Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a2b682-cb3e-3f4d-be6c-93e527307bae.roa
File:                     15a2b682-cb3e-3f4d-be6c-93e527307bae.roa (raw, json)
Hash identifier:          uqGor9UAA2bR52T+8JXFWc+bewlkLZMtBVMzkiWDlxM=
Subject key identifier:   E8:9F:FF:87:65:E7:FB:80:84:EE:3D:70:D0:7B:31:03:0F:B0:C5:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430FE51E8AECF83CDD8C3A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a2b682-cb3e-3f4d-be6c-93e527307bae.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.55.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:fe:51:e8:ae:cf:83:cd:d8:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=00e9af5c-8345-4d08-b600-d2c42ce1d887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:36:29:31:1b:70:ad:2d:c2:8a:f7:c6:ec:
                    9e:da:11:85:c5:94:c8:d2:7e:63:4f:c8:97:b7:2f:
                    2b:be:25:d9:57:ed:6a:01:72:27:5d:f9:64:d2:d4:
                    84:ae:f2:79:9f:dd:88:8f:7c:a6:54:ee:ed:89:0f:
                    27:ae:18:ec:be:1b:62:33:2a:97:bc:40:0b:ce:9d:
                    79:58:6d:ba:96:6e:35:e3:7c:24:6f:88:9a:88:f3:
                    f9:3f:7d:6c:6a:17:50:ee:4d:df:ed:88:b0:57:7f:
                    70:63:96:f4:0b:e3:6d:de:27:96:ef:b1:c9:42:af:
                    27:00:96:e4:77:f4:67:e2:a8:e3:db:0f:f3:d7:7c:
                    8b:20:97:fe:3c:fa:87:27:ce:75:c1:6e:f8:2b:b9:
                    ff:48:26:5b:e3:43:cb:f1:6a:fd:16:02:ca:24:f0:
                    5f:83:ed:b5:67:1c:88:b9:a2:eb:f6:f1:cb:5c:61:
                    8e:6d:42:75:87:97:6b:eb:be:22:8f:ad:61:c4:60:
                    ea:07:89:b7:27:24:b6:49:e1:bb:08:6f:1f:0f:a8:
                    44:1c:87:e7:8b:24:bd:78:db:b5:63:12:6b:03:4a:
                    17:25:b6:19:bb:81:94:81:5a:38:28:e9:94:ae:1b:
                    f0:00:0f:93:68:ca:70:92:6b:32:37:af:ee:77:76:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:FF:87:65:E7:FB:80:84:EE:3D:70:D0:7B:31:03:0F:B0:C5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15a2b682-cb3e-3f4d-be6c-93e527307bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f8:4d:c3:38:92:46:cb:da:a9:46:2a:9f:97:4c:0b:ef:55:
         97:50:e0:b7:69:69:67:cf:1a:ec:b4:3d:9e:d4:2b:7c:c3:d7:
         99:76:f3:82:8f:b5:dd:22:3e:55:02:16:18:8d:19:81:96:95:
         7d:42:0b:a8:1e:40:bc:d0:3b:8c:32:7e:0c:1b:fc:c5:bc:67:
         40:80:31:87:6d:02:1f:ae:11:5a:da:fd:c7:ea:b5:a3:45:3a:
         04:94:1a:ef:6e:bd:f9:6a:4b:fa:f5:ae:15:5c:3c:25:5d:ae:
         de:8d:93:d1:9d:af:86:7b:f5:92:f1:13:22:de:39:e5:05:4f:
         19:c0:16:34:82:fe:08:b1:a0:f1:dc:97:55:c0:08:e5:47:a4:
         30:7b:21:01:6b:54:0e:ec:c7:6a:0f:45:ee:63:6d:69:35:89:
         5c:12:63:8f:9a:f2:98:6d:98:6c:8c:27:8d:37:b1:09:36:45:
         4e:39:11:dc:54:90:4b:94:64:3b:07:6e:7b:df:74:f3:67:70:
         32:2e:a9:ea:fc:c5:51:c4:b6:bb:83:ce:36:1d:d7:61:eb:ad:
         cd:5c:98:89:03:1f:5e:d0:5a:32:b4:f0:10:9d:3e:ec:68:3b:
         35:d2:09:14:f2:ea:51:c5:14:8a:87:19:ac:0d:12:80:bc:4f:
         72:b9:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:59:32 2025 by rpki-client