Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81d1d942-bd55-3681-becb-547e60f96db4.roa
File:                     81d1d942-bd55-3681-becb-547e60f96db4.roa (raw, json)
Hash identifier:          PGbOzc0bH8GsaM4OhFAK5QmEsgW3bheUhNI5Qz2uGIk=
Subject key identifier:   C8:DC:BD:A0:78:A6:68:BA:08:A8:03:8C:83:AD:51:EF:C3:24:7A:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB98FCE7DDBD214117BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81d1d942-bd55-3681-becb-547e60f96db4.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     20214
IP address blocks:        73.49.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:98:fc:e7:dd:bd:21:41:17:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=494e6093-2d42-4a85-b794-030a0a1e2c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:0a:40:c0:10:59:24:bf:c1:dd:ba:ad:ab:
                    d0:ea:23:1e:41:19:a9:ac:05:9c:2e:fc:1f:ff:4a:
                    ff:e5:b8:6c:23:d7:9d:ae:bf:d4:d2:8e:54:08:18:
                    d4:4c:65:5f:ed:c2:bc:9d:8c:4b:a2:18:76:3b:18:
                    57:db:19:39:1f:a8:8f:b6:e6:87:88:42:b8:f8:42:
                    06:11:fd:34:17:4e:c7:29:d7:de:a9:9d:25:7c:45:
                    cf:b3:6d:67:30:89:58:24:67:19:d3:d1:d0:40:ea:
                    74:60:1d:fe:73:c9:2d:2c:20:c7:41:13:de:6f:4d:
                    d0:f0:fc:3c:b0:16:14:cd:dc:1d:c8:64:2f:59:c5:
                    03:4b:1e:cc:d7:31:32:f5:73:8b:5c:3b:f4:bf:12:
                    53:2d:d5:b2:33:73:3b:65:86:92:fa:df:9f:9f:85:
                    3e:d6:7f:f1:44:e7:92:4d:75:36:10:0f:1e:4f:fb:
                    2f:c1:47:69:82:32:17:7a:b4:cb:21:2f:ae:e5:18:
                    36:a3:e7:08:92:d8:0f:e3:db:06:bc:e1:01:04:26:
                    d2:0e:dd:b3:ae:ce:fb:e5:ee:92:01:25:e1:62:64:
                    22:12:85:87:5d:25:3f:30:95:86:d5:55:f7:43:ed:
                    7b:e7:b3:9d:9a:42:4c:b4:e7:ae:0a:82:a9:11:69:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:BD:A0:78:A6:68:BA:08:A8:03:8C:83:AD:51:EF:C3:24:7A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81d1d942-bd55-3681-becb-547e60f96db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:78:96:2f:8f:41:49:dd:8c:32:54:48:5c:47:1b:f2:a6:48:
         dd:d3:71:73:dc:a4:f6:dd:d8:03:46:a5:5a:ec:59:bb:5f:79:
         a7:8e:7e:8d:59:5d:b0:a0:e2:ea:b3:e3:8c:22:07:a0:4e:63:
         bd:6b:ca:4e:09:32:f2:92:fb:f9:0c:32:1c:0f:c3:e6:16:4e:
         b4:d6:09:e1:f7:72:17:a5:99:64:d0:b9:2c:23:09:18:79:1c:
         c4:b3:17:7e:1a:8c:b3:c8:93:3a:75:00:ed:49:69:a4:9b:aa:
         50:3e:d9:95:43:5b:2d:00:4d:70:b2:23:ca:b0:4d:b6:72:20:
         6c:fc:94:48:ec:11:4e:15:93:4a:29:48:2b:0b:cd:71:ae:e8:
         04:fa:ef:b8:34:9b:6e:85:b8:06:7f:cd:f5:ce:18:bc:1d:ac:
         c7:37:5c:e6:5b:9f:7e:d9:99:aa:6f:75:1e:76:a3:0d:9e:40:
         ca:d8:40:af:a9:04:09:8b:77:f1:c9:d4:46:8c:fe:18:0f:55:
         6f:4c:b1:90:03:29:c9:45:5e:cc:20:68:74:75:93:61:14:6b:
         6d:46:34:b3:71:7d:b2:f1:62:3e:29:04:26:9b:94:29:52:16:
         d5:15:4b:8d:a2:0f:48:fe:6f:2e:6a:01:99:85:48:77:5a:38:
         33:c2:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:39:15 2025 by rpki-client