Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60aa75a4-89f3-3586-9a0f-b04c40641787.roa
File:                     60aa75a4-89f3-3586-9a0f-b04c40641787.roa (raw, json)
Hash identifier:          +08IdE3yBuwuSErBapAFQh8EI9dVTI3KtOv36UA76fQ=
Subject key identifier:   BE:F9:04:9D:2E:82:02:63:0C:0A:39:36:37:86:99:23:39:78:9A:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221511A6B9E47BF03FC6480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60aa75a4-89f3-3586-9a0f-b04c40641787.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.59.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:51:1a:6b:9e:47:bf:03:fc:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=189f6141-62a2-4c82-8ffd-0dd29d68f6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:16:5c:06:ce:d0:a9:10:16:dc:c3:f0:d4:
                    d3:d8:7d:e3:bc:47:25:64:37:65:54:aa:d9:cb:e4:
                    13:33:da:f4:40:de:c4:31:47:03:16:2a:cb:5d:a2:
                    7b:cb:e1:04:7d:c5:e7:06:a9:08:50:d7:34:52:ed:
                    bb:bf:63:41:91:bf:22:ab:99:94:7c:7b:70:90:fc:
                    a1:9b:39:84:37:cd:1e:df:9b:e5:a0:10:d4:c2:c7:
                    3e:e8:e2:aa:7a:05:43:df:f7:cb:4a:a4:8f:c8:d5:
                    72:3f:e3:c3:de:4b:7e:8f:14:85:eb:04:1a:7a:b9:
                    5c:33:9a:3e:42:c4:42:49:44:a6:f6:c4:68:62:ef:
                    4d:f9:07:c8:dd:38:9f:07:13:63:39:e8:36:d4:e0:
                    3d:1b:33:50:5e:45:54:ff:36:94:9a:52:e4:a1:ff:
                    5c:8f:2c:31:b5:34:f3:82:a2:56:52:f9:5b:2a:1b:
                    ca:48:c4:de:0a:54:e9:a4:45:84:eb:0d:65:08:35:
                    65:90:0b:4f:af:b0:ce:e6:1b:97:55:1c:b2:f1:48:
                    53:df:a3:41:bd:db:cd:7b:70:f2:6d:69:dd:c4:8a:
                    1f:ac:6d:96:60:18:29:9a:7d:d3:05:12:3f:4b:24:
                    f8:35:a0:89:18:d7:36:c5:5c:32:be:c2:68:34:8e:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:04:9D:2E:82:02:63:0C:0A:39:36:37:86:99:23:39:78:9A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60aa75a4-89f3-3586-9a0f-b04c40641787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.59.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:6a:07:2f:5d:e9:dc:bc:fe:3c:36:80:8f:29:0d:72:3c:
         4e:2a:8d:08:2d:1f:5c:34:45:85:6d:76:db:c9:fe:22:a7:32:
         ab:ea:e0:bd:b9:17:4e:e3:ac:2a:58:1e:8e:0d:d6:85:08:7f:
         9b:05:9c:9f:c3:f8:dc:03:33:de:ad:86:a9:74:c1:bb:87:3e:
         c0:59:80:93:62:5a:58:0d:29:9a:81:1a:1d:6e:bc:d7:c4:64:
         f7:f4:98:16:34:88:85:a0:df:eb:a5:ea:57:4d:44:c2:59:71:
         99:2d:5d:b5:85:0d:49:89:d2:50:a8:bf:2b:64:9f:06:20:c8:
         bd:69:36:e7:50:57:52:3e:91:df:93:d4:66:14:30:73:98:05:
         16:a8:f9:f3:be:4d:04:2e:58:f2:8e:41:e4:90:b8:fd:86:81:
         c3:c6:5c:80:f9:4c:d5:6e:f0:77:e0:9b:1e:d5:c0:5d:a3:40:
         35:b8:1d:fd:89:66:ad:17:4a:c9:a3:53:1c:26:5a:eb:22:c4:
         ec:fe:f1:cb:4a:85:1e:e3:6e:f1:c9:0c:77:b7:09:10:29:ce:
         98:b9:1d:cc:cc:b6:3b:0b:da:af:8f:b0:fd:cb:7c:8b:70:b4:
         1f:82:ea:54:3b:e9:32:ab:91:63:1f:e2:74:93:89:33:87:f4:
         b1:5b:24:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIVEaa55HvwP8ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTg5ZjYxNDEtNjJhMi00YzgyLThmZmQtMGRkMjlkNjhmNmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42kWXAbO0KkQFtzD8NTT2H3jvEclZDdlVKrZ
y+QTM9r0QN7EMUcDFirLXaJ7y+EEfcXnBqkIUNc0Uu27v2NBkb8iq5mUfHtwkPyh
mzmEN80e35vloBDUwsc+6OKqegVD3/fLSqSPyNVyP+PD3kt+jxSF6wQaerlcM5o+
QsRCSUSm9sRoYu9N+QfI3TifBxNjOeg21OA9GzNQXkVU/zaUmlLkof9cjywxtTTz
gqJWUvlbKhvKSMTeClTppEWE6w1lCDVlkAtPr7DO5huXVRyy8UhT36NBvdvNe3Dy
bWndxIofrG2WYBgpmn3TBRI/SyT4NaCJGNc2xVwyvsJoNI6rgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL75BJ0uggJjDAo5NjeGmSM5eJryMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBhYTc1YTQtODlmMy0z
NTg2LTlhMGYtYjA0YzQwNjQxNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSTuYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7hagcvXencvP48NoCPKQ1yPE4qjQgtH1w0RYVtdtvJ/iKnMqvq4L25
F07jrCpYHo4N1oUIf5sFnJ/D+NwDM96thql0wbuHPsBZgJNiWlgNKZqBGh1uvNfE
ZPf0mBY0iIWg3+ul6ldNRMJZcZktXbWFDUmJ0lCovytknwYgyL1pNudQV1I+kd+T
1GYUMHOYBRao+fO+TQQuWPKOQeSQuP2GgcPGXID5TNVu8Hfgmx7VwF2jQDW4Hf2J
Zq0XSsmjUxwmWusixOz+8ctKhR7jbvHJDHe3CRApzpi5HczMtjsL2q+PsP3LfItw
tB+C6lQ76TKrkWMf4nSTiTOH9LFbJEs=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:17 2025 by rpki-client