Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/b73049ec-b32a-3f5b-85ea-efbbdf111195.roa
File:                     b73049ec-b32a-3f5b-85ea-efbbdf111195.roa (raw, json)
Hash identifier:          iHwN+yKUZUdf2Jo3vBB46Rzixmcr8CXa+C+Pbi88Q+8=
Subject key identifier:   73:5B:34:F7:E4:63:FC:58:B6:15:1F:B9:8A:E8:CF:1E:8C:BC:96:AF
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F43285849A354846F3277B094466CB22C
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/b73049ec-b32a-3f5b-85ea-efbbdf111195.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     36290
IP address blocks:        208.87.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:84:6f:32:77:b0:94:46:6c:b2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=fd5172e5-7763-462d-b1cf-a619e8d39e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:c7:27:49:2d:12:b8:5b:a9:4d:99:18:af:
                    39:7b:c0:4e:3f:bd:86:42:dc:69:25:11:5e:f4:b2:
                    f3:c1:a9:a6:07:6c:e2:eb:f1:55:aa:6f:fd:4e:e9:
                    e9:51:9c:c4:37:6b:a8:96:db:ae:49:4f:14:c8:42:
                    46:d8:f1:b1:ed:0b:4f:80:29:45:3a:0b:5c:a7:9c:
                    d2:7c:4f:00:fa:02:a3:a3:17:c3:a3:8d:63:cb:50:
                    b5:47:8a:a2:9f:03:09:be:ba:ae:af:ea:49:05:98:
                    ab:f0:e2:fb:85:d4:e9:07:01:0b:5b:b3:32:df:79:
                    49:4e:49:58:f0:72:f1:51:74:6e:a4:a2:cb:e6:aa:
                    72:51:e3:ba:e5:e9:49:ea:67:57:2a:64:9b:d8:90:
                    d0:5c:60:f8:d1:f8:4c:39:d6:b0:e5:f1:59:34:b4:
                    4e:55:1c:39:3b:b8:d0:52:6b:2e:4d:91:f6:9f:53:
                    93:46:66:2e:f7:d3:91:58:d5:b0:1e:db:51:2b:a5:
                    7c:39:91:80:43:90:cd:fe:f8:af:82:c7:5c:90:27:
                    6b:c9:6e:3f:08:65:89:f6:7d:0b:99:0c:4e:ee:6b:
                    4f:98:4a:6a:f3:b5:0a:75:99:e4:ed:82:76:ff:36:
                    08:0e:37:b7:1e:9f:2f:8c:3b:48:69:90:03:9f:88:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:34:F7:E4:63:FC:58:B6:15:1F:B9:8A:E8:CF:1E:8C:BC:96:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/b73049ec-b32a-3f5b-85ea-efbbdf111195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:40:98:84:c4:c8:ed:b1:d0:22:32:f3:87:b5:7f:be:65:3b:
         f6:99:bc:8d:88:5e:ed:38:24:e3:47:aa:61:77:29:40:ed:b1:
         8a:f0:b6:94:30:91:37:20:c0:1c:ba:00:c3:34:a4:c8:3d:cc:
         c0:c9:1d:28:5d:5d:d3:6b:64:ec:c0:e0:47:fc:ae:a3:e9:a2:
         4b:42:ba:e1:70:23:05:6f:2e:18:2a:25:31:48:8f:f3:76:8e:
         c0:0d:5f:5f:f7:f4:01:e3:47:0e:ff:18:dd:b2:ca:6e:66:74:
         2a:c6:e3:e2:36:e5:53:f7:6f:02:80:31:1b:fa:ab:86:5b:07:
         60:eb:1b:a4:5f:2b:39:c2:f5:a3:63:d9:c3:83:fa:b6:17:57:
         91:f9:79:47:4e:22:74:1c:12:31:25:c3:03:d9:84:b6:a0:cd:
         94:0a:2e:64:79:3f:00:43:75:6a:26:6d:24:47:d9:9f:c0:8f:
         60:7a:96:88:00:30:48:e2:10:52:ae:09:fe:b1:23:54:be:1c:
         3f:da:b0:a1:9d:f0:b9:02:27:4d:0c:5c:24:07:73:40:b1:47:
         a0:2f:9a:c3:bb:79:62:d1:5e:69:ca:e4:42:00:64:98:9f:3c:
         67:4f:51:ed:5a:7e:82:91:b8:6e:d5:12:ed:08:cc:cf:ff:c7:
         2b:a2:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:02 2025 by rpki-client