Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffed3254-3639-3728-ba4a-ae3981032538.roa
File:                     ffed3254-3639-3728-ba4a-ae3981032538.roa (raw, json)
Hash identifier:          WXJnFhSdVqfsqUZyIGvVOXZk9oZ4e3Jb0LxSnhHpEcc=
Subject key identifier:   3C:9E:E5:56:F4:88:3D:94:2E:A7:D5:67:7F:3D:5D:7D:76:EC:14:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06FEA74561948A660F8180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffed3254-3639-3728-ba4a-ae3981032538.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.70.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:fe:a7:45:61:94:8a:66:0f:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=78a708ad-687d-4ee1-9c4b-bfa6441a9f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:cf:80:ed:e0:e3:b5:c7:44:86:b8:87:52:
                    88:fa:0a:dd:ef:2d:27:93:11:c3:b6:b0:25:ae:8a:
                    fe:c5:8e:6d:20:c2:2e:c9:99:6b:aa:61:c4:ab:ae:
                    ba:b5:e0:61:8a:41:58:2b:3f:70:b0:9f:e8:01:dc:
                    80:3e:3c:4f:46:22:b9:19:5b:43:ac:8b:8d:95:09:
                    0e:26:3e:1e:97:df:a0:b0:b1:02:5d:eb:24:e8:8b:
                    43:50:ce:c0:82:06:b3:2a:f7:7e:bd:cc:4b:33:ad:
                    ff:b3:72:eb:8e:b1:8a:00:f1:7c:89:21:90:37:ac:
                    f1:e5:7d:45:9d:83:2e:f0:d7:8b:7e:4a:e3:6f:51:
                    39:e1:98:9c:dd:6d:32:d8:2b:00:2c:df:37:e9:33:
                    e2:f5:cf:f2:dd:e7:bd:c2:aa:3f:bf:d9:ee:87:5e:
                    c8:9a:8d:8c:be:49:e6:77:9c:2c:fd:e9:ea:cd:2a:
                    1d:96:c2:ff:1d:84:5c:ba:60:b8:1e:49:ce:23:7f:
                    f2:38:0b:36:38:a6:f1:59:24:20:c2:2c:29:80:88:
                    bd:1e:66:92:ae:5d:8b:56:db:6a:ff:e4:55:04:bb:
                    a9:42:e3:b2:ae:b2:13:78:bd:a8:03:95:26:13:80:
                    3c:53:bd:f4:12:e2:4b:2e:06:87:17:a0:e4:30:05:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:E5:56:F4:88:3D:94:2E:A7:D5:67:7F:3D:5D:7D:76:EC:14:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffed3254-3639-3728-ba4a-ae3981032538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:67:77:f6:c6:cb:78:74:4f:42:73:ca:77:ef:66:dd:db:
         6b:34:15:b2:89:64:59:0f:76:2b:20:46:d9:05:7b:bc:44:98:
         fb:30:6f:aa:09:81:a2:2b:5f:f9:8b:c3:d8:fd:0b:8f:4f:ae:
         a4:68:44:9b:7c:a1:a2:62:a4:92:58:78:be:a1:89:9f:44:f5:
         31:38:59:9d:93:0c:36:08:61:25:be:2f:33:3d:07:23:1b:17:
         80:ca:c0:7f:db:79:46:ac:b3:40:71:5d:ca:20:2e:36:ed:ca:
         d0:60:49:89:07:a3:bf:0d:c5:5c:2a:94:4a:38:92:45:bf:30:
         98:0a:0f:dd:16:31:48:9e:4f:36:89:80:a5:87:03:62:09:99:
         bd:c6:e5:13:9a:a7:93:17:b5:52:d2:34:fc:3d:9c:b1:d1:e9:
         a1:56:8a:46:ea:69:72:d9:b1:38:4e:f2:47:59:b9:d0:77:1b:
         6c:c4:c2:c5:2f:ab:eb:39:f2:1b:bb:3b:4b:2a:c7:2d:bb:3f:
         d2:fb:14:7b:31:e2:22:99:b6:e8:46:42:1e:fa:3c:30:3a:73:
         f9:c3:25:88:8d:83:28:69:40:68:b5:4d:ec:3b:2f:eb:cf:71:
         ae:44:46:83:77:b0:e8:31:1e:11:84:1c:c5:50:65:1a:1d:d2:
         d4:03:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:10:53 2025 by rpki-client