Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa
File:                     b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa (raw, json)
Hash identifier:          PtHbQSaAAREMZp1dMO1Ahp5DlgIDyOhHVLVLOSxW7vM=
Subject key identifier:   CA:A2:36:97:43:E4:52:42:FC:03:3A:0B:4D:4A:EA:CE:16:48:90:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75E3704CB344E2D3D4AF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     33287
IP address blocks:        73.188.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:e3:70:4c:b3:44:e2:d3:d4:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=589fedbd-6d7f-4119-8028-00b97a3b7c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:84:b0:55:c8:c9:02:74:2e:dd:1b:3d:1f:
                    ff:27:9c:86:fd:c9:9d:20:86:69:ff:20:f0:29:f4:
                    83:69:30:e7:c6:16:0d:b1:8b:b7:c1:c4:91:e7:3d:
                    8d:f0:1c:2f:00:c1:3e:13:57:cf:3e:d7:8e:36:1c:
                    20:b6:37:cd:8a:49:36:8d:d4:45:ec:04:0d:e6:ff:
                    8d:a0:4c:9b:8c:99:f9:2f:a7:95:6e:9e:67:4b:87:
                    08:c8:51:b0:b3:63:1a:e6:b9:87:fa:47:9c:9f:bd:
                    6e:4d:6c:98:38:7a:06:0b:70:b5:16:b3:f6:40:e8:
                    6e:6a:e0:51:3f:29:ca:04:a3:a8:13:15:f9:1c:8b:
                    0d:a0:2d:ef:14:b9:76:79:f5:bc:fb:9d:97:23:57:
                    3c:7e:76:e8:42:43:9e:ec:a5:02:49:e5:60:d0:a4:
                    77:69:53:4c:50:13:4e:0c:43:0e:16:14:f4:93:a4:
                    da:21:fe:4a:44:41:17:da:a8:5c:2f:46:0b:7d:b5:
                    59:3e:e8:06:b4:ba:a3:7a:aa:f7:5c:e6:07:78:0c:
                    f2:79:d1:87:3e:d2:d6:25:79:1d:45:03:89:14:02:
                    69:87:e0:12:a1:c3:6e:2a:dc:8b:29:15:9e:06:72:
                    81:f5:90:50:99:be:61:59:cf:bd:83:ba:f1:90:18:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:36:97:43:E4:52:42:FC:03:3A:0B:4D:4A:EA:CE:16:48:90:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:6b:87:1e:4f:8f:25:ff:cb:e7:b0:7a:f1:05:2d:9b:d1:
         e0:e1:89:9f:3d:4c:29:5a:a2:ab:fd:a9:c1:a6:c2:0d:2a:51:
         1b:41:5e:c5:29:53:8c:29:89:e1:9e:95:3b:a0:62:0b:ca:27:
         6a:9a:84:c3:96:2e:82:f6:fb:a9:db:25:e5:fa:e9:86:4f:68:
         5c:fc:3e:1d:51:11:01:65:4c:0c:e2:56:37:93:fd:60:86:f4:
         aa:d6:9a:f1:6d:66:f5:e3:2f:b7:6b:f2:03:d8:d0:7f:3c:8e:
         39:c5:1b:46:c8:e8:47:db:26:34:36:40:33:7f:22:dd:1f:7e:
         c2:69:fa:51:65:e4:10:ff:b3:08:b6:d9:ed:d1:3c:86:a3:2a:
         66:e8:e0:4f:39:bf:c8:7f:b2:6e:6c:b8:b7:79:df:ea:36:4a:
         14:3a:fd:89:a5:a7:15:08:38:61:1c:0f:26:59:bb:49:0e:51:
         51:2d:c7:a9:35:eb:9c:cb:70:03:c5:b0:34:ac:30:ee:5a:77:
         20:4e:18:a5:a4:6a:3d:43:55:7e:4d:9a:e0:44:ee:87:14:3b:
         77:7c:3b:c4:89:52:9e:8f:f8:19:cc:8b:63:13:e0:13:0b:e5:
         08:6e:c1:a9:c4:39:ce:f6:e1:f7:82:c9:26:bb:fe:58:f2:9b:
         c1:ab:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:22:14 2025 by rpki-client