Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa
File:                     e15dfee1-6665-3d75-81e5-560c63205099.roa (raw, json)
Hash identifier:          j+soMlm66O01WiTnCq0w8MavBd09RQ1yWwDa0uDLNUg=
Subject key identifier:   B0:51:6D:D7:23:2B:62:B2:74:D1:C3:BF:45:E4:58:8A:E9:CE:44:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBA81139E8BDBCE8CEE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33489
IP address blocks:        73.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:a8:11:39:e8:bd:bc:e8:ce:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4131c380-b2f8-4cbf-9eae-cfcdb67e144b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:8d:5d:f0:a1:be:c4:76:4e:7f:50:25:b9:
                    a4:da:95:8b:00:85:e0:bc:4d:fe:67:f0:0e:34:a8:
                    76:3e:12:47:cd:e8:4d:a8:73:85:28:64:56:c6:da:
                    c0:54:7f:b2:e1:db:68:30:0d:1b:20:02:cb:3f:5d:
                    fe:14:c7:13:67:a0:70:e6:08:47:4c:92:01:07:4f:
                    83:41:04:96:4f:b0:d7:fa:77:14:73:c7:2f:2d:18:
                    eb:fd:cd:6f:86:5d:23:a6:6a:b2:7e:1a:c2:6e:9e:
                    fa:42:db:d1:15:6d:7f:05:b9:ee:1f:7f:9c:78:79:
                    fd:16:87:f6:73:e1:82:26:e4:d2:f6:cc:76:03:3d:
                    c8:e4:a5:18:43:88:82:3d:84:7d:2b:79:6b:2c:19:
                    df:e6:38:d9:c7:5b:87:49:5a:7d:0c:9a:f9:44:bd:
                    60:d9:8d:12:53:6f:3c:c9:67:3b:4e:e8:0d:a9:37:
                    3d:51:1d:5c:b4:03:46:1e:e5:39:dd:e4:89:f1:80:
                    9f:a7:0a:21:10:72:ac:c0:a0:ad:c1:e6:a2:40:48:
                    b4:2f:f5:ec:e8:a6:eb:5a:c5:ae:18:51:b4:d5:dd:
                    c4:bb:cd:97:c0:53:44:5e:e1:00:d6:84:46:e3:da:
                    09:db:66:a7:59:0c:bd:eb:86:f5:3e:45:78:60:b0:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:6D:D7:23:2B:62:B2:74:D1:C3:BF:45:E4:58:8A:E9:CE:44:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:1f:32:5c:d6:c2:1c:4d:bf:8b:a0:31:06:8f:20:89:e7:
         c2:99:8b:f2:eb:29:72:ad:01:c5:14:2b:61:e0:9d:f1:8c:84:
         c1:bf:1b:66:52:aa:5a:3d:ed:e8:9f:9a:76:d3:29:20:04:09:
         13:fb:f8:43:e7:76:fa:b9:be:fc:47:05:30:1e:3d:56:ae:43:
         33:06:33:c1:b9:18:1e:46:6a:c6:72:91:a5:c3:93:cb:bd:a7:
         5f:4d:b7:26:19:31:b2:3d:23:f3:d3:b1:76:b6:3e:7e:19:00:
         91:05:9f:33:63:10:b1:0a:55:f8:91:9a:28:ba:32:9a:b2:e6:
         cc:c7:bc:6c:e7:77:34:41:c8:b0:e3:96:1d:66:06:a5:ea:f2:
         f3:b0:0a:86:81:51:e4:86:dd:b9:cd:a9:d7:ef:97:ad:89:a0:
         d5:cc:77:85:0d:42:9c:b6:26:ed:b0:6d:3c:cc:6c:8b:d9:d7:
         af:31:38:28:76:21:e1:ee:e1:d0:17:9a:ce:fa:f1:d3:42:86:
         f0:24:1b:38:9c:ab:96:85:04:6d:c5:4d:18:75:e8:a8:f1:49:
         1b:bc:4e:59:bf:5a:1b:f5:29:dd:b9:ee:e1:0a:59:ff:2c:89:
         79:e0:a6:da:03:a4:70:77:e2:27:06:e6:3f:a2:f1:4d:c4:07:
         a2:c8:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:55 2025 by rpki-client