Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab972f59-1f85-3417-9e86-5a1bc0a31e97.roa
File:                     ab972f59-1f85-3417-9e86-5a1bc0a31e97.roa (raw, json)
Hash identifier:          GQXNee3h0VZaP4fTG/eRYnKM1wOfyhYAxj9lhga9Vtw=
Subject key identifier:   57:EB:1D:24:1D:3A:47:70:2F:9F:0C:CF:BA:DD:69:97:6C:D1:CB:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE00EB9FF58EE0C759C0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab972f59-1f85-3417-9e86-5a1bc0a31e97.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.253.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:00:eb:9f:f5:8e:e0:c7:59:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=77adbcaa-0888-4d9e-8afd-47ce6a9c739e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:60:4d:37:1d:37:ad:c1:b8:ad:07:3d:33:
                    57:af:b9:c0:79:6a:ad:33:95:33:86:16:23:e5:63:
                    82:61:6f:ba:6d:5f:a8:73:9b:d6:0b:97:48:40:6a:
                    0f:f5:76:93:61:3d:02:16:47:06:9f:6a:6b:ed:f6:
                    10:8d:be:ce:54:47:0a:ad:ef:8a:63:6f:fa:ee:6c:
                    7f:f6:a6:58:65:9b:4e:8c:f1:13:75:63:8f:7b:24:
                    b7:d2:1b:26:27:1d:17:97:8e:71:0c:72:e5:c8:6b:
                    40:60:ca:95:5a:24:df:d2:71:cf:21:26:d7:34:d5:
                    48:4a:0f:64:c0:14:81:29:fa:48:77:09:74:e7:df:
                    3b:e1:92:dc:fa:d2:52:0f:fa:74:48:c5:81:66:ca:
                    27:71:88:11:e7:bd:fc:69:6e:06:7b:4c:8a:dc:3f:
                    68:06:46:13:b0:f2:6e:2a:eb:69:bd:e4:ea:42:6b:
                    b9:20:c2:16:89:d0:df:93:90:29:f6:bf:46:76:65:
                    0f:73:20:9c:23:0f:09:b3:26:8a:e9:5f:25:a7:87:
                    8a:15:a0:9e:de:cd:ca:78:9e:4f:e0:76:0a:49:1e:
                    e8:31:8a:79:55:d8:d0:31:43:f0:f1:fa:49:c1:b8:
                    38:1c:bf:a3:79:ac:36:27:ea:1d:de:28:8c:a9:33:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EB:1D:24:1D:3A:47:70:2F:9F:0C:CF:BA:DD:69:97:6C:D1:CB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab972f59-1f85-3417-9e86-5a1bc0a31e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.253.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:08:f9:23:16:d5:0f:ee:8e:72:ab:51:0d:2d:7e:25:9e:
         a3:d7:3a:f7:4e:f6:ab:4d:92:64:0d:4c:08:4f:c1:1f:51:4e:
         e0:4a:fa:63:88:ed:02:f9:bc:00:d9:ea:5b:66:85:e7:08:47:
         b7:59:bf:e9:95:76:cd:c9:ad:6d:c5:75:ce:00:12:d2:9a:ed:
         3b:ee:7e:b9:7b:d5:b2:bb:29:3d:6a:d5:40:f8:4c:01:e7:a4:
         99:8e:e9:22:7a:2d:be:94:f9:30:e2:cc:05:d5:46:38:51:46:
         a0:52:53:00:4a:ae:8c:ec:ce:17:65:84:b1:71:81:8c:a9:3f:
         71:78:cb:a3:96:86:ec:45:da:6b:b6:0e:93:b7:1b:bd:5f:ae:
         6b:dc:d3:1e:8f:5a:c5:b1:bf:b7:0d:63:fd:f9:63:2d:1c:ef:
         72:36:e3:4f:b3:40:e7:e1:ff:1e:f6:f9:17:71:c0:f3:33:f9:
         2d:01:ad:27:27:9e:24:9c:80:60:93:96:6c:b1:cf:7c:e5:c4:
         63:fc:9f:d7:ef:bf:ae:c3:8f:6a:1f:80:23:ba:34:81:79:52:
         bf:bd:8e:03:d1:13:5c:e0:a0:70:e5:6a:cf:38:51:b2:8a:18:
         2f:65:b2:67:fd:c7:cb:4c:e4:e3:69:09:cc:0d:f1:b4:ca:d7:
         02:cb:fe:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07gDrn/WO4MdZwMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzdhZGJjYWEtMDg4OC00ZDllLThhZmQtNDdjZTZhOWM3MzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoklgTTcdN63BuK0HPTNXr7nAeWqtM5UzhhYj
5WOCYW+6bV+oc5vWC5dIQGoP9XaTYT0CFkcGn2pr7fYQjb7OVEcKre+KY2/67mx/
9qZYZZtOjPETdWOPeyS30hsmJx0Xl45xDHLlyGtAYMqVWiTf0nHPISbXNNVISg9k
wBSBKfpIdwl059874ZLc+tJSD/p0SMWBZsoncYgR5738aW4Ge0yK3D9oBkYTsPJu
KutpveTqQmu5IMIWidDfk5Ap9r9GdmUPcyCcIw8JsyaK6V8lp4eKFaCe3s3KeJ5P
4HYKSR7oMYp5VdjQMUPw8fpJwbg4HL+jeaw2J+od3iiMqTMkMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfrHSQdOkdwL58Mz7rdaZds0cv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWI5NzJmNTktMWY4NS0z
NDE3LTllODYtNWExYmMwYTMxZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSf1MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQtCPkjFtUP7o5yq1ENLX4lnqPXOvdO9qtNkmQNTAhPwR9RTuBK+mOI
7QL5vADZ6ltmhecIR7dZv+mVds3JrW3Fdc4AEtKa7Tvufrl71bK7KT1q1UD4TAHn
pJmO6SJ6Lb6U+TDizAXVRjhRRqBSUwBKrozszhdlhLFxgYypP3F4y6OWhuxF2mu2
DpO3G71frmvc0x6PWsWxv7cNY/35Yy0c73I240+zQOfh/x72+RdxwPMz+S0BrScn
niScgGCTlmyxz3zlxGP8n9fvv67Dj2ofgCO6NIF5Ur+9jgPRE1zgoHDlas84UbKK
GC9lsmf9x8tM5ONpCcwN8bTK1wLL/v8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:12 2025 by rpki-client