Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2051198c-fb35-3134-bfe7-fa13ac30e88e.roa
File:                     2051198c-fb35-3134-bfe7-fa13ac30e88e.roa (raw, json)
Hash identifier:          Ik2bFWpUbhJjj4SxdrIC//sHGtQFZvswETSWd/4TV/M=
Subject key identifier:   70:34:BC:78:10:34:ED:9F:15:9B:29:78:30:6D:2A:95:CF:CF:D1:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C080D932A016E7412665D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2051198c-fb35-3134-bfe7-fa13ac30e88e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.176.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:0d:93:2a:01:6e:74:12:66:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5e817c34-2fef-4a4d-89b8-c62a990afcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:13:9b:3d:29:43:df:76:3e:ce:00:86:4b:
                    e3:52:00:5a:b3:69:c8:9e:c7:9d:29:42:4a:27:e4:
                    3a:fc:bc:f0:62:5e:c8:21:30:ed:bc:d6:63:de:a7:
                    f6:f6:74:c7:4a:a6:21:54:38:52:ba:9a:55:7c:20:
                    e6:1f:03:a8:1e:1b:ff:98:93:b4:cc:9b:16:16:eb:
                    98:27:df:be:fc:73:fb:b6:d5:55:73:bc:c5:c1:b1:
                    5a:25:7f:6a:8f:41:17:c3:6d:d6:4a:5a:74:70:bc:
                    07:38:49:aa:22:9a:23:16:aa:f7:75:ce:08:3b:87:
                    46:73:65:8e:15:45:86:b2:96:d2:93:21:f6:23:54:
                    70:96:05:2d:11:ce:76:69:b9:97:ee:da:51:3f:ef:
                    59:e1:4e:08:66:8b:53:19:d0:57:22:85:1b:6e:cf:
                    bb:ca:7b:d2:7b:eb:37:b4:89:33:18:83:3c:48:d5:
                    5d:76:82:43:ef:58:fc:49:da:f3:dc:b3:be:8a:de:
                    64:cd:b3:54:d4:8b:d9:5f:a2:9c:60:8a:a1:78:55:
                    58:14:a8:59:bb:d1:c1:d9:40:18:11:62:1e:b8:db:
                    d8:a6:9f:f0:0f:24:7c:eb:c6:c2:d7:56:1e:c0:a8:
                    75:3a:0c:72:e5:16:1a:87:aa:f5:24:10:1e:09:81:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:BC:78:10:34:ED:9F:15:9B:29:78:30:6D:2A:95:CF:CF:D1:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2051198c-fb35-3134-bfe7-fa13ac30e88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.176.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:08:8a:c3:83:be:a1:a6:7b:c7:92:b0:ba:eb:60:09:ea:e8:
         55:7c:01:8d:b3:86:5e:79:54:0e:29:32:6e:30:be:38:dc:f6:
         d6:7f:0f:a0:d8:a3:33:7f:80:e6:0e:2a:ff:06:c6:ca:ef:ec:
         92:d3:27:22:d8:ba:3f:7f:b7:38:db:8f:78:b5:75:ec:49:7b:
         4a:04:30:05:c3:68:0b:20:1d:3a:0e:04:50:15:70:13:df:10:
         fa:7c:3c:24:0f:c3:71:27:63:d4:df:ec:06:44:2b:5c:48:03:
         ed:34:2f:dd:b3:1b:72:df:86:8a:55:e5:49:15:c8:f5:18:8b:
         3c:3e:0c:58:bb:90:12:78:0e:e7:85:93:a6:25:d0:58:35:f9:
         be:1e:18:1e:7c:4e:80:c3:e0:54:8c:fb:50:6b:9f:8a:83:63:
         b8:82:0a:5b:e3:e4:60:8c:16:e2:8e:e7:c0:10:ab:32:9a:7f:
         93:43:26:78:c8:45:2f:4c:af:58:f0:50:8c:df:82:2f:fa:9a:
         60:8c:0c:b9:bd:98:a7:5b:87:b9:e7:97:fc:8e:e2:81:9b:e8:
         3c:22:16:62:96:46:bf:57:16:a0:d7:f5:a0:b1:30:9f:9c:d7:
         d4:b0:32:56:01:7d:8a:76:fa:6b:1f:d6:7a:23:02:7d:02:45:
         af:63:5c:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCA2TKgFudBJmXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NWU4MTdjMzQtMmZlZi00YTRkLTg5YjgtYzYyYTk5MGFmY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDkTmz0pQ992Ps4AhkvjUgBas2nInsedKUJK
J+Q6/LzwYl7IITDtvNZj3qf29nTHSqYhVDhSuppVfCDmHwOoHhv/mJO0zJsWFuuY
J9++/HP7ttVVc7zFwbFaJX9qj0EXw23WSlp0cLwHOEmqIpojFqr3dc4IO4dGc2WO
FUWGspbSkyH2I1RwlgUtEc52abmX7tpRP+9Z4U4IZotTGdBXIoUbbs+7ynvSe+s3
tIkzGIM8SNVddoJD71j8Sdrz3LO+it5kzbNU1IvZX6KcYIqheFVYFKhZu9HB2UAY
EWIeuNvYpp/wDyR868bC11YewKh1Ogxy5RYah6r1JBAeCYFXywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHA0vHgQNO2fFZspeDBtKpXPz9EiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA1MTE5OGMtZmIzNS0z
MTM0LWJmZTctZmExM2FjMzBlODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASbDHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwIisODvqGme8eSsLrrYAnq6FV8AY2zhl55VA4pMm4wvjjc9tZ/D6DY
ozN/gOYOKv8Gxsrv7JLTJyLYuj9/tzjbj3i1dexJe0oEMAXDaAsgHToOBFAVcBPf
EPp8PCQPw3EnY9Tf7AZEK1xIA+00L92zG3LfhopV5UkVyPUYizw+DFi7kBJ4DueF
k6Yl0Fg1+b4eGB58ToDD4FSM+1Brn4qDY7iCClvj5GCMFuKO58AQqzKaf5NDJnjI
RS9Mr1jwUIzfgi/6mmCMDLm9mKdbh7nnl/yO4oGb6DwiFmKWRr9XFqDX9aCxMJ+c
19SwMlYBfYp2+msf1nojAn0CRa9jXPY=
-----END CERTIFICATE-----
Generated at Tue Jun 3 07:11:06 2025 by rpki-client