Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa
File:                     8e2a0707-bea4-3470-ba61-c9b415f04d23.roa (raw, json)
Hash identifier:          /nyzLHWcfhdgBxBsdMkdJrTT/5VlOftkpj1Lo+RvPoI=
Subject key identifier:   A6:76:6E:7C:FD:EF:9B:2D:AB:96:74:F0:91:40:5F:01:01:5D:1E:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4325694ED6DD6FDE64AC100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.55.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:56:94:ed:6d:d6:fd:e6:4a:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=733f9782-f48f-48d9-a110-fdf2a20ae1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:5c:0d:4d:8b:e5:57:a7:fe:ca:52:2c:13:
                    c5:89:c3:a9:16:e2:c7:e5:17:ce:76:f9:81:e7:54:
                    7e:8b:ee:4f:e0:14:e8:fe:f3:b2:91:df:c5:1e:20:
                    b2:6f:a5:0e:96:fa:3e:2b:d3:c2:65:ae:2b:36:c5:
                    d5:86:4e:cf:0d:46:16:a8:c1:d7:7c:19:ac:5c:97:
                    d4:63:8e:66:85:33:b9:9e:f2:ed:4c:45:27:a1:62:
                    75:b4:63:38:14:59:a5:25:8b:ff:73:8a:11:d0:49:
                    3b:76:ee:c8:a2:7f:62:92:70:ec:41:15:b3:17:fb:
                    57:de:a8:a9:5a:5b:0b:9d:31:c7:13:00:2c:1c:23:
                    db:1a:63:b6:02:d3:dd:4b:78:16:ad:f2:0c:78:60:
                    98:23:6a:76:09:c3:37:10:ac:01:46:d5:59:33:00:
                    95:bd:2f:5d:6f:f3:87:b0:71:6c:b2:04:55:d9:99:
                    b1:fa:58:25:db:91:a5:63:2a:3d:32:d8:db:6f:4c:
                    bb:5b:08:bf:ac:5a:50:57:da:9c:73:36:ad:cb:29:
                    b0:5a:53:3e:e3:a3:4d:8f:ee:76:16:45:11:1f:a2:
                    21:e0:25:89:e7:2f:8a:59:78:c2:c9:c5:d9:6a:13:
                    3b:c4:00:f7:60:40:d2:af:39:45:48:c6:d4:18:ef:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:76:6E:7C:FD:EF:9B:2D:AB:96:74:F0:91:40:5F:01:01:5D:1E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:43:86:b1:31:cb:29:28:8c:6d:59:75:dd:3e:9a:6d:44:98:
         3c:fd:88:f1:cd:8e:a8:21:a6:8c:b4:e7:38:e1:d2:fd:3f:77:
         1d:df:7d:fa:63:f3:39:5c:1d:c3:35:bf:d4:49:e4:75:2a:df:
         2c:bb:2f:64:12:f0:0d:f3:d9:19:4a:b9:bd:25:e7:25:2d:d4:
         d7:9d:a5:5f:3a:02:f4:42:6f:c8:22:1b:a0:fd:6b:bf:26:5d:
         b2:40:e6:6c:9e:81:79:22:68:03:51:1f:d7:44:ed:e7:92:6b:
         b7:22:d0:fc:9f:fe:96:3e:ae:58:70:65:ab:7e:a8:76:ac:47:
         86:cc:39:90:4e:bd:b4:84:82:4e:1c:e0:65:25:f6:35:44:90:
         de:18:a7:5a:7c:39:07:3c:15:0d:7d:fc:2e:fa:2b:00:65:0c:
         dc:6c:0a:00:92:a3:dc:4b:8b:85:62:5d:e9:6a:98:1b:e5:66:
         17:4d:48:cf:ab:fb:23:29:7b:be:38:62:f3:59:2d:9f:30:3f:
         bb:2d:78:d0:ab:87:13:14:e5:ae:10:cd:9b:e4:f9:8b:30:54:
         d3:c8:7e:90:97:07:58:2f:3e:d1:cf:a3:ec:3e:cc:8a:87:49:
         b6:4a:91:ee:39:5b:70:af:b1:a0:63:46:e9:06:1d:cf:46:54:
         d8:3a:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:45:31 2025 by rpki-client