Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edc9f65-16a0-352f-b44c-ded8b6e9e617.roa
File:                     1edc9f65-16a0-352f-b44c-ded8b6e9e617.roa (raw, json)
Hash identifier:          cB8sar0FQwHqexOP+52G032uwsE2D48Y6RRD983kUK4=
Subject key identifier:   42:07:C9:34:6C:29:2C:19:26:AE:7B:79:70:B8:93:4D:03:83:6C:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432184480E4A0C142761560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edc9f65-16a0-352f-b44c-ded8b6e9e617.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        73.190.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:18:44:80:e4:a0:c1:42:76:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=1a38288a-fff3-4b07-be51-f4ff6373b716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:c9:7f:2b:ce:67:e2:70:02:9f:bb:60:48:
                    0d:27:d2:72:1c:2e:3e:7a:f6:22:46:3c:1b:e7:74:
                    04:8e:ff:a6:6e:47:15:78:a9:bc:dc:31:e9:1b:e8:
                    20:27:0f:f9:fb:c1:c1:06:3d:58:cf:d3:d8:69:6d:
                    6f:68:44:12:b4:38:0d:2e:93:de:22:99:1c:03:a0:
                    56:62:be:29:f7:16:78:62:8b:98:3b:a0:ff:f1:cb:
                    64:ea:b6:1f:a5:1a:29:fe:2c:1e:ba:e0:3d:28:14:
                    58:40:1f:85:73:98:6e:50:71:bf:5a:b4:f9:af:01:
                    52:77:b5:b4:20:3f:1a:b3:c2:6d:91:1d:fa:ed:bd:
                    3e:51:2d:97:5a:06:36:f2:47:0c:49:9f:59:79:e9:
                    ea:ec:98:a2:e3:b2:6d:d5:c6:6b:09:f9:a7:1e:c7:
                    9f:3d:0b:44:d2:9c:8e:5c:6c:e2:c8:99:a0:35:58:
                    1f:de:35:d5:3a:90:63:60:5b:ce:60:c4:86:82:a4:
                    24:93:f9:32:10:5b:30:ca:a2:dc:92:09:9b:98:de:
                    4d:3f:7b:b7:dd:10:be:f3:9a:79:e0:ed:66:42:a2:
                    20:28:7a:a1:06:af:fe:f2:13:35:b8:60:9c:2a:08:
                    dc:af:df:b6:55:90:d8:17:dd:97:c8:f0:87:d4:ec:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:C9:34:6C:29:2C:19:26:AE:7B:79:70:B8:93:4D:03:83:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1edc9f65-16a0-352f-b44c-ded8b6e9e617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.190.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:74:ff:8c:87:4b:34:42:e0:ab:01:35:d1:16:f8:d9:56:
         86:e5:ea:7a:ed:50:2c:c2:09:1a:52:c3:c3:27:fe:c8:14:73:
         47:67:09:10:1c:d2:66:50:73:6d:1d:14:fa:4b:d8:56:67:5e:
         0c:48:28:a6:ca:a4:26:5a:fd:ca:9b:0c:54:40:0f:dd:2e:19:
         13:a2:00:d9:6a:5a:40:d2:7f:c7:0e:a4:e5:7d:0f:1d:a3:e0:
         b5:6b:48:ef:6f:03:8e:88:07:46:84:1c:55:4b:6d:be:14:c8:
         97:f1:cd:e8:39:f0:12:4c:70:a2:a6:cf:52:ad:aa:7f:b9:20:
         c2:9d:ce:27:aa:1e:14:12:57:78:1f:0b:13:55:db:15:c3:ef:
         a9:2d:23:15:f3:25:b4:1e:ef:12:f0:94:51:65:2f:92:be:3f:
         9f:77:6c:a1:5c:d5:1f:75:10:93:14:74:ef:0d:7a:aa:2a:f0:
         b5:3b:9b:90:2b:42:cd:20:96:7d:98:e0:aa:1b:19:76:dc:d1:
         cf:02:62:6a:53:a2:c3:65:8d:71:24:be:56:2a:fb:50:77:58:
         3b:43:5b:53:e8:0b:cc:fc:a2:43:b9:0f:26:8f:0e:83:28:48:
         59:5e:4d:e2:44:64:b6:bd:22:cf:d3:e5:af:6a:4a:84:33:9d:
         c1:1e:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:53:42 2025 by rpki-client