Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e90a8ee-3d5f-3332-89b4-78f5a71491fa.roa
File:                     0e90a8ee-3d5f-3332-89b4-78f5a71491fa.roa (raw, json)
Hash identifier:          rSQqcEgQ9YPZYrHrSAiMsOcvIWTnGS0bRmXG6Gav66g=
Subject key identifier:   53:B1:BF:80:16:DE:B0:EE:54:ED:52:0E:1F:F6:EB:C4:37:C7:54:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430ED940F573C6C930BDE20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e90a8ee-3d5f-3332-89b4-78f5a71491fa.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.155.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:ed:94:0f:57:3c:6c:93:0b:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8222cfcd-68bc-4897-bb3d-cf3a779ee1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:06:00:f2:18:e6:28:5c:3a:4f:04:9f:c8:
                    83:03:e6:ec:78:82:d1:8d:61:07:af:bb:73:97:cd:
                    c6:58:07:93:5a:65:a3:8d:59:b3:45:aa:97:c9:e7:
                    f3:7f:8f:9c:8d:fc:38:c8:6e:3b:81:00:45:e8:86:
                    9a:a8:d9:2c:b4:11:41:b8:32:b0:38:ec:b3:9f:b2:
                    56:d5:23:64:83:22:71:b8:67:95:1f:21:ef:24:ec:
                    c6:8e:9d:0e:4a:9a:a9:9e:9b:3b:31:0f:ae:56:6c:
                    89:8a:f3:8c:96:f5:fe:4f:d5:de:ff:d1:b9:57:74:
                    c8:39:07:76:19:3c:7d:b0:65:fb:96:57:f9:c2:7c:
                    0b:d2:5c:64:6e:c0:d0:8f:81:33:b6:9c:f4:60:a6:
                    90:21:ce:52:f2:c7:03:a2:64:08:fb:c9:8c:95:c0:
                    f1:70:5b:42:fa:2b:95:ae:b9:07:03:43:1a:dc:21:
                    f3:54:bf:5d:8f:42:1e:d0:bd:fb:f3:8a:27:86:f5:
                    3d:0b:6b:17:64:64:28:c3:ac:65:35:71:11:fd:cd:
                    45:74:5e:32:61:a5:7d:06:40:57:f9:c7:91:05:ac:
                    fd:b1:8c:87:42:72:df:aa:1e:60:6a:20:32:f8:31:
                    f3:86:f7:19:c1:d8:c8:00:4e:98:da:94:28:aa:f2:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B1:BF:80:16:DE:B0:EE:54:ED:52:0E:1F:F6:EB:C4:37:C7:54:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e90a8ee-3d5f-3332-89b4-78f5a71491fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:2c:cb:30:1e:4b:e9:78:24:7c:55:35:6b:ad:15:d8:77:
         7a:c1:a6:48:1c:7c:1c:13:c8:f4:8d:6d:bb:96:d2:8e:86:98:
         96:6e:93:8f:e8:6a:36:8d:fd:7f:a0:6c:96:b4:0b:9c:50:0c:
         e9:da:92:77:fd:fb:6d:05:61:8b:75:09:f9:0b:bd:69:01:03:
         70:2d:13:72:1b:2a:eb:98:a9:4c:7a:4d:fc:29:85:61:1b:f4:
         5c:cd:66:07:39:ab:3b:96:b0:f5:21:6c:35:7d:05:ee:2c:80:
         03:22:d0:93:2a:e9:35:26:72:cd:c8:f0:bb:17:c0:b0:fc:ff:
         98:e5:c4:34:98:97:fd:83:5b:27:02:a1:fe:50:4b:f6:15:d5:
         12:47:35:f6:31:1d:94:fb:ca:67:38:58:d6:75:8a:3c:bf:0e:
         76:de:af:3a:1a:8f:64:3e:42:87:83:8d:62:74:b5:3b:ae:ff:
         98:39:a9:50:40:12:4f:1e:89:29:68:12:b2:dc:35:0b:1d:d3:
         f3:6c:ce:80:77:e8:bc:48:0f:d1:9a:44:69:e0:b6:f1:8c:cc:
         ad:61:d7:6b:4d:db:c4:44:12:be:b5:49:fe:93:50:96:51:e1:
         62:0c:91:af:d9:e2:81:2f:f1:55:e4:8a:f3:6d:ad:f8:7b:ea:
         d4:b0:04:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMO2UD1c8bJML3iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ODIyMmNmY2QtNjhiYy00ODk3LWJiM2QtY2YzYTc3OWVlMWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAAGAPIY5ihcOk8En8iDA+bseILRjWEHr7tz
l83GWAeTWmWjjVmzRaqXyefzf4+cjfw4yG47gQBF6IaaqNkstBFBuDKwOOyzn7JW
1SNkgyJxuGeVHyHvJOzGjp0OSpqpnps7MQ+uVmyJivOMlvX+T9Xe/9G5V3TIOQd2
GTx9sGX7llf5wnwL0lxkbsDQj4Eztpz0YKaQIc5S8scDomQI+8mMlcDxcFtC+iuV
rrkHA0Ma3CHzVL9dj0Ie0L3784onhvU9C2sXZGQow6xlNXER/c1FdF4yYaV9BkBX
+ceRBaz9sYyHQnLfqh5gaiAy+DHzhvcZwdjIAE6Y2pQoqvICHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOxv4AW3rDuVO1SDh/268Q3x1R5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU5MGE4ZWUtM2Q1Zi0z
MzMyLTg5YjQtNzhmNWE3MTQ5MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8MLMswHkvpeCR8VTVrrRXYd3rBpkgcfBwTyPSNbbuW0o6GmJZuk4/o
ajaN/X+gbJa0C5xQDOnaknf9+20FYYt1CfkLvWkBA3AtE3IbKuuYqUx6TfwphWEb
9FzNZgc5qzuWsPUhbDV9Be4sgAMi0JMq6TUmcs3I8LsXwLD8/5jlxDSYl/2DWycC
of5QS/YV1RJHNfYxHZT7ymc4WNZ1ijy/Dnberzoaj2Q+QoeDjWJ0tTuu/5g5qVBA
Ek8eiSloErLcNQsd0/NszoB36LxID9GaRGngtvGMzK1h12tN28REEr61Sf6TUJZR
4WIMka/Z4oEv8VXkivNtrfh76tSwBNM=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:51:11 2025 by rpki-client