Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a58d6-3c58-350e-b4bf-6db7a35459d4.roa
File:                     667a58d6-3c58-350e-b4bf-6db7a35459d4.roa (raw, json)
Hash identifier:          8eWiqqTUE5/7UGuErUuYHOIvMkSraJTNbhzhGFXhpPE=
Subject key identifier:   0B:9A:16:6A:11:5B:C9:81:61:9C:53:84:B3:B0:27:13:80:14:6B:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC35CC8B00F5DF1BE1BB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a58d6-3c58-350e-b4bf-6db7a35459d4.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.219.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:35:cc:8b:00:f5:df:1b:e1:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=15712edb-aed2-435c-8e9a-01c12f6ee421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:68:f5:8b:0b:e3:00:c9:17:c9:22:d7:3e:
                    76:b4:12:a6:05:bb:be:52:da:84:e3:84:f7:b0:e9:
                    19:55:c6:2a:34:39:81:a5:d5:ba:b7:65:51:ed:16:
                    c0:7e:d6:d8:92:0c:af:40:e0:c1:9e:7e:06:52:9c:
                    af:f8:f6:d8:86:de:c6:a2:c7:6e:63:c2:89:38:7c:
                    55:a9:f9:6d:d7:72:cc:28:3c:1d:c6:8f:a9:87:a5:
                    06:66:23:d9:85:53:e4:17:f8:5a:e4:89:9c:c7:9f:
                    f9:6e:39:21:38:68:9d:bf:55:70:99:6b:68:2f:db:
                    0a:ce:0e:72:84:d8:9d:8c:68:43:d3:93:88:b2:20:
                    1c:d3:d0:50:64:bb:a3:c5:87:c3:1d:87:1f:a4:17:
                    52:a9:af:be:4c:66:7f:f1:a5:b9:99:87:5a:be:36:
                    74:18:a3:b0:9a:24:a8:bf:67:35:84:1a:1f:00:ff:
                    88:71:43:a2:f2:f9:9f:74:23:ae:72:a7:3b:43:ef:
                    8b:14:f9:27:6b:e6:70:27:de:66:c6:1e:67:cf:bf:
                    e6:61:fe:9a:f7:33:ff:b7:a0:9b:05:1f:18:f0:c6:
                    5c:8a:af:07:85:30:1b:7f:0a:72:98:57:63:d3:0f:
                    7e:21:29:de:e9:b1:e4:4e:3d:84:2b:be:29:6c:95:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:16:6A:11:5B:C9:81:61:9C:53:84:B3:B0:27:13:80:14:6B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667a58d6-3c58-350e-b4bf-6db7a35459d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:8c:c4:fc:d6:b1:ca:bd:48:14:95:fd:9b:06:d9:e2:f4:5f:
         44:fb:8a:bc:dc:96:da:41:5a:5a:17:d9:f0:50:01:58:59:76:
         89:45:ad:7b:4d:be:87:7a:3c:41:dd:3d:c0:24:8d:bc:f6:59:
         36:5e:55:63:1f:ea:d3:24:a5:89:9b:e8:c7:ca:ee:a2:d5:33:
         7a:02:04:cd:eb:2e:0a:3d:64:86:ef:37:84:2d:a1:9c:b6:87:
         ad:13:09:60:06:b0:d5:76:b7:20:5b:fe:24:18:08:db:19:a1:
         10:9e:d3:0d:9f:3b:be:d1:05:51:15:2f:35:21:4b:9c:10:09:
         1c:5c:a2:ff:54:b8:31:0c:0a:29:2b:4e:5a:85:ec:3c:f2:28:
         31:5c:69:35:3f:79:6c:02:bb:b2:3e:01:57:9d:93:91:12:ab:
         b2:74:2e:87:1d:1e:63:90:68:ad:ef:37:a6:6a:d8:73:dc:24:
         48:c6:c2:17:7c:42:55:a5:9b:a8:34:46:72:99:9d:af:60:d9:
         9a:f1:22:a1:28:8b:8a:91:9d:b8:71:bf:57:3b:fc:51:da:43:
         f2:70:3c:de:28:81:7e:df:0b:1a:f4:7e:34:ff:87:f6:a1:ef:
         7f:c3:f1:c5:c2:ad:25:64:fe:b9:52:7a:ac:fe:7f:36:18:f1:
         f2:9a:5c:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07DXMiwD13xvhu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MTU3MTJlZGItYWVkMi00MzVjLThlOWEtMDFjMTJmNmVlNDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDFo9YsL4wDJF8ki1z52tBKmBbu+UtqE44T3
sOkZVcYqNDmBpdW6t2VR7RbAftbYkgyvQODBnn4GUpyv+PbYht7GosduY8KJOHxV
qflt13LMKDwdxo+ph6UGZiPZhVPkF/ha5Imcx5/5bjkhOGidv1VwmWtoL9sKzg5y
hNidjGhD05OIsiAc09BQZLujxYfDHYcfpBdSqa++TGZ/8aW5mYdavjZ0GKOwmiSo
v2c1hBofAP+IcUOi8vmfdCOucqc7Q++LFPkna+ZwJ95mxh5nz7/mYf6a9zP/t6Cb
BR8Y8MZciq8HhTAbfwpymFdj0w9+ISne6bHkTj2EK74pbJWTpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuaFmoRW8mBYZxThLOwJxOAFGuNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjY3YTU4ZDYtM2M1OC0z
NTBlLWI0YmYtNmRiN2EzNTQ1OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdsSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCMxPzWscq9SBSV/ZsG2eL0X0T7irzcltpBWloX2fBQAVhZdolFrXtN
vod6PEHdPcAkjbz2WTZeVWMf6tMkpYmb6MfK7qLVM3oCBM3rLgo9ZIbvN4QtoZy2
h60TCWAGsNV2tyBb/iQYCNsZoRCe0w2fO77RBVEVLzUhS5wQCRxcov9UuDEMCikr
TlqF7DzyKDFcaTU/eWwCu7I+AVedk5ESq7J0LocdHmOQaK3vN6Zq2HPcJEjGwhd8
QlWlm6g0RnKZna9g2ZrxIqEoi4qRnbhxv1c7/FHaQ/JwPN4ogX7fCxr0fjT/h/ah
73/D8cXCrSVk/rlSeqz+fzYY8fKaXGA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:49 2025 by rpki-client