Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7fbc8a-4db6-3a5d-9627-403059fff863.roa
File:                     9d7fbc8a-4db6-3a5d-9627-403059fff863.roa (raw, json)
Hash identifier:          oWtI2hq6B+ljOjQxAl5tWc3/Ha6hu8V6XBt/fLR5+bw=
Subject key identifier:   82:D6:94:10:A5:21:CD:EE:FA:37:D3:F7:62:24:15:8A:BA:2C:46:A0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF0A1498524677F4E31280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7fbc8a-4db6-3a5d-9627-403059fff863.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.13.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:0a:14:98:52:46:77:f4:e3:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ba6ff042-c60b-4c76-8338-fcf3517b24be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:a5:f9:bc:94:4f:bc:3e:1d:f0:b2:d5:61:
                    ca:e9:d3:25:61:50:a1:26:10:ca:26:50:cf:d1:6d:
                    ed:67:95:8e:9f:c2:b6:ea:b6:28:4c:52:72:e3:75:
                    d7:91:f6:64:59:43:30:08:b3:1f:dc:3c:96:fa:7d:
                    d8:1a:ac:b3:6d:c9:73:e9:2d:a0:92:b4:62:b0:be:
                    38:b6:63:86:be:b3:92:f3:1c:2e:97:cf:1e:87:21:
                    ac:6f:1d:27:0d:01:39:79:29:6b:79:15:70:96:fe:
                    84:36:a1:cc:3e:3c:e3:43:59:02:93:e0:be:c9:ea:
                    b1:bc:89:2a:83:25:6b:28:2d:34:c9:32:2a:95:d8:
                    bd:31:df:30:0f:c6:8c:c9:c0:5c:2b:6d:b8:4d:4f:
                    ff:73:d1:27:db:f9:cb:4f:01:14:08:1e:d4:a8:9a:
                    a4:88:10:8e:84:16:49:e6:b8:22:fc:c2:30:57:12:
                    8a:17:96:4f:50:f8:be:b6:6a:05:81:db:51:b4:fa:
                    c0:4a:1e:c7:83:37:42:97:08:75:bb:ea:e0:89:dd:
                    d3:a3:86:96:bf:e6:ca:a7:f7:dc:e7:b0:23:bc:71:
                    c2:21:31:9d:08:78:38:9a:0e:97:c5:9a:4e:6e:45:
                    78:0f:12:72:95:09:b1:45:bd:d1:09:63:91:18:96:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:94:10:A5:21:CD:EE:FA:37:D3:F7:62:24:15:8A:BA:2C:46:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d7fbc8a-4db6-3a5d-9627-403059fff863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.13.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:c1:e0:ed:38:1f:79:99:ca:f5:9b:62:41:b9:37:e7:d8:
         2e:12:b5:69:ac:87:0b:3a:93:07:69:bb:b3:3d:75:57:f1:9d:
         9e:d7:40:0f:8d:4a:db:9f:76:f8:98:92:a3:55:83:32:ba:0e:
         1d:32:e2:a9:ef:47:7f:35:71:19:3d:00:67:5c:4d:50:44:1a:
         af:fd:5f:bb:a9:d5:96:bf:08:2d:58:5c:ef:52:d1:a8:6d:54:
         6e:66:a3:0c:61:d5:2d:fb:08:cb:d0:bf:fa:10:c6:75:1d:d2:
         d6:a6:ae:9a:21:83:fa:aa:80:d1:73:1b:17:bf:3f:4f:e7:6a:
         1e:9f:55:4e:29:e4:16:db:cb:7a:8b:e3:98:15:74:2e:2f:fc:
         8b:53:91:6d:58:0c:8e:e7:ee:72:39:ad:03:4a:96:d7:d6:25:
         85:12:56:36:c1:c6:87:9c:f0:9b:13:d1:2e:e2:8e:52:a7:bf:
         9a:f2:90:b5:ca:c4:8f:0e:a3:e6:77:dd:11:7e:b5:69:e0:b0:
         58:fd:7b:4f:5d:d3:ed:21:68:52:b0:ad:fa:dd:be:39:f2:15:
         57:c5:f3:b5:93:91:b5:fb:4c:7d:1f:d3:16:2c:cf:18:0d:3b:
         91:08:6a:cf:76:80:71:89:8b:69:f5:6b:eb:ac:a0:fe:46:c3:
         52:f2:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:37 2025 by rpki-client