Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014fbb72-cc2a-38d7-80f9-52376d4befe4.roa
File:                     014fbb72-cc2a-38d7-80f9-52376d4befe4.roa (raw, json)
Hash identifier:          9tjusI4NCTRV8rhWi6DJbzSKMW28YquWOBSzHjVwuBs=
Subject key identifier:   87:C5:7D:1E:F5:56:06:70:A5:DB:05:A8:DA:DD:F6:AB:00:6E:C4:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319938154200473B29F500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014fbb72-cc2a-38d7-80f9-52376d4befe4.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.17.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:99:38:15:42:00:47:3b:29:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ab7b9596-1e43-4110-a1c0-4ba3530eba05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:27:80:46:19:e1:3f:92:7b:ea:ee:1c:7c:
                    92:5c:91:7a:e7:11:26:72:0a:ca:18:de:df:73:c6:
                    d9:e8:59:9e:21:f4:3a:91:28:ee:00:36:b5:83:d8:
                    b8:f6:a4:7c:f0:26:e3:a3:72:56:64:ad:70:40:90:
                    6d:58:78:56:48:77:35:52:36:3f:37:54:7f:72:7e:
                    d1:87:87:ed:b7:d5:6b:3b:46:0c:0e:95:48:dc:14:
                    5d:aa:67:3a:06:0b:4c:d0:63:a8:6a:89:52:5c:e6:
                    17:b3:01:45:6d:32:ca:22:d6:a9:d3:65:38:01:c3:
                    ef:72:c0:d8:bf:e9:f5:fc:0e:91:0f:88:f6:a3:f2:
                    c4:c6:3d:ae:da:bd:8c:b7:9f:ac:e4:1f:56:9b:d3:
                    45:2c:12:39:10:21:b6:f3:74:0c:48:36:37:49:58:
                    6e:d8:81:74:34:1a:b1:6a:69:71:c4:59:c7:10:d1:
                    42:3d:4d:29:4a:67:3d:b1:e7:2f:9c:a3:ae:ae:36:
                    b7:42:ef:05:2f:9e:8c:68:33:b7:b6:0a:a3:65:36:
                    77:c6:26:f7:07:0c:52:35:3d:2d:6f:ca:5e:b7:da:
                    8d:07:4a:f6:61:cb:10:ee:01:16:98:3e:ad:6a:49:
                    fc:bb:88:da:af:47:45:7a:34:6e:cf:d1:01:5e:5a:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:7D:1E:F5:56:06:70:A5:DB:05:A8:DA:DD:F6:AB:00:6E:C4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014fbb72-cc2a-38d7-80f9-52376d4befe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:d9:be:41:e0:a8:cd:92:b4:16:fa:91:4c:37:4e:d9:8d:
         62:a2:e1:22:f4:9d:14:17:28:e6:f0:ff:a9:db:2e:fe:6a:d4:
         73:d4:8e:82:c8:b6:ea:91:8d:8c:81:a3:42:11:8f:cc:69:66:
         17:ab:ce:0d:91:7a:38:04:07:32:c1:4c:e2:88:dc:21:b3:e5:
         39:95:45:ee:c7:f7:25:6a:ba:b1:91:9d:89:2e:a8:e2:2d:b2:
         56:06:20:85:8f:b4:bf:e2:98:90:3a:da:de:f5:2c:d0:ba:1e:
         50:a4:45:88:5b:d6:e5:1f:88:73:52:68:9e:8f:90:3c:e5:8e:
         87:0f:b9:01:98:be:ad:81:48:fe:da:13:b0:d3:32:f3:29:00:
         4e:bd:7d:b6:46:3e:08:cb:cc:3d:dd:2a:eb:b8:38:9f:54:48:
         11:0e:a1:5f:60:98:0a:67:58:ed:6a:12:61:2b:d8:74:35:01:
         27:c5:7d:34:a1:35:78:6c:d2:b8:66:49:72:77:bd:83:65:68:
         29:f5:b9:d1:6a:01:f6:fb:de:a3:78:b8:3f:9b:70:49:15:45:
         8e:9d:5b:4c:61:cf:51:cd:44:38:23:5a:a7:6c:08:df:a6:6a:
         27:c8:7d:c0:2b:1d:4a:c6:b9:39:2f:ea:62:39:74:85:ec:c6:
         3b:27:07:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:10:22 2025 by rpki-client