Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8da5dbe-97d8-33c2-9edf-a99006348f01.roa
File:                     d8da5dbe-97d8-33c2-9edf-a99006348f01.roa (raw, json)
Hash identifier:          gKm9AVuBDO4OZScZ6gptJJ7iTDc8dldMzjuNS3wpDsI=
Subject key identifier:   9A:44:F2:DB:CF:9D:1C:27:2F:22:8E:2D:11:4D:25:5B:61:D6:E6:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43008CEB8F805AD36955A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8da5dbe-97d8-33c2-9edf-a99006348f01.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.91.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:08:ce:b8:f8:05:ad:36:95:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=41c42288-26bd-4028-9eac-ceda162b9baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:62:fb:79:93:ab:43:d9:05:48:fd:76:ae:
                    9d:4c:4d:86:d1:98:93:2a:6a:9e:98:19:19:e5:40:
                    cf:f9:0a:71:22:bc:53:d5:d8:82:95:cc:c3:11:27:
                    73:51:15:9c:37:3f:f8:8b:17:52:d9:27:a9:cd:84:
                    46:cd:9e:38:08:ea:97:61:fb:bf:70:60:8f:85:d3:
                    d5:69:0e:6e:03:bd:fa:d8:b4:ab:13:df:91:58:3e:
                    e8:a9:e7:e0:42:5e:32:26:81:a7:a6:f9:dd:53:da:
                    44:af:e2:dd:f7:e2:9c:1b:4b:6e:85:59:56:d6:62:
                    b3:9e:c9:3a:d4:a1:8c:ed:3b:52:d0:18:9c:0c:bf:
                    fa:78:d1:c3:79:54:17:3a:db:a5:18:22:99:ec:31:
                    9b:ad:b9:41:05:66:ae:40:cd:62:42:51:f4:28:b2:
                    a5:1d:08:37:43:cc:62:be:98:2b:63:3d:77:f2:41:
                    d6:d1:45:88:91:3c:3a:ad:04:db:14:42:3e:50:e6:
                    d0:34:7f:41:bc:ba:bd:d0:32:e5:a3:fe:a7:eb:57:
                    10:3b:94:97:75:4e:78:f5:a8:ef:f4:80:ed:94:b7:
                    f2:4c:69:19:e1:c1:31:93:9b:a5:c2:6e:6a:08:1b:
                    03:ff:c6:da:dc:6d:27:27:84:39:69:48:a9:d9:d3:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:44:F2:DB:CF:9D:1C:27:2F:22:8E:2D:11:4D:25:5B:61:D6:E6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8da5dbe-97d8-33c2-9edf-a99006348f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:28:76:a5:6c:17:38:3d:2f:9d:a5:aa:89:0f:36:1c:86:
         ef:07:c3:a7:a9:dc:80:a5:d5:16:fa:ec:c9:8e:30:47:d7:87:
         0a:cc:09:c8:7e:58:df:4f:c5:5d:57:7f:89:67:43:69:b1:63:
         0d:e5:20:92:8d:6a:79:af:7b:73:67:43:2a:81:e1:d4:c7:d0:
         44:4a:21:c2:42:32:40:91:60:d7:61:29:36:8f:38:3d:c9:54:
         72:69:c6:45:0f:64:89:c4:5d:48:b4:3c:f4:3c:b1:41:07:91:
         e1:93:c6:de:b6:6b:ca:d6:cf:e2:21:0b:33:97:38:d3:8c:d3:
         ee:26:6b:f0:e0:93:40:c7:d4:52:85:90:53:76:eb:81:74:d9:
         55:25:1a:73:6b:8c:eb:ad:f7:f5:75:d6:7c:94:19:9a:30:da:
         50:1f:68:ee:d1:89:c8:70:a0:59:5d:e5:63:17:f9:fb:6b:56:
         50:90:f3:8f:5c:fd:de:5e:0f:18:9d:d2:34:9c:85:50:d5:16:
         f6:d1:68:f5:96:4d:a1:86:33:fd:f0:99:ae:59:75:b4:72:40:
         cc:b1:e2:bc:58:ca:ff:1b:a1:cf:3e:d7:da:09:21:ef:fb:84:
         53:78:b6:a0:ca:40:7f:f0:7a:0e:79:c5:53:72:c8:81:9a:2d:
         45:17:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:30 2025 by rpki-client