Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fccae1ce-c520-3706-b1ad-78e04c8cf28c.roa
File:                     fccae1ce-c520-3706-b1ad-78e04c8cf28c.roa (raw, json)
Hash identifier:          Fp92U8O7DLyzNGmmaLOhOBxoR7JjiDFpdjoCJw3cEbs=
Subject key identifier:   24:72:C9:7A:65:6D:1B:36:50:7F:C0:1B:8F:0B:2C:CE:9F:C0:C0:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C4FDEF9D18C21310AB060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fccae1ce-c520-3706-b1ad-78e04c8cf28c.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.43.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:4f:de:f9:d1:8c:21:31:0a:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=b5f0f6bf-ae0d-45da-952f-b88a9bd11949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:c7:58:c1:b2:78:f9:76:f6:6b:d6:be:70:
                    32:f5:f0:01:97:8c:60:d3:98:c7:ca:36:2e:a8:1a:
                    23:6a:ad:e2:41:67:13:37:66:cf:03:f8:82:7a:31:
                    dc:54:92:61:de:c4:29:1a:e4:0d:0d:e8:90:b9:25:
                    c5:bf:da:6b:96:11:63:ae:f9:21:f7:d9:d3:02:af:
                    f1:a0:a9:d6:33:5e:4a:c3:d1:86:e7:6b:83:41:0b:
                    15:c0:99:e1:72:0e:5e:62:64:ba:f9:b8:4b:d7:2b:
                    28:ce:2a:60:66:24:53:4c:8a:64:41:c2:40:19:81:
                    a6:0a:4b:ff:80:c8:9b:14:26:e3:f0:96:8c:12:c6:
                    ae:4b:62:70:c6:75:5d:d4:96:d6:70:61:48:ae:00:
                    90:ea:de:30:75:63:dd:c5:26:16:92:a5:a2:a8:d8:
                    7b:b1:03:fd:1b:46:8d:0c:33:f9:72:c4:6a:a0:8d:
                    43:67:9a:9b:ed:e2:be:4a:ed:e2:02:d5:d4:d0:61:
                    e2:5e:b1:48:cb:a0:ce:c0:81:b2:56:9d:9e:6e:2a:
                    72:65:50:87:9b:2e:1b:de:e2:dc:f7:7b:63:39:4f:
                    38:be:81:3f:ee:f3:9a:72:34:cb:d4:cd:ac:46:c6:
                    26:b1:bd:9d:9b:bd:e5:78:cb:1c:c0:02:81:f7:25:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:72:C9:7A:65:6D:1B:36:50:7F:C0:1B:8F:0B:2C:CE:9F:C0:C0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fccae1ce-c520-3706-b1ad-78e04c8cf28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:b2:aa:08:ec:e7:89:11:06:0f:af:b7:e9:f8:84:8a:f1:
         aa:d2:33:71:d0:5f:33:fa:16:b8:fe:26:ca:c8:26:25:71:ce:
         a0:9a:84:b7:58:a9:74:ef:1e:cb:ab:ae:17:cb:78:f8:d2:16:
         98:cf:b1:dc:39:a2:bd:5d:55:cc:5b:1a:03:1b:51:8a:02:fc:
         d1:c3:07:dc:98:ff:7d:b0:db:ef:86:62:4a:65:f7:4c:3d:97:
         a5:d2:c7:7f:95:68:a2:81:74:1c:d0:bc:ef:d2:79:01:f1:91:
         57:85:de:cc:1f:c9:26:10:49:ae:dd:fe:49:96:62:fe:9d:fd:
         a0:f1:49:5d:ac:6a:a5:32:69:df:ae:36:50:0d:75:90:af:5c:
         f9:a2:f3:c3:79:65:50:1c:3b:9c:8a:86:c8:eb:0f:77:94:6d:
         1d:17:36:83:5b:30:67:85:80:2e:e1:fe:40:8e:76:6f:d7:e9:
         97:4b:b1:e2:cf:13:3c:58:98:b6:93:7d:89:9d:d4:30:c3:21:
         7a:a4:ee:42:7e:88:f8:0a:4c:04:5b:ae:58:31:4c:65:e6:0c:
         70:d4:22:01:3a:30:14:d1:e7:67:49:5b:7a:cf:28:71:35:c5:
         70:e8:83:8a:42:df:f6:21:3c:24:75:78:8e:db:4c:dc:2f:fa:
         9c:b3:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:14 2025 by rpki-client