Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1f5cece-c8bd-3f58-9a59-d2fa6ec29fa8.roa
File:                     f1f5cece-c8bd-3f58-9a59-d2fa6ec29fa8.roa (raw, json)
Hash identifier:          yCZ8XJjX9qOjBze0Xk9R8TJ7gL9mq0Smk13purXpxlc=
Subject key identifier:   22:6D:77:45:5B:8D:7F:94:3E:83:97:A5:CC:72:83:FC:C3:41:BB:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4305517E5066F66D8DF92D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1f5cece-c8bd-3f58-9a59-d2fa6ec29fa8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.253.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:55:17:e5:06:6f:66:d8:df:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=e3ac98b9-f0f5-42fc-b280-28f8e028ee11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:5b:b1:d0:7c:d6:ea:25:45:fc:91:79:73:
                    d8:83:a1:5b:e7:a9:ad:5d:5f:35:89:e7:08:48:73:
                    0a:4f:72:9d:0b:52:57:48:62:2d:f2:7c:3d:cb:96:
                    2f:34:65:26:29:5d:60:d2:32:a1:31:a2:bf:be:35:
                    1b:a9:56:af:b5:52:ce:61:65:4f:c7:2e:3a:74:c4:
                    20:6e:86:74:e2:12:31:c6:67:a1:00:ac:fd:7f:22:
                    b1:2c:b3:8e:d6:73:96:9e:96:31:04:e3:58:f5:48:
                    bb:3c:ce:85:0a:36:ed:06:a9:72:eb:21:ce:ae:d5:
                    53:74:f4:6a:69:48:9b:f9:c2:fd:f8:79:58:6b:68:
                    3b:fd:a8:0e:e4:6a:d8:9b:9d:49:67:6c:45:c9:8d:
                    8b:d7:9e:36:ce:3c:21:3a:6a:d0:5b:31:56:48:dd:
                    d4:d0:3b:92:78:d6:49:85:d1:36:7f:44:5d:8f:01:
                    58:17:7f:be:df:b9:9e:f7:37:ba:4c:35:c9:9b:d5:
                    4e:e1:1f:2b:2d:de:2e:09:a1:d9:fb:0b:8a:19:26:
                    b7:bf:84:1d:68:c2:4d:2c:19:d3:64:b2:d5:67:e1:
                    24:ca:73:76:b5:19:10:2d:32:26:b4:90:fa:e3:f2:
                    d4:10:9a:24:65:24:51:74:ac:99:98:bd:c9:77:30:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:77:45:5B:8D:7F:94:3E:83:97:A5:CC:72:83:FC:C3:41:BB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1f5cece-c8bd-3f58-9a59-d2fa6ec29fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.253.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:bd:59:d7:21:96:c9:37:ef:dc:94:f3:c4:46:d8:9f:e8:
         47:33:5e:e4:05:b2:36:95:dc:56:8d:9a:99:4e:96:5a:69:ed:
         66:d2:60:17:c3:bd:75:68:82:0c:b4:9f:58:00:78:f5:33:91:
         09:ff:c7:08:54:79:f4:35:c4:69:fa:1f:61:f7:b9:09:41:62:
         b2:56:70:98:b5:ac:33:2c:3e:4d:fc:cf:b0:f8:9c:c8:d7:ad:
         8f:4e:c7:c9:1b:03:96:d8:99:ae:8e:fd:33:9c:7b:ee:14:04:
         ae:b0:6a:0a:c6:a8:6d:42:2d:3c:0f:90:37:fe:ca:18:f6:ff:
         e4:5f:a3:93:1e:fc:d0:6e:3e:09:27:09:9c:57:21:15:2b:56:
         9f:ed:86:c6:7f:56:02:b6:6b:cf:b2:17:cc:67:7d:37:ee:72:
         e7:4f:d6:d1:72:d4:50:7a:d4:b7:8a:a2:52:28:6b:84:77:f5:
         7b:ed:09:f8:5b:12:a0:ff:65:92:3a:d2:99:79:1e:ef:ee:a6:
         78:c1:9d:51:62:29:d4:fa:82:a7:aa:cb:2a:04:2e:72:12:71:
         af:b2:a7:b0:a1:d4:73:0c:84:21:bf:1d:c9:56:6c:f3:c5:69:
         f3:9c:b9:ad:75:aa:c2:dd:a5:e7:91:d6:16:e5:bc:c6:1d:88:
         e1:be:0c:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMFUX5QZvZtjfktAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZTNhYzk4YjktZjBmNS00MmZjLWIyODAtMjhmOGUwMjhlZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmhbsdB81uolRfyReXPYg6Fb56mtXV81iecI
SHMKT3KdC1JXSGIt8nw9y5YvNGUmKV1g0jKhMaK/vjUbqVavtVLOYWVPxy46dMQg
boZ04hIxxmehAKz9fyKxLLOO1nOWnpYxBONY9Ui7PM6FCjbtBqly6yHOrtVTdPRq
aUib+cL9+HlYa2g7/agO5GrYm51JZ2xFyY2L1542zjwhOmrQWzFWSN3U0DuSeNZJ
hdE2f0RdjwFYF3++37me9ze6TDXJm9VO4R8rLd4uCaHZ+wuKGSa3v4QdaMJNLBnT
ZLLVZ+EkynN2tRkQLTImtJD64/LUEJokZSRRdKyZmL3JdzDDvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJtd0VbjX+UPoOXpcxyg/zDQbsIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFmNWNlY2UtYzhiZC0z
ZjU4LTlhNTktZDJmYTZlYzI5ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKLvVnXIZbJN+/clPPERtif6EczXuQFsjaV3FaNmplOllpp7WbSYBfD
vXVoggy0n1gAePUzkQn/xwhUefQ1xGn6H2H3uQlBYrJWcJi1rDMsPk38z7D4nMjX
rY9Ox8kbA5bYma6O/TOce+4UBK6wagrGqG1CLTwPkDf+yhj2/+Rfo5Me/NBuPgkn
CZxXIRUrVp/thsZ/VgK2a8+yF8xnfTfucudP1tFy1FB61LeKolIoa4R39XvtCfhb
EqD/ZZI60pl5Hu/upnjBnVFiKdT6gqeqyyoELnISca+yp7Ch1HMMhCG/HclWbPPF
afOcua11qsLdpeeR1hblvMYdiOG+DFs=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:06:41 2025 by rpki-client