Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa
File:                     1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa (raw, json)
Hash identifier:          WQ8epY/9R5HLbeybuthPUkQ1tUlIc6f3zUKZ1LADZBk=
Subject key identifier:   B8:0C:11:F7:24:52:43:07:33:D2:34:90:22:CF:B8:C2:E1:5A:7D:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75AF119783819C7C98AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        71.56.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:af:11:97:83:81:9c:7c:98:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=b1773efe-dabb-4ecf-8096-8124eb301274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:74:30:e8:76:0f:e8:4d:00:b1:72:b1:b9:
                    45:d7:91:8b:28:9a:45:74:66:ca:78:4a:fd:95:46:
                    bf:96:04:cd:ca:d0:aa:d8:05:49:a0:99:01:e3:10:
                    0b:93:cd:65:2c:8c:68:9b:9d:cc:5e:e9:f2:c1:0d:
                    5c:3e:fb:70:ef:b2:0b:c1:05:4c:ae:ad:d2:97:38:
                    fd:15:82:0e:88:78:31:92:74:06:1b:38:90:32:10:
                    8e:3e:a4:3e:96:d4:a2:7c:dd:29:d3:d1:eb:20:96:
                    36:a4:72:0d:20:ff:74:80:d7:61:0b:12:ef:69:a8:
                    43:06:5f:26:44:24:09:e0:95:93:e9:51:fd:da:79:
                    e2:9b:9b:49:65:d5:3f:20:f7:ae:91:b5:6f:1e:5c:
                    44:2b:2c:90:49:06:dc:e5:5c:91:88:6f:72:27:16:
                    40:f2:08:43:fe:f4:f2:05:ed:d1:01:ba:24:41:da:
                    14:e4:a5:d7:08:bb:b8:d1:14:d6:ee:a9:e6:ed:23:
                    b4:80:6e:04:3a:f2:ce:20:4c:0e:49:fc:cb:70:0c:
                    53:98:e8:d7:f1:e5:6d:28:c4:df:7b:79:37:3e:19:
                    6f:90:92:70:8a:85:ee:c9:0a:0f:a6:b3:23:d1:50:
                    c4:9b:fd:86:4a:60:ce:56:39:b3:c0:87:c1:3d:ae:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0C:11:F7:24:52:43:07:33:D2:34:90:22:CF:B8:C2:E1:5A:7D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:3e:18:55:1d:65:72:9e:66:87:d2:f5:07:07:53:75:c1:
         1d:d5:8a:22:e9:45:04:cd:12:32:f3:2f:4c:6a:fe:f0:b1:69:
         f3:28:9e:51:19:63:6f:80:d3:a9:22:c4:c1:fa:fb:fa:ab:ea:
         95:22:de:c7:64:a8:41:e8:de:1f:d3:b2:a3:28:46:e9:94:fe:
         e4:4f:42:ba:2a:34:8e:0d:aa:2b:c0:d4:51:80:dd:a3:30:10:
         86:f2:4e:25:d8:02:21:aa:bd:06:6a:af:19:32:a9:2f:15:62:
         e2:69:13:3b:5a:ef:f6:82:76:e9:ab:6b:45:8b:d1:01:c3:71:
         54:13:3e:9e:2d:9f:27:4e:74:28:9c:b9:62:56:14:24:a3:fe:
         96:5f:59:ee:cb:57:f1:26:5e:3e:40:76:3a:2d:c2:ce:46:4b:
         8b:13:00:3c:1b:3c:9f:3b:7e:8f:75:9b:21:b9:29:ab:11:8d:
         74:86:02:3e:c7:b8:e8:12:7f:9b:9f:e1:4b:49:75:1f:ef:8d:
         00:d9:09:0d:74:25:46:2b:26:1e:6e:08:ae:1e:c3:1f:f7:72:
         09:9a:d5:19:db:c8:d7:21:c7:c9:1d:4a:0b:57:05:3b:95:b5:
         32:13:e2:cc:13:9b:e3:62:35:86:a1:85:53:8a:3c:9d:cf:4c:
         a0:bf:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:00:34 2025 by rpki-client