Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057def61-35f3-31c0-af4d-b02560500f5b.roa
File:                     057def61-35f3-31c0-af4d-b02560500f5b.roa (raw, json)
Hash identifier:          mZQDjClHLnXhRzOgUIKPwQis1ad53lSZvTlSZ1K9API=
Subject key identifier:   5F:56:F3:9D:1B:BD:75:09:D8:E0:29:4D:17:FD:02:CE:F9:34:BB:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8407FC9BDC03324520B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057def61-35f3-31c0-af4d-b02560500f5b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        73.67.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:40:7f:c9:bd:c0:33:24:52:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=cbd980fa-4bd0-4060-96d7-1c9957fb72e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:d2:79:d6:c5:7b:c6:08:46:60:56:02:d5:
                    41:52:b9:e1:c7:b1:19:3c:e0:6a:01:69:6a:96:3f:
                    94:f8:86:a6:35:c1:82:f0:8d:fe:b9:ee:83:12:78:
                    30:97:b3:c3:24:8f:f0:9e:4c:4b:2a:fe:d0:2a:c7:
                    d5:d7:35:5d:d9:49:68:6d:3b:8f:60:2a:65:6e:31:
                    59:67:83:53:c0:ca:79:2c:b6:4f:0e:07:e0:75:84:
                    5d:4a:b9:87:d6:6e:3e:79:51:82:1c:7f:42:ee:2b:
                    ca:f6:c7:cd:66:e0:bc:5b:09:80:10:a3:2c:0b:ab:
                    fd:3b:84:ec:bd:17:d6:5e:3c:11:7a:88:54:72:ad:
                    5d:8f:6b:b8:9b:01:14:f5:da:53:b4:6a:0d:bf:30:
                    b2:09:30:a8:3e:a6:f2:f4:40:96:4b:48:45:32:3f:
                    00:06:9a:12:15:04:93:95:32:2c:cf:c9:96:11:f2:
                    e0:04:d5:f7:56:a0:d3:b6:bb:aa:71:ab:ee:68:62:
                    92:d4:bb:a1:2f:75:e3:f0:e7:8f:78:54:18:2f:72:
                    98:75:1d:c7:79:b8:0d:29:c3:73:01:6e:53:42:32:
                    36:0f:ea:27:09:90:cd:9a:f0:ad:7b:40:8b:c8:c8:
                    c0:8e:35:a4:d6:4a:61:58:06:72:75:8d:8e:75:94:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:56:F3:9D:1B:BD:75:09:D8:E0:29:4D:17:FD:02:CE:F9:34:BB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057def61-35f3-31c0-af4d-b02560500f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:af:d3:fd:58:cc:15:1d:06:64:74:74:0d:35:f3:ce:99:
         f6:74:8e:14:44:cc:1c:23:4f:23:a0:20:89:4a:ea:17:ed:37:
         cd:3b:7e:d7:9f:81:cb:39:8d:73:2f:79:c1:43:fe:da:ba:f3:
         fe:09:e4:65:35:f5:17:37:b2:ff:ca:07:21:d1:5f:95:41:ea:
         77:00:64:3b:37:8b:f7:ef:f5:ba:a5:5d:4a:da:ad:17:7a:e4:
         d7:40:e0:fb:5b:b8:c0:38:50:76:75:90:3f:a2:f9:b8:d1:73:
         05:60:7f:f0:e9:b3:c7:0e:fc:73:85:79:8c:1d:af:a8:6b:f8:
         5b:52:3b:5e:e5:dc:29:21:91:67:60:48:4d:77:cf:10:85:11:
         f9:5e:f9:38:4e:62:15:a1:dc:68:0d:64:4e:bc:52:e5:06:f1:
         b6:93:77:65:47:75:cf:a6:fc:71:74:2d:f2:a9:68:38:4f:4e:
         9a:c0:f0:5b:d6:97:ad:18:98:39:41:9a:fd:29:fa:ad:64:bd:
         2f:b9:89:46:93:e0:1f:e8:f3:fa:ad:f3:6a:d6:63:ad:2c:6f:
         2b:2f:42:3c:0d:b0:fd:ea:63:a8:9d:70:ee:70:90:d7:37:4a:
         31:ef:40:94:32:17:27:31:f2:89:d1:5f:92:12:e7:a2:9f:26:
         3e:c2:95:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+EB/yb3AMyRSC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Y2JkOTgwZmEtNGJkMC00MDYwLTk2ZDctMWM5OTU3ZmI3MmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDSedbFe8YIRmBWAtVBUrnhx7EZPOBqAWlq
lj+U+IamNcGC8I3+ue6DEngwl7PDJI/wnkxLKv7QKsfV1zVd2UlobTuPYCplbjFZ
Z4NTwMp5LLZPDgfgdYRdSrmH1m4+eVGCHH9C7ivK9sfNZuC8WwmAEKMsC6v9O4Ts
vRfWXjwReohUcq1dj2u4mwEU9dpTtGoNvzCyCTCoPqby9ECWS0hFMj8ABpoSFQST
lTIsz8mWEfLgBNX3VqDTtruqcavuaGKS1LuhL3Xj8OePeFQYL3KYdR3HebgNKcNz
AW5TQjI2D+onCZDNmvCte0CLyMjAjjWk1kphWAZydY2OdZSpfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9W850bvXUJ2OApTRf9As75NLtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU3ZGVmNjEtMzVmMy0z
MWMwLWFmNGQtYjAyNTYwNTAwZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUPuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVtr9P9WMwVHQZkdHQNNfPOmfZ0jhREzBwjTyOgIIlK6hftN807ftef
gcs5jXMvecFD/tq68/4J5GU19Rc3sv/KByHRX5VB6ncAZDs3i/fv9bqlXUrarRd6
5NdA4PtbuMA4UHZ1kD+i+bjRcwVgf/Dps8cO/HOFeYwdr6hr+FtSO17l3CkhkWdg
SE13zxCFEfle+ThOYhWh3GgNZE68UuUG8baTd2VHdc+m/HF0LfKpaDhPTprA8FvW
l60YmDlBmv0p+q1kvS+5iUaT4B/o8/qt82rWY60sbysvQjwNsP3qY6idcO5wkNc3
SjHvQJQyFycx8onRX5IS56KfJj7ClSc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:15 2025 by rpki-client