Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74d54660-3f64-354a-87a5-cbdca839eda9.roa
File:                     74d54660-3f64-354a-87a5-cbdca839eda9.roa (raw, json)
Hash identifier:          tnfC+Itm++iRgGPYUxFumjA/PwO3adQ1UE/FqVdP4VU=
Subject key identifier:   B5:CD:A0:C2:21:1F:5B:10:E4:00:E5:5E:B6:9E:3D:59:C6:DB:13:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE1141F6ABCD506F3D9300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74d54660-3f64-354a-87a5-cbdca839eda9.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.68.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:11:41:f6:ab:cd:50:6f:3d:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e9bb544d-6d6b-4daf-a6c9-29ac377166b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:db:b8:55:93:a3:2c:ed:92:1b:e5:2f:c0:
                    4b:91:60:56:96:b7:19:e0:c9:ae:2c:a8:b5:fb:fa:
                    46:23:3f:16:e8:49:83:01:65:c3:31:13:7d:80:a8:
                    69:b4:73:ab:b8:9c:aa:8d:e6:68:f9:61:8b:7a:75:
                    1c:6d:60:15:da:3d:4b:5f:60:84:c1:2d:b7:f2:c9:
                    52:95:63:78:2f:76:ce:c6:f5:60:d6:23:bf:db:db:
                    c7:84:56:90:18:4a:59:55:ea:54:e5:66:d8:47:9a:
                    81:26:2e:8c:83:99:a2:a3:40:03:37:a0:c5:e2:0b:
                    50:f2:7f:05:5c:57:93:0d:ae:23:f8:c6:5d:9a:81:
                    e7:64:ee:f9:87:f3:16:e3:32:4f:aa:1c:83:72:4a:
                    4a:14:55:b4:c4:bf:f1:a8:39:f8:3a:08:e3:d6:b1:
                    a7:d9:7c:59:b2:8e:22:6f:1e:fc:ed:fa:9c:71:9e:
                    ee:a7:36:f1:ba:cd:3a:22:a1:4c:7b:ef:3c:69:fd:
                    ec:9d:93:97:10:cc:f7:fc:b4:4e:be:b6:45:3a:bc:
                    ad:fd:88:15:ce:1a:e5:0f:14:2f:26:52:cf:29:a9:
                    ba:43:89:7b:e3:0a:fa:3a:bb:96:0a:3a:78:a6:e9:
                    19:e0:d9:fb:f5:24:5a:91:39:ba:3f:36:62:ce:6f:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CD:A0:C2:21:1F:5B:10:E4:00:E5:5E:B6:9E:3D:59:C6:DB:13:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74d54660-3f64-354a-87a5-cbdca839eda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:63:6b:cc:ac:7e:26:b1:75:ff:86:82:ca:19:fd:46:67:
         d9:14:4d:f6:5b:e4:ef:2c:07:8c:c9:7a:a7:48:c4:df:22:3d:
         22:c2:8f:f5:c8:5e:8d:77:02:ee:db:80:59:cf:22:35:33:46:
         3c:e5:d6:4b:15:42:19:df:28:60:7b:0b:26:38:46:51:d0:1c:
         6a:d2:ea:5f:df:1a:dd:9f:e6:b3:66:f9:b6:c7:14:f9:24:ee:
         57:4a:2f:ca:bd:f5:17:ee:b7:5e:db:ac:74:10:2f:6d:ac:60:
         c8:6f:21:f1:1e:4a:58:b8:89:bc:96:97:06:5c:b0:23:cc:cc:
         e4:58:9c:74:6f:58:a2:a7:69:d5:00:ef:26:8d:37:0b:cb:e7:
         a3:3e:f4:8f:8a:aa:1e:8b:05:4b:d8:9d:3b:92:13:1d:db:10:
         7d:32:60:de:7d:99:97:41:6b:7f:76:7b:45:b7:5e:dd:c3:29:
         bc:9e:3c:a2:73:a2:f1:a8:5a:17:be:40:f1:02:9a:3f:77:b5:
         c3:c9:47:1d:d9:be:c8:f3:27:6a:e5:f2:e6:78:25:7b:d6:27:
         47:30:3e:d2:6a:b4:ce:75:78:4c:7a:ee:6a:72:02:1e:43:4a:
         42:54:cc:5f:01:17:4c:1f:a1:7a:c6:9b:d0:b5:6e:bb:ff:b5:
         a2:5b:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:30 2025 by rpki-client