Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0470cd2-727d-3055-a47f-2fce88e5f6f5.roa
File:                     d0470cd2-727d-3055-a47f-2fce88e5f6f5.roa (raw, json)
Hash identifier:          1D+Mpo6axkmBU+0GI4mLiUtaoxCJhiZeruowyUYsp6I=
Subject key identifier:   63:20:8F:97:17:5A:81:08:B6:49:D5:9C:48:28:70:97:C5:0B:10:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08050B96B3E98F10EC9C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0470cd2-727d-3055-a47f-2fce88e5f6f5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.111.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:05:0b:96:b3:e9:8f:10:ec:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8d418a2b-5a91-4040-82ec-f097319b03c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5a:b8:57:48:f2:44:bf:dc:03:7b:96:12:11:
                    45:6d:03:8d:d9:58:f6:5e:8e:e9:16:d7:84:90:7a:
                    3e:b6:b8:de:b8:03:6a:6d:93:cc:6e:ca:d4:7a:ee:
                    60:f3:d5:6e:6c:49:19:05:32:66:d4:80:1f:41:4f:
                    2b:29:72:c0:dc:fd:c7:1b:7b:7c:48:6f:aa:6e:a2:
                    9a:1c:65:c6:7a:a5:53:ab:35:3a:50:09:05:23:67:
                    65:f0:1e:11:94:a9:a3:0a:7a:b6:cc:08:3c:66:12:
                    19:3a:f3:b2:9f:25:4a:13:97:02:50:ba:ee:45:2a:
                    90:57:c4:80:ed:2e:d8:3f:8a:91:76:7b:3b:83:43:
                    90:bf:60:c6:c8:a2:35:79:fa:35:60:d5:a2:df:a3:
                    c0:0b:01:53:3f:f9:80:97:59:e6:6f:c8:a2:69:e6:
                    54:f4:78:02:7c:bb:70:a0:b7:d2:85:80:f1:08:f4:
                    de:96:7c:d4:4c:11:4f:4f:3d:06:05:f4:fa:39:65:
                    53:bb:b8:f6:d0:72:d8:19:91:3a:6a:72:02:9f:c4:
                    11:ab:d1:0e:7b:26:cf:7a:83:c0:e8:e8:cd:c1:bd:
                    ce:c5:d4:8a:d6:32:dc:d9:2d:1d:3a:77:a1:cb:3a:
                    c2:ff:24:96:3d:b9:23:44:88:29:b4:2f:26:5d:33:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:8F:97:17:5A:81:08:B6:49:D5:9C:48:28:70:97:C5:0B:10:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0470cd2-727d-3055-a47f-2fce88e5f6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:00:75:2d:66:c6:ee:f3:1b:8f:60:f4:e3:77:2d:18:ca:dd:
         b9:79:7a:5d:c6:6f:3c:4b:da:93:4b:21:03:9b:69:1d:74:a4:
         09:6e:4e:94:38:a5:6e:dd:ec:4c:57:4d:9a:de:bb:70:5b:68:
         cd:4f:c8:b0:35:82:d0:69:39:d8:47:f1:a6:5b:3a:ba:c5:c9:
         71:83:25:d8:a6:c2:4d:b9:3b:3e:0f:0b:8e:df:85:b5:c9:92:
         4c:63:cb:37:4e:8b:d7:f7:94:c6:66:f5:d1:9d:fa:70:c0:7c:
         5f:47:2f:d4:58:45:be:e4:3a:29:23:65:69:2b:f3:35:e9:78:
         c9:d6:5e:f4:ee:cb:e4:9a:5b:7a:9d:07:a7:e8:e3:bf:78:2b:
         c1:45:15:d8:2c:60:c4:7c:a2:ac:3e:ff:ce:57:dc:ca:5e:9f:
         c8:8e:17:4d:99:81:91:f4:fe:a2:e9:1d:72:71:09:3f:b0:f0:
         9c:ae:63:68:b5:35:42:32:38:5d:1e:e5:06:f7:7a:f5:fd:ee:
         8a:00:fa:ab:62:98:f6:84:32:51:29:e3:2d:98:28:a9:f9:6a:
         29:88:f8:45:d8:63:1a:be:53:2e:db:ff:24:3c:65:a7:11:23:
         03:8c:76:4d:82:b9:52:10:81:93:56:fb:13:31:3c:37:1b:7d:
         36:36:e5:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCAULlrPpjxDsnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OGQ0MThhMmItNWE5MS00MDQwLTgyZWMtZjA5NzMxOWIwM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglq4V0jyRL/cA3uWEhFFbQON2Vj2Xo7pFteE
kHo+trjeuANqbZPMbsrUeu5g89VubEkZBTJm1IAfQU8rKXLA3P3HG3t8SG+qbqKa
HGXGeqVTqzU6UAkFI2dl8B4RlKmjCnq2zAg8ZhIZOvOynyVKE5cCULruRSqQV8SA
7S7YP4qRdns7g0OQv2DGyKI1efo1YNWi36PACwFTP/mAl1nmb8iiaeZU9HgCfLtw
oLfShYDxCPTelnzUTBFPTz0GBfT6OWVTu7j20HLYGZE6anICn8QRq9EOeybPeoPA
6OjNwb3OxdSK1jLc2S0dOnehyzrC/ySWPbkjRIgptC8mXTMcuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMgj5cXWoEItknVnEgocJfFCxCiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA0NzBjZDItNzI3ZC0z
MDU1LWE0N2YtMmZjZTg4ZTVmNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSW/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQAdS1mxu7zG49g9ON3LRjK3bl5el3GbzxL2pNLIQObaR10pAluTpQ4
pW7d7ExXTZreu3BbaM1PyLA1gtBpOdhH8aZbOrrFyXGDJdimwk25Oz4PC47fhbXJ
kkxjyzdOi9f3lMZm9dGd+nDAfF9HL9RYRb7kOikjZWkr8zXpeMnWXvTuy+SaW3qd
B6fo4794K8FFFdgsYMR8oqw+/85X3Mpen8iOF02ZgZH0/qLpHXJxCT+w8JyuY2i1
NUIyOF0e5Qb3evX97ooA+qtimPaEMlEp4y2YKKn5aimI+EXYYxq+Uy7b/yQ8ZacR
IwOMdk2CuVIQgZNW+xMxPDcbfTY25Vw=
-----END CERTIFICATE-----
Generated at Wed Jun 4 22:56:04 2025 by rpki-client