Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36647273-5022-3728-8306-3936121282a1.roa
File:                     36647273-5022-3728-8306-3936121282a1.roa (raw, json)
Hash identifier:          RnuE/CVQUK886eDRBZvf1oMGrYCrC7bvXSK/658ihao=
Subject key identifier:   B0:43:24:10:4A:FC:48:C6:B9:5A:E3:36:C1:75:B6:71:ED:CD:97:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43146D6B832DD6D5882EF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36647273-5022-3728-8306-3936121282a1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.240.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:46:d6:b8:32:dd:6d:58:82:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=02191ed7-9d9a-4739-9759-99ba2078a68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:28:20:28:a1:04:66:25:71:d3:39:c6:8d:
                    80:e1:8a:ee:79:49:ce:99:1d:78:b1:31:23:41:7f:
                    ff:32:eb:0c:bc:73:2e:20:56:bc:6b:83:26:6d:e9:
                    2d:5b:35:a7:87:c0:7d:7c:7e:be:da:9d:0c:9c:d2:
                    fa:c5:d6:bd:1a:73:a8:f4:04:99:36:6d:43:54:07:
                    75:2f:8a:8f:b2:5a:6d:de:bf:d9:55:04:47:ce:d2:
                    6f:d7:61:64:63:c6:ce:78:f5:25:5d:0d:37:95:f5:
                    0b:53:ba:53:c9:62:45:06:e8:6c:e2:83:db:76:69:
                    b6:12:c4:0b:2f:f8:3d:1f:05:e0:1b:c2:6e:31:f0:
                    8f:86:ab:c7:8d:81:f4:bf:86:d1:38:a4:6c:9f:f0:
                    bd:e6:da:c6:63:3d:b4:f5:42:15:52:09:55:ba:0e:
                    72:e0:07:79:5d:4a:49:0b:0b:c9:af:29:ab:3d:1f:
                    ba:ed:ba:b8:c3:6a:bf:57:4b:bc:1e:31:f2:4f:c2:
                    be:3e:11:15:da:5b:8e:ba:97:5e:0a:3a:4a:d4:a8:
                    e9:96:b2:7a:0e:17:cf:5c:1b:09:77:c8:08:3a:9f:
                    77:3b:04:1d:19:86:fe:e3:0d:68:d3:1e:06:0d:ae:
                    ad:46:f2:e8:26:b3:af:e7:32:8e:25:ec:65:8a:93:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:24:10:4A:FC:48:C6:B9:5A:E3:36:C1:75:B6:71:ED:CD:97:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36647273-5022-3728-8306-3936121282a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:a6:17:68:11:da:92:07:55:48:15:e7:ad:73:dc:db:1b:
         38:d7:67:64:c0:c9:48:a1:da:c1:83:49:7c:ed:3f:be:d9:c9:
         02:de:0f:f8:9f:c0:a7:01:a6:28:08:cb:b6:a1:0a:aa:e3:7a:
         b8:26:2b:a5:00:31:1e:97:0d:99:9b:e6:ac:c4:d5:fa:ad:4b:
         b6:55:20:d1:11:dd:4f:9f:5e:69:60:a0:ee:58:88:59:3d:18:
         28:62:a1:f3:a7:41:f9:c3:e4:5f:45:67:fd:fa:6b:47:79:ed:
         ae:0b:d6:ca:50:5c:69:a4:bc:85:92:8c:67:a6:ca:b4:fc:8a:
         80:0c:84:c1:ac:6f:a3:bf:af:00:1c:e0:25:6e:f6:7c:f3:0d:
         e8:10:cd:98:6a:ae:8e:60:4b:01:e6:6f:ba:a4:c3:8d:bb:72:
         57:26:fc:0b:e6:6b:aa:d3:1f:38:22:f8:aa:f6:f7:28:b7:13:
         a2:db:2d:1f:73:6e:94:a8:6f:7d:05:f8:fa:e3:b8:09:57:21:
         83:8c:51:cf:97:3e:01:7e:88:4d:75:b1:51:14:20:e1:c3:af:
         11:5b:f3:7a:9f:06:d8:f7:aa:e3:36:76:ce:17:1f:ab:e0:1f:
         41:1b:d9:03:ac:71:ee:ad:a6:70:8e:c8:98:a6:d5:f5:3d:9c:
         74:d9:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:32:03 2025 by rpki-client