e3:44:1c:22:
                    16:c5:b8:7c:b3:60:93:cd:de:b3:e1:81:7f:da:0b:
                    7e:93:99:c2:2e:b1:4d:1c:ae:fc:cc:37:b5:ce:c6:
                    cf:95:ab:31:f1:12:ae:f6:1f:07:6d:f4:19:62:a5:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:92:70:86:9D:6E:8E:41:0A:8D:5E:FD:5F:92:12:BB:81:35:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9762a1c7-d7c6-3d41-ab9f-84f1012483ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:4d:e0:b9:d9:82:af:ca:1e:4d:f4:bc:95:5c:da:50:3b:
         1e:90:54:0b:b2:d7:33:d8:63:96:97:ce:79:6f:18:4a:8b:45:
         41:6f:90:67:08:25:f2:2b:cf:5e:4c:c2:30:7c:12:27:93:76:
         99:27:b6:3c:ff:26:8a:23:90:1e:00:e9:18:0a:06:0b:69:a1:
         47:c3:55:1d:5b:33:df:d1:52:b9:1b:c0:73:04:81:d9:bc:70:
         b0:a6:1f:e4:ac:e8:4b:64:98:0b:8e:fe:ff:f1:cf:aa:3c:42:
         a8:9d:f9:a0:c3:d0:0c:8c:77:3f:e7:bd:f8:4c:31:d6:35:9d:
         c0:3f:15:7d:2b:b3:5f:74:ae:c2:3b:5d:93:f3:78:5b:f0:9a:
         3b:dd:a3:dd:14:58:88:e8:f7:d9:24:15:00:32:36:f8:08:d2:
         2b:dd:02:3e:f6:1a:d5:df:fb:93:4b:af:bb:4d:14:f0:21:36:
         63:d2:9e:b4:87:31:d1:0e:fb:49:a5:60:b3:c9:3a:f4:33:a3:
         56:91:d3:67:e2:16:13:42:d0:fb:0f:ad:f2:4d:7b:4b:de:61:
         24:b3:09:02:69:52:55:36:02:05:98:c8:ca:4f:ef:c9:ad:c5:
         5c:da:e6:c2:86:43:0d:ea:28:85:07:31:29:0e:51:8c:dd:03:
         e8:dd:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:00:06 2025 by rpki-client