Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4348bb95-00a5-3f1b-bd4e-b6b12f84decc.roa
File:                     4348bb95-00a5-3f1b-bd4e-b6b12f84decc.roa (raw, json)
Hash identifier:          0oW8bcV1xNg+QhJuqIGnDniP/39IXoou/0yOhmvT0aU=
Subject key identifier:   F6:63:24:66:61:04:40:5E:6B:75:17:32:C4:15:4A:B8:83:46:C0:95
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F43285849FCAA69FE51F2B1BA23AED200
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4348bb95-00a5-3f1b-bd4e-b6b12f84decc.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     5050
IP address blocks:        147.73.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:69:fe:51:f2:b1:ba:23:ae:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=cb38f58c-d2bc-4b9e-af75-36c623024021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:b0:52:f9:5a:c7:6a:c3:d8:cc:01:b7:7d:
                    9f:aa:92:91:d2:2a:00:8f:1e:2e:ed:86:a3:3d:1e:
                    80:e1:0b:6c:ab:ca:ff:de:5b:9d:5b:a2:d2:6e:5a:
                    85:7d:ea:54:c9:db:3e:1a:ed:21:c7:da:01:76:0c:
                    f4:ce:68:52:57:35:f0:66:4d:07:ef:88:46:c8:62:
                    ee:91:0e:9e:ec:5a:b6:04:c2:33:a7:4a:2b:bf:5c:
                    af:79:39:23:d0:71:09:6e:15:79:d4:20:16:07:31:
                    b4:fd:ca:1b:43:89:c0:7d:26:0c:db:3d:c6:fa:1d:
                    e3:fe:06:50:86:af:e7:67:d5:7e:5f:e3:92:6e:ce:
                    e8:55:58:a0:d1:2c:7e:e8:38:87:25:69:b4:d5:a2:
                    36:01:5e:fd:4a:f5:e3:90:88:e8:c8:fd:c1:93:3e:
                    0d:18:53:3c:9f:77:90:7d:25:ad:76:33:07:b9:55:
                    8b:b6:1a:c4:af:fb:fd:0b:d9:42:2c:e7:3d:41:09:
                    63:f5:62:f3:67:19:a6:0b:67:1d:65:63:da:90:3a:
                    3c:1c:81:b5:88:ce:98:e8:a3:d7:e3:a1:19:91:9f:
                    cf:e7:c9:c5:cf:cb:ed:a4:86:ef:42:e3:99:01:0a:
                    a2:82:f6:a5:c7:42:1a:d3:9b:ae:3d:b0:fc:03:be:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:24:66:61:04:40:5E:6B:75:17:32:C4:15:4A:B8:83:46:C0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4348bb95-00a5-3f1b-bd4e-b6b12f84decc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:89:c7:4f:5b:f3:2c:0b:78:aa:50:9a:98:28:b0:5b:bb:b1:
         1b:2e:6a:f8:bd:1c:95:e3:3e:3e:c3:40:33:e5:71:d6:bb:99:
         25:a5:85:d4:0a:9d:5d:d6:47:1e:2d:94:3d:9f:9c:8b:17:03:
         0f:f9:41:9c:4d:ff:b7:17:0f:44:da:e4:bf:78:c0:1f:a4:25:
         f1:8e:19:a2:31:44:90:59:f3:e6:8f:18:0e:1f:1f:25:64:66:
         00:8f:4b:a6:11:0b:3a:c3:06:5f:15:c9:8b:64:89:6e:67:23:
         c3:ae:36:8c:78:dd:af:ab:a6:c9:84:26:98:ca:dd:c6:a7:8a:
         25:1d:b9:36:7b:79:c4:54:75:ba:82:35:8f:ad:75:ea:33:0f:
         95:b1:7d:2d:25:ba:30:d7:16:c5:2c:17:ed:06:28:5e:77:fb:
         64:0a:3f:64:95:26:ce:3a:c7:bb:e9:0a:a3:44:89:13:af:0d:
         ab:b6:c8:e2:49:6e:09:1c:31:46:0b:f6:9c:1f:ab:1f:fa:97:
         55:b5:30:92:61:00:4b:6a:dd:21:b6:ce:f4:c6:ca:e8:5d:26:
         49:5f:c0:0f:57:f9:f5:4a:18:75:56:c6:6e:90:69:a5:1b:47:
         b2:a6:aa:1b:4d:c2:5c:df:3a:25:28:41:7f:a5:ae:12:c0:50:
         d3:69:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:52:50 2025 by rpki-client