Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0ea95f-d788-3336-a61c-f9151c462d7d.roa
File:                     ed0ea95f-d788-3336-a61c-f9151c462d7d.roa (raw, json)
Hash identifier:          fxUj+mNBIACxBR2R1XfecAOM+CS6WftJ0FF1ayP1XuU=
Subject key identifier:   5D:9A:9A:BF:75:AC:0D:80:39:64:72:3F:AB:1E:1C:25:38:66:4D:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929472B2DA2B957398479480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0ea95f-d788-3336-a61c-f9151c462d7d.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        73.111.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:72:b2:da:2b:95:73:98:47:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=d155de44-1e55-42a9-9fba-d44b4584bcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:a8:6b:75:6b:8e:bc:cd:e9:9d:6d:41:41:
                    70:83:55:d0:b8:07:89:25:c8:b1:b6:ed:32:2b:23:
                    d4:b3:d0:85:18:30:25:94:9f:95:37:a5:a9:25:f3:
                    f5:8a:aa:4d:f4:87:4f:90:0a:c4:e4:42:6b:c5:89:
                    68:5e:40:c0:7f:f9:c1:12:86:84:6c:dc:18:f1:e7:
                    a9:b5:b4:7f:f9:be:a0:a3:4d:8b:cd:66:76:07:a1:
                    0d:ad:af:3e:8f:74:36:f1:23:87:97:4b:1d:84:01:
                    69:e2:45:d7:0a:d8:01:06:2a:9c:7d:91:bd:b8:54:
                    c3:8b:46:ba:1c:dc:73:d9:b2:be:b7:eb:c3:45:7a:
                    cc:ce:a4:9a:c1:4f:c4:58:bf:dd:ca:0d:75:04:e3:
                    22:ca:b5:1c:af:ee:6a:9a:02:90:72:4e:3d:b5:a6:
                    c0:4a:68:ba:2c:9c:6d:3c:4e:5d:35:c8:a2:1d:d5:
                    32:58:cb:17:7b:8a:48:d1:85:ab:b3:a6:b4:fb:bf:
                    f1:d0:b4:b7:97:12:ba:5c:96:32:7a:43:b9:a2:8b:
                    b3:dc:06:36:07:b2:99:cd:5d:5c:6c:91:e1:94:7a:
                    db:7d:d6:8b:49:84:ae:68:2f:22:2d:71:f8:f7:fe:
                    d2:87:b4:9a:b4:03:ec:d9:79:d1:7e:b8:a8:17:47:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:9A:BF:75:AC:0D:80:39:64:72:3F:AB:1E:1C:25:38:66:4D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0ea95f-d788-3336-a61c-f9151c462d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:30:6b:64:ec:99:78:15:de:57:6c:ae:66:3a:31:40:4f:c7:
         c3:aa:ea:c0:2a:8c:c6:9c:0c:61:ec:5f:d9:2a:48:96:05:9e:
         9b:f0:b0:32:3b:56:3b:3b:ee:8e:e0:7d:ac:f6:04:9f:c8:9c:
         c7:2a:3a:ab:d7:7c:cf:13:c6:09:27:38:ea:06:70:f6:3a:c2:
         c8:c6:e8:0f:48:fd:d9:50:1a:df:8f:6b:ad:5d:cd:71:e5:d1:
         67:44:5b:1c:e0:50:0e:9f:41:f6:ec:2a:35:e6:fe:84:dd:ee:
         d4:96:19:6d:1f:5f:9f:3f:f3:40:59:74:8b:03:a2:09:03:13:
         e1:e4:c0:ec:65:d2:d7:79:96:17:ef:15:28:a0:26:a8:74:83:
         38:29:2c:f6:a1:71:0f:a6:50:80:2e:86:44:57:d3:3c:89:09:
         d4:ee:a8:93:fe:69:b9:61:87:30:6c:9d:0e:45:07:21:31:7e:
         b2:14:2b:86:6b:d5:0a:cf:a0:85:66:bb:f0:2f:40:b1:5b:c0:
         49:88:85:7b:7c:15:a8:b8:75:0b:3a:65:cd:58:04:6a:3f:77:
         f6:d7:08:3c:aa:27:ea:71:67:a5:05:44:54:cb:b6:a1:0b:6c:
         a2:8e:a5:75:50:ec:84:d5:b7:91:7b:b6:c8:b6:14:6a:16:b4:
         bb:89:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:55 2025 by rpki-client