Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38e28c0-eb36-3f6c-810e-a0a5972d5f51.roa
File:                     a38e28c0-eb36-3f6c-810e-a0a5972d5f51.roa (raw, json)
Hash identifier:          6l7RE0zqYAH2CPyHa+JP1egbX3P/+WWQGwmkg8py5xw=
Subject key identifier:   9A:32:77:8B:5D:89:69:EE:FE:DE:CA:A2:C6:90:84:74:55:A5:CF:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C078C4C703E9717378E3C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38e28c0-eb36-3f6c-810e-a0a5972d5f51.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        71.225.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:8c:4c:70:3e:97:17:37:8e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ab0efaf5-482c-4562-977f-276a6eab8e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:29:77:39:71:11:48:64:f6:66:c6:dd:90:
                    00:26:ed:ba:fa:ab:90:e9:de:32:cf:d4:06:ef:ee:
                    5d:7b:6d:dd:64:80:5c:1e:c6:3b:4e:65:48:3f:0b:
                    92:4a:f4:9b:71:e3:ec:1e:8a:72:24:ae:06:a2:cd:
                    47:28:20:2a:f2:56:1b:d1:64:bb:38:51:62:3e:44:
                    9a:a3:d5:fb:2b:a7:7b:a2:4b:4d:2d:ae:6b:9a:83:
                    03:26:af:56:c2:8a:b8:25:87:40:ea:9e:bc:7f:17:
                    2d:5f:65:33:97:8f:4d:20:19:7c:3f:fd:2e:f8:ee:
                    d2:8c:67:b3:f2:fa:b8:dd:dc:15:70:ae:c1:4f:c3:
                    df:c0:4c:0d:c8:7f:47:73:66:e3:43:fd:72:28:e4:
                    00:c8:fe:af:fb:3c:b1:e7:16:6c:37:72:39:bd:70:
                    e7:f6:7e:f4:3f:ee:9e:7c:f7:d8:c5:01:ce:b5:dd:
                    97:1c:70:db:cc:2c:7b:c1:43:84:54:1d:ee:ca:e1:
                    4e:4b:0a:34:1a:f3:ab:36:e5:11:56:b6:5a:01:53:
                    22:78:0a:69:d1:7f:cc:92:a1:62:7e:e5:1c:76:03:
                    34:c8:44:e8:d0:6f:06:8f:15:35:91:00:a4:54:5f:
                    29:56:ed:23:35:aa:ee:4e:8c:52:57:9f:ed:27:b0:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:32:77:8B:5D:89:69:EE:FE:DE:CA:A2:C6:90:84:74:55:A5:CF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38e28c0-eb36-3f6c-810e-a0a5972d5f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:20:df:2b:9b:fd:ba:80:21:bd:20:54:b3:80:49:83:da:
         84:47:5c:fe:fa:6f:df:4a:ed:d4:d1:74:de:9a:ed:87:4b:5a:
         e8:3e:fe:1f:c9:47:80:99:a6:44:d8:d7:46:9d:8e:1e:71:05:
         3d:39:ad:05:4b:87:11:7a:44:e3:3b:bd:49:5e:83:44:48:fd:
         ce:43:33:3e:ce:ba:bb:5a:39:09:1f:54:c3:b5:c9:56:a9:49:
         5b:10:f0:0a:94:69:1a:d5:01:5e:f8:aa:10:93:42:11:30:f5:
         36:5c:d6:62:5c:23:dd:b7:ba:6a:3d:f1:2d:df:2a:0c:2b:2f:
         0d:d0:e8:17:de:fe:27:8a:5c:34:fb:e9:0a:fc:ec:4d:13:c6:
         bd:c9:77:de:a3:e3:32:68:98:5c:51:9b:7d:ac:65:fe:d2:44:
         7a:80:7a:2d:7d:40:ef:d2:ab:ff:2e:23:15:4f:fa:eb:81:ae:
         34:20:2a:67:f3:c0:a9:74:62:5e:8c:34:d3:26:60:a3:86:27:
         03:90:eb:bf:27:f2:c1:33:82:02:5b:7e:f9:6d:34:ba:8b:ff:
         38:82:b8:ef:57:31:bb:39:b6:b6:ef:0d:f3:be:a1:0c:a7:ed:
         99:5b:29:71:fd:5d:b8:9b:5a:b0:5a:e8:97:69:4c:6c:ba:0a:
         71:0c:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:55:40 2025 by rpki-client