Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a97a46-7d6d-3bb7-b90e-812cc51e69fe.roa
File:                     11a97a46-7d6d-3bb7-b90e-812cc51e69fe.roa (raw, json)
Hash identifier:          NBFsS38hoRBJl+QOKAKMfJEf0JQ8FHG69CCmKf5YOqg=
Subject key identifier:   B6:49:8E:D7:E7:84:21:FC:CF:B4:D8:AA:04:A8:D2:03:AA:AE:2E:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F838567E46EF1759DDE600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a97a46-7d6d-3bb7-b90e-812cc51e69fe.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        73.240.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:38:56:7e:46:ef:17:59:dd:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=643f496c-f4a3-42d4-a468-ec641a4f672c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:e0:64:ec:f2:b0:43:00:86:3c:52:bb:d0:
                    f3:8b:f0:16:f4:79:4b:ca:29:fc:9d:62:3a:00:e6:
                    cd:c0:a8:a6:95:9b:0a:01:32:f0:de:11:88:2c:4e:
                    92:a0:b3:d8:ee:1f:31:e4:a6:2a:dd:5e:4d:c2:27:
                    a4:bc:0a:b0:23:be:10:c6:27:9c:33:43:52:3f:de:
                    c0:1d:ac:d4:d9:69:07:d8:d7:a8:0f:6f:cc:a0:a1:
                    55:7f:39:70:7d:3e:33:b2:6c:9b:07:f3:84:02:59:
                    36:d3:6a:54:3e:45:2f:55:cc:5f:ed:9f:bc:c4:09:
                    67:d4:c6:77:63:f7:86:ba:60:fd:fb:86:1b:a5:72:
                    1a:bc:6e:7b:59:90:37:db:bb:28:23:6d:9a:2c:16:
                    71:fd:a6:75:96:78:ca:6d:03:a0:be:cd:d8:27:24:
                    11:42:b4:e3:28:5e:83:bc:b9:d6:0c:b3:c8:5f:50:
                    96:4b:2e:a5:1a:d8:ac:a6:eb:71:a2:73:28:3b:e6:
                    0d:63:bc:ab:23:53:07:dd:68:42:65:65:f0:3d:7e:
                    4c:db:bd:df:46:cd:c2:f3:e8:a9:d4:51:bd:9d:3b:
                    24:da:fe:d9:f7:43:80:84:1c:1e:9f:1d:93:cd:3e:
                    3a:c6:b7:84:70:83:2c:a8:61:a9:8f:47:15:a6:bd:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:49:8E:D7:E7:84:21:FC:CF:B4:D8:AA:04:A8:D2:03:AA:AE:2E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a97a46-7d6d-3bb7-b90e-812cc51e69fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:4e:75:12:f5:ee:0d:0b:36:73:2d:24:38:ee:3e:a0:03:
         f8:9f:b9:dc:8a:57:be:9e:45:fa:98:69:51:53:d7:8d:10:6c:
         c2:51:71:db:dc:63:b4:4b:38:47:5e:d2:2d:82:85:07:f6:e9:
         2e:e6:27:f9:30:8f:c8:2e:40:fc:5e:64:5e:76:dc:4c:7a:bd:
         48:ca:3c:94:36:f6:e0:d8:f8:98:2a:2f:fa:82:27:60:ff:17:
         74:92:38:15:fc:a7:7f:06:a2:0b:7e:cb:ec:5b:36:77:35:0e:
         63:d8:81:05:c3:42:52:ef:c3:58:b8:68:83:4a:d5:4a:a6:1c:
         9b:09:81:e9:61:99:5c:9e:69:d7:aa:0d:e5:fc:fd:83:a5:b9:
         44:a9:e1:c0:d6:f9:95:88:5e:0d:21:e1:e6:ae:59:3f:10:9e:
         3a:64:6d:bb:b5:50:9d:05:95:cf:0e:50:25:c6:bf:1a:0a:33:
         33:41:fb:a4:21:5b:45:b3:98:bf:04:04:1e:2a:5d:cf:e7:42:
         3c:86:69:d8:15:d3:e2:4e:64:41:3d:fc:fe:ec:91:ed:45:30:
         6b:67:c3:04:b2:b1:e6:4b:01:56:73:b4:25:58:51:ab:34:ac:
         06:b4:ba:a5:02:cb:1e:7f:b4:46:ab:04:fd:3c:06:3b:2b:c1:
         65:b1:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:10 2025 by rpki-client