Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b9e6a8-7a91-3f9a-a271-3d41ff63fa29.roa
File:                     a9b9e6a8-7a91-3f9a-a271-3d41ff63fa29.roa (raw, json)
Hash identifier:          0NBQZI++dZUJcqJ4GNfmRo/mYHuvUqm63lGXfg3UrAs=
Subject key identifier:   2F:31:77:01:0D:5C:6D:49:B2:C6:DB:63:26:95:B0:62:35:02:86:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F870447BE197C2FE920700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b9e6a8-7a91-3f9a-a271-3d41ff63fa29.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.100.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:70:44:7b:e1:97:c2:fe:92:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=cbb65c62-8c32-48fb-8553-d07b35da6183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:5c:8f:87:f2:a3:1e:b8:f4:e3:2d:f7:fc:
                    83:e6:84:40:f9:61:ff:4f:c1:1a:e0:11:4c:cc:ab:
                    b6:30:91:7c:2a:db:e7:23:f8:6d:a8:4d:1b:1b:d1:
                    a6:e1:e3:e5:a7:e9:62:64:03:ab:f2:f7:42:b1:15:
                    12:6f:02:f0:3b:b8:1b:78:79:a7:41:e9:29:72:14:
                    7f:13:ba:86:eb:8a:4b:e1:26:56:b1:90:85:69:f9:
                    71:a0:62:cf:08:15:a7:8a:a3:c7:6b:f7:c4:60:4d:
                    d8:98:48:7d:1a:fb:9e:78:08:e9:1a:70:36:4c:66:
                    59:af:54:8f:1e:5f:b7:f5:32:81:73:af:2a:f0:6c:
                    9c:da:e6:b5:79:13:49:fc:c6:94:04:ed:81:8b:1c:
                    49:16:48:39:57:22:7b:70:af:95:6b:69:38:49:e4:
                    54:82:6b:58:75:3e:d4:92:75:66:50:29:eb:c1:1e:
                    a6:39:2c:5c:3d:b9:0b:df:b6:36:87:24:56:55:b9:
                    8a:e0:1b:62:b7:f3:d8:84:7a:7b:5c:58:53:12:b4:
                    88:c6:21:fb:78:18:04:4a:bf:8c:6f:07:92:be:0e:
                    aa:1a:b2:ef:c5:6a:54:4c:12:84:99:db:52:85:02:
                    91:37:71:94:a1:f2:f6:05:6e:55:3a:d0:a1:bc:8e:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:31:77:01:0D:5C:6D:49:B2:C6:DB:63:26:95:B0:62:35:02:86:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b9e6a8-7a91-3f9a-a271-3d41ff63fa29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:5f:94:36:27:60:6e:00:32:ea:d0:73:64:d2:e3:a5:8b:ed:
         5b:a7:57:a2:7b:f8:ec:a4:b0:bf:01:59:a1:40:e3:f8:ce:4b:
         a0:01:d8:b6:17:75:c1:da:e1:8d:44:81:e2:c3:39:ed:e9:09:
         bf:b6:3d:0b:af:f6:a6:48:c7:3e:37:1e:af:c6:7a:1d:d3:ac:
         b2:f9:48:f6:53:af:5f:e7:31:e3:6c:51:81:4c:fd:e9:c6:4a:
         85:a4:a5:84:a4:48:8f:9a:52:9b:fd:48:e9:6a:c6:30:cb:fa:
         69:95:4d:ad:cc:13:eb:6a:4f:55:75:ee:30:80:a1:cf:e1:ef:
         dd:26:a3:8e:0b:77:6b:4c:0f:02:9c:11:1b:99:53:24:d0:8a:
         be:db:f0:14:7d:1d:57:de:05:26:a9:46:db:95:df:2c:ad:b9:
         53:d3:13:d5:71:27:12:ab:5e:88:eb:8a:07:f3:49:06:7e:6c:
         d5:e1:00:9b:d2:22:ce:e3:f0:ed:f4:4e:95:62:93:7e:21:13:
         93:83:cc:68:48:6e:92:dd:6e:06:13:02:87:85:6c:c0:00:a0:
         5c:40:70:0a:b4:da:e9:11:01:9b:6f:97:19:c6:a0:31:4b:7e:
         ec:ff:7b:d2:19:20:80:12:d5:1c:e2:80:78:f6:44:67:2d:e3:
         8c:af:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:24 2025 by rpki-client