Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95884cf-292a-3db0-aa9f-7ebc7be9ec6c.roa
File:                     a95884cf-292a-3db0-aa9f-7ebc7be9ec6c.roa (raw, json)
Hash identifier:          WaC/fNOh4T+NfDBcYEDPFeYVFBSN9dklTdwYaX9E0po=
Subject key identifier:   DA:33:CC:62:1B:A7:47:60:40:DD:B8:16:5E:76:4A:E5:0C:AA:21:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0077A891744C29B8F2BB4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95884cf-292a-3db0-aa9f-7ebc7be9ec6c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.241.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:07:7a:89:17:44:c2:9b:8f:2b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ed3c46c1-d495-4b5a-8ffd-10275f1e53b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:ec:c1:7a:1f:bb:07:d1:e5:01:53:dc:51:
                    70:9d:37:4d:d9:af:a1:15:17:e8:2e:c7:3a:42:70:
                    95:4b:1d:05:f7:39:59:96:24:46:e0:94:12:2e:04:
                    68:36:6d:31:ef:e1:93:9f:e7:a4:ed:56:18:e5:9b:
                    47:64:6e:8f:19:c9:d0:59:14:e4:1d:69:05:0f:2c:
                    a8:dd:13:ee:6c:38:60:de:09:13:d6:85:86:f8:ba:
                    42:cc:31:8a:ba:e1:18:97:55:9c:55:05:00:4f:37:
                    94:3d:3f:5f:3c:75:0f:47:76:b8:9d:d2:b1:51:87:
                    69:03:87:39:f9:2b:55:24:cb:16:fb:f1:28:72:51:
                    8d:c7:5a:ff:46:13:bc:b7:08:f9:de:2c:9e:41:57:
                    25:6e:17:73:15:92:57:6d:7e:49:22:16:1e:ab:88:
                    5e:09:df:cf:2f:6d:68:d9:a7:dc:a1:4a:9f:bd:6c:
                    97:00:50:f2:57:bb:2a:34:52:d5:5b:00:82:54:eb:
                    74:be:12:51:46:0e:63:81:99:57:26:f5:b6:80:fb:
                    fc:ee:50:ab:a7:db:40:65:f2:84:fd:e2:a6:07:bb:
                    ae:15:c7:98:f8:5c:ff:77:b3:30:f8:ca:1a:de:24:
                    b7:f7:59:03:3d:58:fb:d3:ee:7a:cc:65:db:ed:e0:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:33:CC:62:1B:A7:47:60:40:DD:B8:16:5E:76:4A:E5:0C:AA:21:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95884cf-292a-3db0-aa9f-7ebc7be9ec6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.241.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:82:5e:81:8b:47:4a:b4:37:25:7c:3f:f3:74:00:5d:b1:e9:
         fd:c1:e6:6e:dc:73:3d:a1:53:b5:f3:9d:13:eb:56:95:69:b5:
         d7:5f:7e:24:67:11:fe:4f:1f:7e:0f:4b:3a:28:23:95:ae:ae:
         60:28:1a:6c:e7:64:10:e1:24:eb:3b:9e:d8:27:da:b6:1e:73:
         f2:50:91:a4:29:38:27:6a:a3:08:3d:7a:45:87:42:0e:08:2f:
         ff:62:70:8a:3f:56:f0:6d:ab:36:24:74:7b:27:1c:9b:99:8b:
         8e:1e:11:ea:b8:a9:4b:6c:c6:b2:aa:a6:06:65:72:1b:fe:53:
         b7:f4:ff:c7:2d:9e:16:6c:b6:a0:79:90:23:bd:ee:4e:ea:dc:
         04:26:34:00:d3:b5:0c:ea:58:66:4d:19:ab:dd:88:dd:99:8f:
         f2:47:ac:8b:31:f2:8a:e0:00:b4:df:8a:e5:74:53:86:15:ef:
         c0:b3:da:c0:04:a2:6a:9a:29:33:d5:28:20:74:fa:af:bf:bd:
         2b:e4:ed:8b:f6:21:df:b0:cb:3e:59:00:03:d8:93:33:b2:c8:
         d2:c1:7c:0f:41:c5:68:51:3e:e6:94:65:71:62:61:ca:f9:30:
         42:de:49:25:77:3e:d2:5d:eb:5b:0b:d7:30:eb:c0:48:d5:9c:
         ef:b4:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:51 2025 by rpki-client