Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9526838c-ad93-3150-907b-0ba4744fba50.roa
File:                     9526838c-ad93-3150-907b-0ba4744fba50.roa (raw, json)
Hash identifier:          Uy46lyp38shKTgE7SzjWczFRqBm/mpQpUOLqE+134X0=
Subject key identifier:   8F:5B:A5:6E:93:7F:54:A5:8F:8F:C6:E0:CF:C2:C8:67:3D:0C:B8:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C089129D3EB6F9EB03CDDD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9526838c-ad93-3150-907b-0ba4744fba50.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.158.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:91:29:d3:eb:6f:9e:b0:3c:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=912ba8f0-7488-4785-ac49-25f3cd3d9cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:88:1a:7d:a8:f5:c8:0d:02:ee:97:11:e4:
                    ce:f9:e9:9a:bc:ad:d9:72:d7:cd:5d:4a:a4:39:a7:
                    29:72:03:eb:e0:49:8a:f8:52:e2:2a:0c:50:a2:df:
                    b0:90:b9:a6:5d:ff:4e:02:2f:b9:0a:cd:3b:33:3b:
                    1a:fd:c2:2e:94:2c:49:a3:9b:fa:b9:29:99:1c:08:
                    6c:66:00:94:85:60:ba:fc:af:d9:2d:24:df:cf:df:
                    fc:bb:49:13:9c:a6:38:fe:7c:d9:69:6c:db:c1:f0:
                    d4:e5:1b:74:af:1f:d9:47:bf:09:11:eb:b6:03:e7:
                    ce:89:1f:16:7c:c7:da:ac:6d:0b:52:b2:bc:08:e1:
                    96:d0:fb:a3:34:f7:c6:ac:78:b2:d6:33:83:f1:c7:
                    47:aa:58:cb:ca:cd:81:e1:bc:1b:81:a8:aa:07:40:
                    8f:d9:b7:41:30:b3:d6:06:47:49:e9:ec:fb:fb:d9:
                    d1:23:d4:03:76:fc:d3:0d:09:e7:8a:1e:8f:d4:8c:
                    0c:64:9e:bc:07:15:98:cb:9e:06:fd:05:0a:a9:35:
                    15:88:94:8b:4e:17:ea:02:c3:f2:6a:55:dc:bf:34:
                    a4:5d:c5:e5:05:b5:6f:59:8c:9f:7d:77:71:d8:da:
                    18:3e:49:5d:66:07:5b:25:54:89:31:81:6a:a2:5f:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:A5:6E:93:7F:54:A5:8F:8F:C6:E0:CF:C2:C8:67:3D:0C:B8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9526838c-ad93-3150-907b-0ba4744fba50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:85:2e:be:4a:17:bd:c8:a4:82:b2:14:ac:a5:4e:15:d1:
         6e:d1:b6:1e:ee:7d:13:fa:10:91:ed:a7:76:23:d6:c5:fb:cb:
         0f:49:07:d2:70:4d:1f:3e:28:31:11:38:ce:ea:81:b4:2d:b4:
         bf:66:c3:d7:da:74:f5:d4:6e:30:c7:ee:6e:66:14:bc:1f:ac:
         0c:6a:d9:e6:0c:b0:f3:3d:43:37:2d:36:32:74:2c:77:be:7d:
         df:00:1d:4c:7a:a2:4a:a7:c6:2d:34:35:03:eb:e7:b9:fc:80:
         35:73:42:30:15:81:6b:6e:b3:3d:31:52:3b:9e:a5:49:75:ba:
         f9:4b:5c:1b:fb:52:f6:b4:83:5c:db:ff:c7:74:6c:b9:29:15:
         e7:f1:dd:e6:d0:d5:17:ac:ec:21:45:d4:5e:bf:fd:75:47:ad:
         ef:81:82:dd:b3:ae:ca:cc:57:f4:da:41:2d:38:98:79:be:85:
         0a:06:65:0f:49:49:88:2c:77:2e:19:c2:d8:f8:39:cc:7f:eb:
         34:cb:34:fd:4a:40:f1:8b:57:7a:9e:51:f2:3b:aa:36:bb:c5:
         a1:d6:8e:8d:90:09:d2:e0:5d:e8:39:e9:43:38:97:2e:e2:d7:
         c9:41:5d:e9:e0:f0:6d:a2:6c:03:a5:c2:c6:65:80:63:ea:e6:
         b1:a7:a0:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCJEp0+tvnrA83dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTEyYmE4ZjAtNzQ4OC00Nzg1LWFjNDktMjVmM2NkM2Q5Y2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIaIGn2o9cgNAu6XEeTO+emavK3ZctfNXUqk
OacpcgPr4EmK+FLiKgxQot+wkLmmXf9OAi+5Cs07Mzsa/cIulCxJo5v6uSmZHAhs
ZgCUhWC6/K/ZLSTfz9/8u0kTnKY4/nzZaWzbwfDU5Rt0rx/ZR78JEeu2A+fOiR8W
fMfarG0LUrK8COGW0PujNPfGrHiy1jOD8cdHqljLys2B4bwbgaiqB0CP2bdBMLPW
BkdJ6ez7+9nRI9QDdvzTDQnnih6P1IwMZJ68BxWYy54G/QUKqTUViJSLThfqAsPy
alXcvzSkXcXlBbVvWYyffXdx2NoYPkldZgdbJVSJMYFqol/HbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9bpW6Tf1Slj4/G4M/CyGc9DLjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUyNjgzOGMtYWQ5My0z
MTUwLTkwN2ItMGJhNDc0NGZiYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ5CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH3hS6+She9yKSCshSspU4V0W7Rth7ufRP6EJHtp3Yj1sX7yw9JB9Jw
TR8+KDEROM7qgbQttL9mw9fadPXUbjDH7m5mFLwfrAxq2eYMsPM9QzctNjJ0LHe+
fd8AHUx6okqnxi00NQPr57n8gDVzQjAVgWtusz0xUjuepUl1uvlLXBv7Uva0g1zb
/8d0bLkpFefx3ebQ1Res7CFF1F6//XVHre+Bgt2zrsrMV/TaQS04mHm+hQoGZQ9J
SYgsdy4Zwtj4Ocx/6zTLNP1KQPGLV3qeUfI7qja7xaHWjo2QCdLgXeg56UM4ly7i
18lBXeng8G2ibAOlwsZlgGPq5rGnoDY=
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:51:27 2025 by rpki-client