Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8cc1aff-7a72-3e6a-a39f-63687bca3f38.roa
File:                     b8cc1aff-7a72-3e6a-a39f-63687bca3f38.roa (raw, json)
Hash identifier:          vt2B0Pbo5z6GT8lBSTzJWicIrJBcA/qcgxHKRi2vIKY=
Subject key identifier:   10:08:DC:16:84:B7:B5:27:F6:D3:7E:4D:CE:77:A8:11:AF:37:4D:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0827BDDE1CA70D6DB5CAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8cc1aff-7a72-3e6a-a39f-63687bca3f38.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.36.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:27:bd:de:1c:a7:0d:6d:b5:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b781f950-a381-454f-ae0a-26c744169bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:89:3a:5c:f2:22:97:3b:a5:59:6e:38:07:
                    af:d4:ee:a8:96:51:c4:6a:6a:ba:d7:6e:6c:33:8d:
                    6c:1d:e8:5f:1b:90:e1:99:d4:85:44:cc:92:d3:42:
                    59:4d:96:69:fd:d8:e2:b4:42:66:b8:e3:e8:c7:52:
                    0f:d8:90:39:60:bb:23:d6:8b:94:67:9f:f1:4b:e5:
                    08:94:0b:37:5f:86:9c:06:99:43:bc:14:22:6f:ce:
                    e8:09:0d:8e:98:5e:53:7c:7c:ee:44:b9:0a:46:09:
                    c0:ba:1f:3a:e7:c7:62:26:7a:3a:6e:da:95:c3:51:
                    28:ab:0c:54:94:a3:4f:05:d6:35:f0:89:90:45:98:
                    e6:f1:61:66:65:74:56:66:c1:10:79:df:cf:98:b3:
                    91:08:fa:ff:c9:4c:a1:49:9f:c3:0f:ac:e6:3a:f9:
                    e5:56:1a:0a:7c:b6:6f:35:59:32:c1:a5:5a:2d:df:
                    68:e1:17:be:84:44:ed:78:e7:c2:aa:0d:bf:d2:c2:
                    05:aa:5f:c9:e4:5d:ac:4c:1e:c3:fe:1c:9e:11:c8:
                    33:43:4b:00:38:5e:31:b7:0b:e7:06:06:9a:38:89:
                    32:01:f8:2b:d9:62:12:96:c5:4c:b1:ad:28:80:37:
                    c9:f8:53:3e:f8:ca:1d:fb:e2:f2:5f:86:74:85:9d:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:DC:16:84:B7:B5:27:F6:D3:7E:4D:CE:77:A8:11:AF:37:4D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8cc1aff-7a72-3e6a-a39f-63687bca3f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:6a:d3:b3:2d:a2:f5:64:a6:6a:be:8a:39:64:25:9e:e3:
         68:67:04:70:ca:c8:c7:1f:79:a1:48:45:1a:c4:0e:19:9d:31:
         a8:76:c2:9e:8e:c7:2e:51:05:34:2e:c2:9a:ef:3b:b9:51:cd:
         6f:a2:d0:4d:20:b5:8f:16:e2:b3:e3:bc:1e:c5:1e:7a:1f:6e:
         12:8b:0b:c2:9c:20:a8:7f:00:79:af:b1:74:f7:32:82:a1:e1:
         12:2e:36:01:e1:e2:f2:fc:a3:82:ea:6a:87:46:ac:a6:33:77:
         ce:fe:5b:b1:1d:ae:c3:f8:e9:ea:21:a1:38:e4:15:fd:41:36:
         94:b3:f8:73:1e:f5:09:43:7c:4d:f9:c3:96:b9:95:cf:b9:e9:
         26:4c:be:1c:e5:99:fe:6a:67:cd:54:aa:0e:e5:7c:a2:a8:bd:
         3a:58:93:ad:50:2c:97:35:26:d5:36:fd:9c:7c:06:3e:34:a9:
         50:68:f9:ec:44:49:64:f5:c7:06:10:64:9e:bd:be:2e:c6:dd:
         bd:15:74:91:1e:8f:75:71:7f:7d:a9:66:e2:99:46:b8:6a:74:
         11:3a:fb:42:95:32:ec:b2:3c:cf:ee:20:ae:42:49:bf:ff:20:
         60:06:d8:c1:d2:07:0b:7e:22:16:c0:18:05:84:fc:65:b7:92:
         32:91:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:59:36 2025 by rpki-client