Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa
File:                     73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa (raw, json)
Hash identifier:          sGFSFNdb72oFVL/MXEeLAWKY6y+QVVBPD0XrixudgDE=
Subject key identifier:   DF:74:8E:84:C2:89:C2:17:9A:8F:3F:F0:1C:56:CD:A0:40:7F:8A:A7
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E0BF87BF85DB7A0FD7A5DE80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     20227
IP address blocks:        173.241.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:87:bf:85:db:7a:0f:d7:a5:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=a89a1890-0bed-46e8-80e8-fc9a69205ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:96:a8:fa:c5:53:9c:7a:a4:12:9c:53:15:
                    dc:24:bb:23:99:8e:fd:06:92:76:9e:f5:1f:0a:dd:
                    81:8f:32:23:af:fe:51:c8:35:a1:30:cb:4f:86:bf:
                    16:69:d1:59:19:51:28:08:58:7b:6a:c3:ef:c4:99:
                    ca:5b:dc:17:ac:81:91:73:a9:8b:52:62:f6:36:93:
                    ad:d6:73:f4:1b:87:f8:29:4f:b2:28:42:eb:67:42:
                    f4:91:ab:27:f3:7e:35:ba:40:57:9a:69:fc:9a:b3:
                    dd:fd:c2:b9:c5:df:3b:71:88:12:97:bc:21:ed:dc:
                    fb:53:64:22:66:a9:db:3d:a8:be:cb:a5:c9:a4:43:
                    79:cc:1e:ed:cf:15:af:18:2e:90:83:a6:b6:44:2d:
                    9c:e2:35:56:81:57:6d:0c:65:4f:65:c2:35:6e:20:
                    d9:73:ce:8a:b0:72:a5:f2:e7:2c:bc:67:81:be:79:
                    59:24:67:49:fa:d8:77:75:23:cd:73:05:07:98:6b:
                    6a:73:22:7f:45:92:7b:ff:70:c1:2a:2b:20:be:17:
                    3a:6c:b1:32:dc:09:1e:3f:af:b7:90:b5:cf:a9:12:
                    91:84:6e:15:c9:5a:ab:a5:ba:98:d0:b6:cd:d7:d2:
                    3b:b3:90:ab:4e:2d:a0:bb:8e:7e:92:a6:fd:1f:64:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:74:8E:84:C2:89:C2:17:9A:8F:3F:F0:1C:56:CD:A0:40:7F:8A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/73ae0f9c-50fb-3cdb-ba14-2e200cedf620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:e7:8b:a2:22:53:72:f2:62:6f:b2:07:7e:3e:72:8a:98:
         f0:0b:60:03:7d:2e:9a:89:60:6e:8a:fb:d4:e6:d0:8d:25:aa:
         f2:4e:e3:11:f1:55:79:d5:7a:26:a9:10:a4:ec:75:6b:b1:2b:
         65:ea:18:0d:30:ec:b2:19:79:ac:c3:4a:00:5d:c9:0d:90:57:
         0f:89:e4:77:1e:f5:4d:16:37:6d:0c:1f:db:da:f3:50:57:9a:
         36:0a:6c:6a:aa:fe:bf:65:87:ce:a0:25:62:b2:64:6e:9c:06:
         be:2a:15:0d:22:05:fa:d9:f8:c6:38:1f:b3:51:94:7e:61:77:
         67:a2:23:07:6e:a3:8f:c0:ad:99:82:98:b0:67:02:92:9e:3d:
         93:f6:96:89:1a:f8:7f:8a:40:8a:67:6a:fe:c8:49:db:a6:81:
         aa:a8:03:5d:fc:31:a4:05:70:05:90:6a:95:e5:5f:9a:d9:81:
         85:fb:03:ae:04:92:fc:a2:46:29:d8:38:e8:c3:32:f2:fe:99:
         a9:ab:cb:39:e9:07:f2:b3:d4:e7:80:f7:ea:5d:80:6a:b0:64:
         63:6c:6c:43:fc:f1:e8:36:eb:00:2a:4d:f2:8f:47:51:c0:90:
         13:29:ca:52:2b:6f:8b:03:2d:0f:26:05:29:a5:a9:5c:88:27:
         7d:58:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:16:14 2025 by rpki-client