Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7561cf-abea-35e3-bbf9-a90774739408.roa
File:                     aa7561cf-abea-35e3-bbf9-a90774739408.roa (raw, json)
Hash identifier:          fHLiBQRjy5Itwu9y/urCf/tr3A3Xjw2THt/+bKQjqYU=
Subject key identifier:   83:52:1E:F3:4B:9A:0E:3E:85:B9:2E:ED:47:FB:72:6E:F7:6F:9D:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4307EE72A5734D172AE6A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7561cf-abea-35e3-bbf9-a90774739408.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        107.5.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:7e:e7:2a:57:34:d1:72:ae:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=38ac5925-9ce3-4f3a-937e-b52357dbaaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0c:d1:6c:a3:8e:7c:1c:be:e2:4a:34:7f:b4:
                    10:6d:6a:24:aa:8a:14:de:ff:03:86:da:4f:ab:8c:
                    02:61:fd:10:7e:51:e9:19:80:67:b9:be:ed:46:84:
                    6e:f9:dc:13:de:5d:b0:2d:a4:a5:43:1f:62:ee:a7:
                    5a:07:6d:3c:32:70:55:bf:b7:b2:36:4f:a5:46:71:
                    da:bb:28:44:0f:f4:73:5e:90:a1:bc:cb:48:9b:38:
                    cf:a0:ae:dc:c8:7e:d8:30:83:11:82:fd:82:a9:a1:
                    66:10:46:7c:f6:11:f5:00:1b:90:f2:ec:fb:f0:92:
                    6e:2f:ec:8c:2e:a9:f6:2e:e2:14:a7:be:46:cd:a1:
                    72:35:2e:a7:8c:97:57:28:c0:e7:82:8e:7a:01:35:
                    0f:9b:8d:68:bf:8c:28:64:c1:40:25:c6:c4:75:40:
                    9f:24:ce:47:aa:ca:a7:26:d6:9f:20:d2:42:ac:84:
                    a1:1e:66:ad:b4:d1:0c:10:5b:06:d2:f4:b1:ee:a9:
                    11:18:4d:da:62:36:e3:fc:a4:98:7c:0f:a5:92:46:
                    3f:7d:22:ef:3e:24:d4:f5:29:28:41:bc:68:25:51:
                    16:9e:6a:cb:00:38:59:56:32:e8:30:3b:fd:8f:a8:
                    14:5a:60:84:3c:9a:d5:db:1b:02:70:b9:62:50:5e:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:1E:F3:4B:9A:0E:3E:85:B9:2E:ED:47:FB:72:6E:F7:6F:9D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7561cf-abea-35e3-bbf9-a90774739408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:2c:b3:e1:c0:d5:b0:45:e0:e2:db:67:86:98:1d:aa:43:
         cc:d7:1d:30:5d:a1:34:de:4d:29:62:90:da:7e:9e:71:19:d9:
         7a:68:29:0f:20:56:21:a1:22:2f:3f:50:bc:5b:72:0c:5e:c9:
         bf:62:65:97:42:4d:89:88:e6:b6:81:9b:fb:2b:f5:01:8b:04:
         f3:42:bc:35:86:d0:96:83:81:30:3b:0c:d9:a0:2d:08:ad:a7:
         0d:41:a1:7a:d9:3c:c1:cf:a9:03:66:ee:bc:97:5c:ea:7c:bf:
         40:fa:42:67:03:fe:23:84:9f:b8:2e:49:ef:b7:dd:31:01:05:
         83:5b:9d:4e:9f:1f:bc:a8:c1:f0:d9:cc:66:0e:9f:e2:e1:53:
         ec:ba:93:89:f2:16:8f:d2:45:ff:43:96:3f:48:13:be:66:fe:
         b7:f0:62:25:e9:bc:f7:d0:9b:d2:22:65:7a:0f:1c:ea:79:97:
         3b:ab:08:76:3f:b5:f3:13:05:bc:7b:fc:7d:6d:84:bc:a9:8d:
         77:4a:7e:86:9e:47:fb:75:e4:65:93:f6:fd:fa:e2:e6:18:ae:
         48:97:c9:47:8b:bc:67:96:c6:2d:58:08:90:47:56:76:ee:bb:
         01:86:72:84:8a:7b:5f:c4:50:8e:51:83:2b:1b:37:7c:c0:4e:
         cd:aa:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:10:48 2025 by rpki-client