Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d5e61b-77d9-373d-b744-ef060c826983.roa
File:                     e6d5e61b-77d9-373d-b744-ef060c826983.roa (raw, json)
Hash identifier:          a0Nd+lkFgEOjn7WrE0bUijLk0nnCTQ6fvWowSMr5Kws=
Subject key identifier:   3D:1D:FF:62:58:3E:24:27:8B:4B:8D:DE:33:BB:71:A9:91:EE:46:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992946FD9228FEBA9F946AA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d5e61b-77d9-373d-b744-ef060c826983.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        71.201.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:6f:d9:22:8f:eb:a9:f9:46:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=ddc04ba5-1f97-42e8-bcef-a0c1f4f339f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:2a:a1:97:e9:08:1b:8f:26:a8:24:23:42:
                    44:bf:e1:c6:9c:ef:c1:1a:3b:39:d0:b2:f9:62:7b:
                    91:2c:2f:20:d7:ae:3c:6f:c9:77:6a:f7:f7:43:a3:
                    1c:46:54:c3:4d:6c:3c:4e:6a:dc:64:62:29:2a:9a:
                    9c:86:41:7c:05:3e:cc:75:bd:e2:e3:ad:f4:8a:d4:
                    d4:07:80:bb:75:4b:8b:e9:fb:7c:74:03:c4:c3:e4:
                    4e:c8:43:23:d6:32:db:8d:64:0a:f5:2f:7c:b5:3e:
                    c3:e7:e1:9d:90:8b:e7:11:4f:4c:2f:e6:1d:3b:07:
                    20:04:ee:de:45:5f:c1:7f:45:db:e5:00:5b:03:63:
                    5b:0f:2b:ba:76:f1:e3:2c:0f:8c:e7:78:2f:56:81:
                    71:3e:46:dd:ed:cd:e9:2b:48:5a:4d:a4:d6:4c:fd:
                    4d:59:a6:67:15:0c:57:76:3b:8d:d0:f3:57:f9:5a:
                    aa:9c:f8:97:dc:e0:67:ca:be:d4:9b:fe:c7:f2:62:
                    68:e6:28:a2:bf:7f:53:ed:33:2a:4c:50:28:51:73:
                    8d:eb:19:d2:aa:ea:8a:73:7b:31:94:59:28:c3:17:
                    66:36:91:b4:b2:7d:1c:ca:b3:04:a6:91:03:aa:87:
                    31:e0:fb:47:3b:39:3c:1f:5d:47:90:03:23:33:53:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1D:FF:62:58:3E:24:27:8B:4B:8D:DE:33:BB:71:A9:91:EE:46:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d5e61b-77d9-373d-b744-ef060c826983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:82:6b:9b:34:fb:53:d7:87:36:0c:1c:15:ee:eb:91:f0:ed:
         c7:8a:e1:e1:ba:b1:5e:3d:17:93:fc:81:57:a3:07:26:e6:cd:
         c2:41:2f:54:f2:3f:14:7d:9c:eb:e4:ae:0e:fa:09:91:5b:c4:
         e1:39:66:e2:fb:97:97:46:2a:ff:0d:3b:25:b1:9f:0d:16:0c:
         ed:e3:bb:a4:0c:9d:6c:f3:41:e5:d8:a0:12:88:8c:c6:e8:ee:
         a2:27:51:ef:51:1b:7b:f3:5d:88:2b:3c:87:9c:a5:e1:a3:33:
         b4:89:0b:0d:3f:bb:20:7f:68:6b:bd:4d:c5:37:28:8b:03:80:
         52:bd:b7:db:d3:97:43:58:2b:6e:58:db:47:ca:11:de:5c:75:
         e3:a2:99:e3:8b:80:87:39:40:1d:60:fc:7a:b5:5f:89:5a:a4:
         c7:f0:41:ab:96:25:8a:75:ec:3f:cd:30:58:1c:a0:07:fa:79:
         9b:50:01:62:ac:9d:22:02:fa:44:bc:92:9b:ea:e1:bf:d7:58:
         6b:18:4c:e8:8c:5d:45:6a:ca:41:aa:12:b3:6f:bd:c4:cf:49:
         28:4a:b2:31:fc:10:db:31:93:ec:72:f7:2e:2d:f9:7d:e7:d5:
         85:5c:65:37:ab:53:8f:a7:5d:5f:f0:03:eb:e3:2f:b8:fe:d7:
         f6:f8:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:30:18 2025 by rpki-client