Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2f1001-c374-36ef-833c-c941f198dc07.roa
File:                     5b2f1001-c374-36ef-833c-c941f198dc07.roa (raw, json)
Hash identifier:          7oWbsZzykW4fY6GXWTTivAp9ZRMvZNmno0yd9DGSuQ8=
Subject key identifier:   4C:63:98:80:02:29:C6:29:21:1A:20:4F:FF:82:DA:BA:2D:32:1F:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5AA3180527A7D84C8FC28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2f1001-c374-36ef-833c-c941f198dc07.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7922
IP address blocks:        73.0.0.0/8 maxlen: 8
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:aa:31:80:52:7a:7d:84:c8:fc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e20e8570-f386-4a8b-ba43-4b7d96201596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:02:7a:65:3b:94:2b:51:e2:d3:97:92:45:
                    ee:37:a7:c3:f0:9e:79:70:ad:6b:5c:6e:6b:3c:9d:
                    ac:28:ec:d4:e8:fe:39:67:90:79:2b:0a:8e:e0:e9:
                    cc:e2:5d:e9:a4:09:d5:7b:df:ee:8b:bc:04:ad:88:
                    49:23:66:9a:fe:50:01:8e:0c:64:c6:cb:69:d9:68:
                    70:35:ce:6d:41:96:3c:ef:1c:38:dd:d6:cd:d8:fb:
                    67:14:49:b5:8e:f2:ae:bd:1e:11:51:97:1d:0f:31:
                    55:5f:96:db:4a:14:23:e0:48:64:62:a5:da:e0:89:
                    92:df:cb:3d:38:c7:57:e8:ad:0a:5e:8a:ae:61:a7:
                    2c:3f:b0:56:ec:dc:53:72:96:7c:37:04:75:f1:7a:
                    9c:9e:71:a7:f7:63:13:ab:ce:cb:09:7f:fb:10:f5:
                    d7:fa:c1:98:50:99:6e:db:df:14:ae:52:d2:87:5f:
                    cc:de:b5:8f:d2:2a:66:a1:84:10:50:64:32:3e:ee:
                    db:09:39:c0:c5:72:79:b6:a0:51:0c:d2:28:f2:f2:
                    92:48:b9:97:b3:ae:db:74:f4:45:95:47:7e:e4:8b:
                    fc:fb:d2:18:87:b7:62:c8:ee:bb:c6:8d:7b:e3:cd:
                    b9:88:c4:2c:ae:d9:36:c0:91:e4:44:8d:54:da:e8:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:98:80:02:29:C6:29:21:1A:20:4F:FF:82:DA:BA:2D:32:1F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2f1001-c374-36ef-833c-c941f198dc07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.0.0.0/8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:57:4f:d6:bb:bc:8f:d3:7d:a7:69:e0:85:ea:d2:16:e5:87:
         03:1c:ab:b4:45:c1:a9:e9:db:05:81:18:00:3f:64:80:72:92:
         10:34:a5:e3:58:0c:39:73:53:6a:8a:14:be:e3:21:df:eb:e2:
         e1:7a:04:ca:47:a4:53:43:dd:97:9c:a7:43:a5:32:4b:cc:ee:
         6a:f8:18:d9:7f:3f:c2:07:af:02:90:53:5b:30:a9:eb:d6:76:
         85:fa:8e:35:ef:57:cd:23:a1:da:f2:13:6c:82:a7:4a:65:f1:
         6d:ff:c4:d2:14:90:8e:64:d1:6a:49:ae:d0:11:25:be:f2:27:
         f8:92:d4:c7:b5:dd:78:2f:99:d2:73:32:3a:46:28:64:9f:29:
         83:77:0c:43:8a:51:42:38:15:ea:25:40:f5:88:ff:d6:db:07:
         cb:53:7c:06:ee:d2:0c:0a:fb:12:21:05:50:3b:43:62:a4:3c:
         7a:44:53:11:b3:bf:bc:f2:c9:de:31:9f:d8:4a:d8:90:f3:51:
         b3:ee:f2:6f:a7:bf:78:d1:dd:90:ad:c1:53:6c:7c:db:cf:55:
         f1:7f:92:45:3b:e6:f2:df:be:57:1c:ea:11:34:f2:50:40:3e:
         4f:6c:d4:2b:cb:2e:47:d4:b2:0e:ad:ae:a4:f2:93:fb:86:7a:
         ae:15:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:26 2025 by rpki-client