Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9875bb1c-92ae-332e-b46c-fdc73cd851ec.roa
File:                     9875bb1c-92ae-332e-b46c-fdc73cd851ec.roa (raw, json)
Hash identifier:          0uUQJHGn0lXBUGCmqvZ2PxhkHnnvDJks4W/c6JIHeDI=
Subject key identifier:   C1:FF:C9:0D:CB:57:AC:B0:3B:05:FE:A8:C7:BC:AF:A4:86:FB:E5:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16570F3518C0BBB69245100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9875bb1c-92ae-332e-b46c-fdc73cd851ec.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        73.91.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:70:f3:51:8c:0b:bb:69:24:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=189de8c5-7c8a-4ced-9a47-8c6c262d7caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:6d:30:92:7e:88:96:ea:d9:fb:87:66:43:
                    b7:a3:1a:ed:68:0b:e5:65:b4:c5:73:b6:a1:14:9e:
                    f0:03:05:b9:bd:f4:1c:34:7d:77:f2:83:b7:cd:1f:
                    ac:a4:f2:ff:80:89:eb:a6:36:c0:a2:95:8c:1e:82:
                    f9:73:19:91:c0:27:4e:77:7e:90:44:5e:ce:26:ff:
                    61:a3:da:fd:b0:69:a0:a7:c5:71:5c:e5:1c:26:41:
                    2b:ae:53:32:d3:69:33:d4:b1:5c:f3:f3:29:b2:04:
                    43:93:13:e6:fe:62:8f:fb:3f:c8:e9:e9:43:91:bc:
                    1c:e8:07:5b:b4:d9:17:cc:79:02:3a:0d:84:da:e8:
                    92:21:4f:03:e1:7c:29:c8:1b:f3:11:a4:75:db:66:
                    2d:78:d4:b7:d6:53:09:b8:fe:36:93:ee:72:17:a1:
                    4a:c0:eb:e7:e7:e5:df:f5:00:8a:79:15:22:9b:f8:
                    29:d4:a1:fc:cf:c1:34:5f:32:5d:4e:f1:38:75:7e:
                    79:4e:82:11:23:e8:ca:15:88:c6:1b:84:9a:9d:fb:
                    4b:c7:10:13:26:05:79:69:37:93:ec:00:ab:22:fa:
                    d6:58:de:bc:8d:d1:94:f8:ef:18:78:83:68:43:3a:
                    6f:52:b7:42:0e:db:f6:3c:42:c1:a8:df:f1:f1:52:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:C9:0D:CB:57:AC:B0:3B:05:FE:A8:C7:BC:AF:A4:86:FB:E5:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9875bb1c-92ae-332e-b46c-fdc73cd851ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.91.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:15:9c:de:f0:d3:aa:08:56:49:50:28:38:15:7a:e6:32:22:
         0e:4e:1a:72:d5:7d:fd:2d:52:f1:e6:5b:42:89:92:23:d1:8f:
         10:9a:bc:7f:dc:23:8b:b3:2c:2d:d6:48:a8:41:d6:ce:ed:79:
         8d:fe:a8:a4:55:c5:58:b6:63:7b:1d:4b:44:e1:92:1e:af:76:
         c1:49:e7:30:a6:65:20:8d:19:b7:e0:a4:80:f0:61:5d:b8:38:
         a4:dd:94:59:57:00:e4:42:75:28:6a:26:0d:88:65:ef:c0:30:
         56:c7:e6:3b:d0:45:8b:63:6f:19:b1:e2:b9:6d:35:ba:80:3b:
         a7:24:00:34:5a:52:12:1d:2d:3e:58:83:65:b9:d6:b3:0c:9e:
         90:8c:15:15:3f:30:b1:0c:2a:ea:1f:f0:63:42:ed:ed:4c:df:
         3a:f8:14:cf:09:6b:14:de:f1:04:9e:5e:34:c9:e5:24:d8:ad:
         a8:84:d4:d4:5c:63:0c:9d:99:6e:73:00:df:cb:d8:4c:e8:9f:
         27:31:79:91:20:0e:92:ad:5a:61:e9:eb:69:5a:c2:56:4a:03:
         a9:cf:e0:c0:1b:d0:7e:c1:bc:e6:92:cf:03:30:cc:05:fb:23:
         8d:93:79:27:d9:5c:ca:09:36:ab:55:a3:23:7c:f9:e3:bd:30:
         c9:7d:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:27 2025 by rpki-client