Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da08e60f-6110-3e97-8c2b-fb5314bb82bb.roa
File:                     da08e60f-6110-3e97-8c2b-fb5314bb82bb.roa (raw, json)
Hash identifier:          LXaIvy6EVHTqPmasgTM18MlOA8x5v7zDT3NdJOIA1sQ=
Subject key identifier:   F9:55:C5:D2:E4:6A:98:DC:C4:8C:63:4F:4E:1F:3B:6E:4F:7B:07:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05E9E4D69C83E1CD40B200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da08e60f-6110-3e97-8c2b-fb5314bb82bb.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        73.10.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:e9:e4:d6:9c:83:e1:cd:40:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a155fab2-5bde-4ae5-a2b8-093adf710d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:37:a3:0e:db:1f:72:78:a0:5d:fa:42:93:
                    c8:e8:2f:4d:4c:75:c1:45:9d:e3:ab:94:b8:95:a6:
                    26:07:f7:11:bc:b4:f0:9c:0c:d0:1c:b3:71:52:60:
                    24:ea:19:d9:6a:9e:03:63:d6:64:2c:fc:ab:c7:52:
                    da:ce:b2:a3:29:36:df:89:b0:05:e0:51:67:70:45:
                    f2:a5:0c:93:64:61:9d:37:26:51:f7:3b:8a:cb:72:
                    4c:ca:e7:1e:c4:52:96:9a:b4:14:f8:9b:74:ab:98:
                    ba:bf:9a:06:6e:59:8d:9f:6e:5f:e1:2d:2f:98:d2:
                    dd:9c:5f:b5:88:8d:0c:b9:ff:31:eb:62:dc:f3:25:
                    2f:31:4b:a6:c4:02:60:98:88:be:70:6c:ef:3c:0b:
                    74:71:04:ce:56:f5:12:55:7a:61:50:00:83:10:95:
                    ca:d2:60:6c:5d:97:04:31:75:d5:d2:0f:67:c1:48:
                    92:cd:d7:8b:7e:4f:55:5c:c7:3f:f7:e9:b3:31:74:
                    6d:46:99:0b:71:8b:55:94:a4:0c:8a:fd:68:0a:71:
                    e6:1d:4e:ca:d7:3e:dc:52:c9:2c:3c:25:e0:3c:2d:
                    0e:db:4c:24:e6:71:78:37:36:8a:56:d0:e2:89:c1:
                    ad:bc:2b:b7:00:75:bf:52:a8:94:06:92:b4:4e:ca:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:C5:D2:E4:6A:98:DC:C4:8C:63:4F:4E:1F:3B:6E:4F:7B:07:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da08e60f-6110-3e97-8c2b-fb5314bb82bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:36:79:44:fb:84:6c:72:7f:c7:e3:56:78:13:24:74:37:b8:
         47:6e:c1:79:41:1f:48:ef:01:93:51:7c:df:00:e3:f3:da:b4:
         60:15:b6:bb:e5:0c:3f:c0:c6:02:df:f4:67:c9:8e:27:49:af:
         dc:f8:9e:35:c2:42:75:de:a1:2e:44:24:fa:ba:6f:19:71:c0:
         06:aa:b9:e7:4c:b6:fc:ef:86:f8:25:4e:e9:d9:c1:1a:fe:2a:
         17:db:6a:41:05:f5:7d:df:83:45:db:98:57:07:d7:bf:4e:98:
         02:f8:de:98:4f:33:7d:ae:9a:5c:c1:8f:60:05:30:b2:ee:7d:
         fd:99:42:ca:d3:2b:30:1e:b1:7b:c1:f3:8c:b6:90:ca:d5:92:
         9a:05:d4:74:15:0c:69:a0:e1:96:29:a7:22:ef:90:39:61:a4:
         c8:d9:c9:43:a8:70:c8:ba:ad:72:7f:4b:4a:37:32:75:e2:f5:
         49:d1:5f:fc:ab:be:ac:84:d7:0c:15:fa:cf:5b:18:6f:7c:df:
         5d:45:8c:5d:af:6c:d0:e4:c9:2b:19:1d:f0:5a:e6:ae:70:fa:
         b2:50:2e:e8:ac:bd:d6:75:2e:79:94:b1:b4:a8:49:f9:bf:ad:
         d8:68:e0:08:7c:a1:08:06:33:5f:4f:6e:04:a6:55:f1:a2:66:
         c2:0e:86:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBenk1pyD4c1AsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
YTE1NWZhYjItNWJkZS00YWU1LWEyYjgtMDkzYWRmNzEwZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6k3ow7bH3J4oF36QpPI6C9NTHXBRZ3jq5S4
laYmB/cRvLTwnAzQHLNxUmAk6hnZap4DY9ZkLPyrx1LazrKjKTbfibAF4FFncEXy
pQyTZGGdNyZR9zuKy3JMyucexFKWmrQU+Jt0q5i6v5oGblmNn25f4S0vmNLdnF+1
iI0Muf8x62Lc8yUvMUumxAJgmIi+cGzvPAt0cQTOVvUSVXphUACDEJXK0mBsXZcE
MXXV0g9nwUiSzdeLfk9VXMc/9+mzMXRtRpkLcYtVlKQMiv1oCnHmHU7K1z7cUsks
PCXgPC0O20wk5nF4NzaKVtDiicGtvCu3AHW/UqiUBpK0TsplswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlVxdLkapjcxIxjT04fO25PewdUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEwOGU2MGYtNjExMC0z
ZTk3LThjMmItZmI1MzE0YmI4MmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASQr+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg2eUT7hGxyf8fjVngTJHQ3uEduwXlBH0jvAZNRfN8A4/PatGAVtrvl
DD/AxgLf9GfJjidJr9z4njXCQnXeoS5EJPq6bxlxwAaquedMtvzvhvglTunZwRr+
KhfbakEF9X3fg0XbmFcH179OmAL43phPM32umlzBj2AFMLLuff2ZQsrTKzAesXvB
84y2kMrVkpoF1HQVDGmg4ZYppyLvkDlhpMjZyUOocMi6rXJ/S0o3MnXi9UnRX/yr
vqyE1wwV+s9bGG98311FjF2vbNDkySsZHfBa5q5w+rJQLuisvdZ1LnmUsbSoSfm/
rdho4Ah8oQgGM19PbgSmVfGiZsIOhhM=
-----END CERTIFICATE-----
Generated at Tue Jun 3 07:06:21 2025 by rpki-client