Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa
File:                     bae86bd6-f8f5-343a-be69-92eb16f253f9.roa (raw, json)
Hash identifier:          Tmh6Q1Xm0Qq5s8CNgbI+R3ciMl4wXXXgqvmBQxpMs6U=
Subject key identifier:   34:8C:6A:1C:8F:B9:3A:33:C7:7E:0F:29:30:B2:51:6C:AE:83:8C:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431066BFBEA9C23355EB130
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.77.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:06:6b:fb:ea:9c:23:35:5e:b1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=19b35a80-232e-4e75-9482-6f12135b2ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:24:4e:06:a0:04:ba:14:4c:f0:33:e4:d9:
                    15:f6:ea:2c:8a:4a:47:d7:6b:4b:0f:5f:63:73:24:
                    5c:b0:11:b5:96:a6:bf:fb:06:69:28:aa:07:ce:6c:
                    a4:7d:db:6e:38:cb:ef:e8:66:b2:0e:8f:e0:4e:d7:
                    00:27:24:46:e2:14:78:61:55:13:8b:a2:70:c0:6d:
                    b7:f6:40:2d:b2:66:f8:a8:26:23:03:2f:18:64:c8:
                    1b:77:2b:24:1d:28:0a:f1:89:48:bc:75:1e:78:51:
                    f4:b9:c8:da:2d:0f:98:ae:f3:07:cb:33:9a:15:d6:
                    cc:c5:22:62:dd:ae:3b:e9:05:7a:54:6d:1a:47:51:
                    33:89:85:d0:4e:6f:6d:df:58:14:6a:3e:fe:46:62:
                    84:63:6a:63:b8:d4:db:b9:5c:7d:26:82:4e:bd:96:
                    47:09:a2:cd:7d:15:ee:79:00:43:5a:b3:fe:28:0b:
                    81:c9:4d:9a:56:08:23:86:5b:f2:4a:2d:f0:72:78:
                    e2:c8:e6:5c:49:39:24:58:b1:24:d7:f0:67:a5:53:
                    e2:56:e0:de:16:d9:88:88:8c:bf:fe:3b:81:40:69:
                    ad:93:4d:ad:ff:4d:70:33:34:05:ad:9a:ee:e2:99:
                    a0:87:53:bd:81:78:d1:96:f3:6c:9f:b3:b4:32:df:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:6A:1C:8F:B9:3A:33:C7:7E:0F:29:30:B2:51:6C:AE:83:8C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:ba:fa:03:e5:d2:17:df:bd:82:93:1c:da:7c:b4:23:77:72:
         8e:79:34:42:9e:9f:dd:0c:6d:83:8c:8d:81:7d:a5:5c:64:ef:
         c2:19:f6:f4:f6:7c:9a:04:e5:bb:4a:46:09:4e:f7:be:84:02:
         2f:9c:0d:43:d4:c5:81:7a:6c:d0:b9:ed:47:d0:3b:9b:8c:0a:
         f2:64:2b:c9:53:8e:c2:da:86:12:c8:fc:4f:ff:3d:3f:b6:71:
         a9:be:c2:b9:b3:d0:9d:25:39:41:74:9a:52:d8:69:aa:62:46:
         da:d3:7b:f9:ba:2d:4a:50:c3:ec:66:6f:96:48:8b:aa:25:d9:
         44:91:7b:ee:18:66:0f:5d:8f:94:83:c5:db:c5:cb:a1:d7:c3:
         66:60:46:79:ff:2e:27:89:32:d5:3f:20:55:df:b8:02:d0:f0:
         d9:dc:79:db:d3:c2:8e:2c:04:bb:a2:dc:9d:f9:40:9c:5b:a0:
         be:c7:45:61:3a:c3:d6:b9:6f:c2:76:8d:e0:1b:00:e2:5f:20:
         d5:98:0a:bb:ec:94:ee:d1:51:29:1f:4d:02:76:dd:e9:77:72:
         8b:83:7e:8e:b6:88:0a:63:dc:e9:96:51:cd:6f:44:bd:66:10:
         ac:7a:08:d8:09:df:6d:e8:99:ea:fb:22:c9:ca:89:80:d7:92:
         d4:65:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:59:37 2025 by rpki-client