Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c474c6d4-885f-3f26-a95d-95a1b748f60d.roa
File:                     c474c6d4-885f-3f26-a95d-95a1b748f60d.roa (raw, json)
Hash identifier:          HeYuFGhmnrxQQBHla2G5eHYCwdIRc8pxgmLj81HhlRs=
Subject key identifier:   E6:9A:7F:94:3D:9C:8D:DF:F2:71:25:4D:FA:2C:13:83:34:E8:9E:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430E69DA8153D6331ACA200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c474c6d4-885f-3f26-a95d-95a1b748f60d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.115.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:e6:9d:a8:15:3d:63:31:ac:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=373deb12-3926-4185-ba96-d56e4040a54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:af:71:89:de:76:c8:5c:5f:79:08:f3:9a:
                    97:a2:91:05:4b:ab:78:d7:74:5f:91:70:47:a8:63:
                    f7:60:2a:d2:3f:29:4a:7d:f5:3f:4d:dd:fd:39:fb:
                    70:01:27:b8:e6:7c:48:51:ca:52:c7:f4:e5:81:c2:
                    35:6f:54:8c:43:14:4d:4e:3b:3d:62:cf:3c:7e:16:
                    aa:c7:bd:6b:79:a0:95:36:cc:ff:74:57:a6:b1:ab:
                    33:5b:87:bb:68:31:4e:05:a1:35:46:d2:41:86:e1:
                    20:e7:49:b3:43:fb:be:db:17:61:fb:d7:d2:11:02:
                    dd:de:d2:fb:c7:06:9f:7b:55:b8:ae:9a:18:7b:40:
                    59:ec:83:2b:5c:8a:af:1d:d1:1e:0a:71:6c:d6:29:
                    c8:8a:ba:c1:03:60:d8:c6:9c:2f:5d:cb:bb:36:77:
                    04:e6:d3:70:d5:a3:af:28:6e:14:8d:fc:17:1a:a9:
                    00:7c:ec:d8:b9:5a:01:ba:b3:97:56:dd:8e:ba:15:
                    86:60:d2:78:c7:b8:54:45:c9:90:80:b3:e2:bc:42:
                    81:4c:2a:e5:1a:ff:16:62:62:05:72:2f:35:6f:26:
                    a7:80:bc:f5:7f:7e:23:df:39:d0:48:f6:f4:9a:13:
                    2f:dd:e2:74:85:46:e3:04:ec:a2:af:0e:3f:d4:5f:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9A:7F:94:3D:9C:8D:DF:F2:71:25:4D:FA:2C:13:83:34:E8:9E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c474c6d4-885f-3f26-a95d-95a1b748f60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.115.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:15:05:d0:ac:9e:e4:ef:c8:a4:c7:fc:43:c9:2b:3c:0e:f8:
         5b:ac:83:e1:24:b0:22:c9:53:87:8d:4c:e4:71:a3:5a:5a:bb:
         bd:64:45:8a:dd:bb:d2:d5:93:4a:b9:f4:d3:a1:a8:8d:0b:85:
         dc:59:fa:5c:45:68:7f:86:10:68:ba:a4:07:97:65:b0:65:93:
         49:14:b2:fa:4f:01:7f:e6:ac:79:29:6f:d3:96:6d:6f:e2:a1:
         54:db:5a:72:48:29:f4:6e:5e:63:22:77:ad:00:98:d3:02:7a:
         99:07:03:a8:d5:2d:91:20:13:dd:5f:e2:2e:5a:46:fe:17:ae:
         7d:ca:cf:65:63:34:59:8a:65:70:2e:1f:8b:42:0a:8e:48:6b:
         e9:b6:dc:19:f4:24:b9:68:13:f5:87:e5:55:08:ee:00:c6:f2:
         b8:03:b3:6e:58:a9:3c:03:98:42:03:d3:af:78:52:6a:7c:ff:
         df:a2:77:f3:d0:17:74:99:2d:28:06:33:88:4a:39:37:24:63:
         65:74:8d:86:42:51:b8:08:f6:b2:70:9e:85:0a:af:bf:8f:54:
         55:6f:7c:8d:0e:e9:13:b2:e2:52:8e:b3:4a:66:95:99:1e:84:
         2e:80:1b:90:ba:9e:6b:30:35:cc:88:dd:4f:4d:44:2e:6e:62:
         2a:ea:fd:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMOadqBU9YzGsogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MzczZGViMTItMzkyNi00MTg1LWJhOTYtZDU2ZTQwNDBhNTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcevcYnedshcX3kI85qXopEFS6t413RfkXBH
qGP3YCrSPylKffU/Td39OftwASe45nxIUcpSx/TlgcI1b1SMQxRNTjs9Ys88fhaq
x71reaCVNsz/dFemsaszW4e7aDFOBaE1RtJBhuEg50mzQ/u+2xdh+9fSEQLd3tL7
xwafe1W4rpoYe0BZ7IMrXIqvHdEeCnFs1inIirrBA2DYxpwvXcu7NncE5tNw1aOv
KG4UjfwXGqkAfOzYuVoBurOXVt2OuhWGYNJ4x7hURcmQgLPivEKBTCrlGv8WYmIF
ci81byangLz1f34j3znQSPb0mhMv3eJ0hUbjBOyirw4/1F8+KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaaf5Q9nI3f8nElTfosE4M06J7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQ3NGM2ZDQtODg1Zi0z
ZjI2LWE5NWQtOTVhMWI3NDhmNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASXPdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkVBdCsnuTvyKTH/EPJKzwO+Fusg+EksCLJU4eNTORxo1pau71kRYrd
u9LVk0q59NOhqI0LhdxZ+lxFaH+GEGi6pAeXZbBlk0kUsvpPAX/mrHkpb9OWbW/i
oVTbWnJIKfRuXmMid60AmNMCepkHA6jVLZEgE91f4i5aRv4Xrn3Kz2VjNFmKZXAu
H4tCCo5Ia+m23Bn0JLloE/WH5VUI7gDG8rgDs25YqTwDmEID0694Ump8/9+id/PQ
F3SZLSgGM4hKOTckY2V0jYZCUbgI9rJwnoUKr7+PVFVvfI0O6ROy4lKOs0pmlZke
hC6AG5C6nmswNcyI3U9NRC5uYirq/e8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:56 2025 by rpki-client