Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/577014d7-6c0b-315c-bb56-e70761a241b8.roa
File:                     577014d7-6c0b-315c-bb56-e70761a241b8.roa (raw, json)
Hash identifier:          7GjeebUZpfl8KL13ALw+afqJETOdFZr92hdWpjJXCxA=
Subject key identifier:   DE:8D:7E:D6:A5:CB:A7:F3:22:1F:17:7F:FA:DF:CB:A6:46:BF:1D:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED6194243E4BA8D43A7180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/577014d7-6c0b-315c-bb56-e70761a241b8.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        73.157.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:61:94:24:3e:4b:a8:d4:3a:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7039ee04-dd9c-42ca-a036-d87a86320390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:f1:8f:90:be:17:89:a5:75:84:e3:9f:5b:
                    ed:28:d9:3c:8d:cb:b0:94:32:2b:4b:20:37:09:e6:
                    cf:d0:d2:c1:9c:68:36:95:8c:c0:93:2f:99:71:08:
                    5c:89:d4:7c:7b:80:67:b5:eb:24:ec:b1:97:dc:49:
                    a5:f1:a2:82:b9:73:9a:ec:1b:20:cf:5b:8f:ba:24:
                    a4:ae:e7:40:37:3a:e3:34:9b:77:13:b4:db:ad:ad:
                    e0:fd:cd:a1:7c:bf:15:84:76:4f:c1:e9:21:57:51:
                    38:12:23:a3:e1:ab:a0:c4:d2:45:f8:35:c9:b9:76:
                    0c:89:5b:20:23:93:a0:80:bd:4f:ce:6f:fc:e0:2e:
                    b6:24:2a:99:43:da:ef:b0:a4:df:e4:e3:df:cf:0e:
                    c7:71:55:38:b5:08:e2:4d:7d:29:d8:0e:10:64:ba:
                    2a:19:78:35:09:e8:dc:21:fe:3c:c5:88:ef:0a:5f:
                    f7:3b:4f:bd:59:9e:10:fd:ac:ec:67:8b:ba:89:f5:
                    1f:2d:69:f4:8c:4d:52:86:21:cb:54:ee:d5:d4:97:
                    8b:54:ee:0d:9d:76:ad:36:f5:1a:0b:e7:ac:15:8d:
                    b3:1b:11:fa:36:af:87:3c:41:93:60:13:c0:80:a3:
                    c0:91:c2:4c:6a:f4:01:6b:19:85:e5:1d:56:ef:b5:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:7E:D6:A5:CB:A7:F3:22:1F:17:7F:FA:DF:CB:A6:46:BF:1D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/577014d7-6c0b-315c-bb56-e70761a241b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.157.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:c1:50:98:e4:1b:94:92:4d:7f:8a:2a:76:a4:31:9d:56:
         5a:af:63:3c:4a:52:1f:30:46:eb:46:a7:44:f3:2c:36:b4:7d:
         5a:61:ff:99:78:26:a2:be:c2:ee:13:3e:a8:47:26:ef:ae:e5:
         a8:86:ce:68:42:ca:e4:e6:de:24:51:88:a1:8b:2e:0e:d5:7b:
         3f:2e:f1:9e:44:7e:a4:ac:fa:7f:e0:55:79:d9:6b:47:bf:c3:
         a4:70:40:44:16:9c:38:1e:e2:97:68:ab:fd:a5:fc:1f:09:1d:
         42:9d:01:31:7e:ba:2d:dd:3e:22:ef:5d:c6:77:57:b9:fb:bf:
         5a:6b:2e:d2:56:16:4c:37:b2:69:33:15:36:98:9e:16:76:7e:
         6c:ab:a1:69:34:08:01:da:2b:6a:5c:57:a5:da:98:29:94:60:
         6b:33:00:c7:c6:62:ae:1e:3a:e2:10:c3:30:ea:a0:6d:05:d3:
         f7:83:27:63:40:5c:c5:66:1f:7b:2f:7d:eb:58:3f:c5:f2:25:
         c1:d7:d9:97:d2:75:bc:15:a5:1c:dc:ed:35:45:2f:b7:e2:7b:
         6d:0e:54:5e:19:8c:6b:99:73:75:a3:87:5a:db:c4:34:1f:1d:
         ed:18:b2:a1:c0:7d:d3:f8:88:b5:f4:2c:78:e3:25:b3:20:00:
         39:0c:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:20 2025 by rpki-client