Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df4ac6a-6453-37e4-a86f-c9b15e5ac124.roa
File:                     0df4ac6a-6453-37e4-a86f-c9b15e5ac124.roa (raw, json)
Hash identifier:          tyw1lSdgHopwBEKY8CwNigPHDYSGY+EkQKWKzX7MLN4=
Subject key identifier:   D9:3E:B5:8E:70:10:60:A3:D9:68:39:79:BD:A2:B3:A6:9F:BF:B8:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1AA044C8F25192F784C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df4ac6a-6453-37e4-a86f-c9b15e5ac124.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.92.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:aa:04:4c:8f:25:19:2f:78:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a535fbba-accb-4fbd-9fb7-8a3d561c615e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:36:1e:18:3d:e9:a9:80:1e:5f:b5:2c:f5:
                    60:b3:6a:e1:2c:2c:7d:76:db:c8:77:99:65:e8:cc:
                    45:16:76:ed:be:99:50:c4:d8:77:6b:48:8b:cb:9f:
                    1f:bb:bb:10:10:c0:2d:a9:6f:d0:fe:86:19:e8:21:
                    54:e9:ff:f2:4f:35:be:86:87:6a:fa:ed:7f:17:8c:
                    3d:45:85:79:e6:88:f6:b0:c5:bb:b5:3b:d4:76:fc:
                    f1:73:90:88:56:e5:32:72:77:24:91:30:7d:00:d1:
                    87:c5:a8:78:fd:79:3d:c4:9d:f6:ca:ea:72:3e:66:
                    bb:93:4e:0a:1c:76:3e:b9:c1:3f:60:1d:e6:ec:08:
                    71:30:9e:92:a9:88:ea:f3:c9:0b:6c:f7:ef:d3:e1:
                    2a:ee:53:2e:8d:59:af:96:3a:69:a5:cd:ea:61:9c:
                    13:dd:77:01:b4:11:21:b9:75:e4:fa:75:23:38:20:
                    24:6b:08:f5:36:74:40:fe:a8:40:3a:8e:19:95:70:
                    68:98:c5:58:fd:94:22:95:bb:26:be:89:f7:28:cb:
                    98:5a:9a:97:7a:e6:85:d2:a5:6c:cb:8a:02:e8:b5:
                    7e:cb:1a:f0:0e:f0:46:0d:da:f5:39:1d:15:e6:0d:
                    ed:a4:fe:4b:52:43:34:ac:ac:86:88:e7:00:39:3f:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3E:B5:8E:70:10:60:A3:D9:68:39:79:BD:A2:B3:A6:9F:BF:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df4ac6a-6453-37e4-a86f-c9b15e5ac124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:22:5d:5e:b7:d9:8c:34:49:8a:9f:f8:34:49:49:df:67:
         57:1f:ff:76:ea:a4:dc:d4:91:29:fd:04:28:2d:c5:53:7a:66:
         30:f2:37:0c:61:c3:16:79:9b:69:ff:df:16:ca:22:91:bd:73:
         5e:fa:0b:5a:74:fd:99:c2:ce:3c:78:28:6d:36:36:4f:0e:1b:
         30:e3:85:a2:9a:6e:c5:4a:16:2c:59:58:97:66:c5:e3:69:98:
         35:f4:09:02:42:47:c1:f2:d6:c1:67:78:24:dd:43:a6:07:de:
         0b:ff:60:21:f2:68:0f:5e:b3:09:ec:5f:f9:5f:aa:91:63:6c:
         9d:26:44:e3:db:48:50:4b:4f:a4:f5:a5:15:62:5a:e9:78:5f:
         29:d0:8e:74:02:7d:97:b9:5b:55:91:3f:5a:88:80:77:a8:4c:
         e9:be:ad:1d:af:ba:25:f6:d0:2b:82:cf:54:41:d6:3d:61:e6:
         77:94:33:4b:4b:60:6f:ee:80:1e:bd:ed:34:1d:98:a0:2c:af:
         5f:31:37:fe:7a:21:56:d1:fc:e7:89:b3:89:b8:53:0c:bd:44:
         04:27:1b:0b:fd:73:63:f9:60:94:09:75:a0:07:0c:a4:3b:2a:
         46:11:4c:c5:dd:e1:9f:61:1d:93:07:95:48:d7:c9:42:76:f9:
         97:f8:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:09 2025 by rpki-client