Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23566edd-5656-3c54-883e-7368cce3c64b.roa
File:                     23566edd-5656-3c54-883e-7368cce3c64b.roa (raw, json)
Hash identifier:          5/yn/hKowDotWdFud8lKRdhslPg+XAEiBI3ahBfrIm8=
Subject key identifier:   FF:0A:C6:EB:80:4E:CC:8E:71:79:1B:82:31:E6:46:0D:12:A2:01:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1653F61D4604F82D511D480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23566edd-5656-3c54-883e-7368cce3c64b.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     13367
IP address blocks:        75.73.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:3f:61:d4:60:4f:82:d5:11:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=2285021d-0a9a-4610-8a1f-bbd5ac7a1421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:12:3c:4a:9b:ac:11:c3:65:38:49:f8:93:
                    c9:a1:2d:2e:3a:f4:99:a3:e3:05:0d:98:d2:b3:fa:
                    57:53:67:9c:82:5e:4e:95:62:f8:66:b6:38:3a:15:
                    99:73:41:a8:16:05:3f:3f:2a:07:4e:41:d4:f4:3a:
                    6f:87:57:ab:dd:b5:aa:e0:a7:b5:f6:90:cc:f7:ac:
                    50:40:0f:68:34:77:01:28:81:b6:6f:ad:14:1c:a3:
                    60:3f:32:bf:8c:48:2d:87:cb:2e:69:a9:b0:c6:08:
                    41:af:fd:e5:a7:52:9b:4c:d7:35:aa:47:ec:97:db:
                    46:e7:1c:b6:1c:09:14:0a:e4:61:38:62:af:67:a3:
                    c0:2a:0c:38:b0:ce:1c:38:51:95:1a:a5:86:3a:c5:
                    d4:05:8a:32:f6:86:4d:c7:91:31:85:86:6a:0d:de:
                    9a:f2:e3:ca:da:71:8f:5e:9f:02:46:b7:51:b0:e9:
                    6d:4f:81:bc:4e:57:48:52:e0:73:56:00:d7:98:a5:
                    2b:a7:23:cd:31:15:0e:e7:9b:9c:71:5b:38:96:c6:
                    2b:d4:8b:df:a7:4e:2d:ac:47:9a:5a:e0:8f:ee:ab:
                    f2:fe:28:de:13:1c:95:12:e3:16:a0:ca:3e:6d:71:
                    b8:c3:55:41:03:dc:de:f9:fd:d6:90:ac:6a:52:93:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:C6:EB:80:4E:CC:8E:71:79:1B:82:31:E6:46:0D:12:A2:01:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23566edd-5656-3c54-883e-7368cce3c64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.73.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:55:67:09:f4:51:fa:10:bf:e7:8f:01:0d:ec:c4:9f:82:
         93:f0:c3:33:b4:06:46:61:fd:f9:8c:b2:c6:b4:97:a3:fe:1d:
         3a:3b:6f:54:3c:2f:b7:71:46:34:c6:f0:7f:dc:ff:c1:49:88:
         6c:33:c1:47:c7:0f:38:c1:03:18:7c:1e:82:85:d5:16:df:ce:
         8a:e7:05:9f:4a:f1:41:b6:ef:0f:54:25:f1:ea:ca:70:43:9e:
         be:14:39:39:ca:27:0d:1e:54:ae:3d:24:ca:4e:ab:fe:2a:ba:
         95:93:5c:23:da:00:35:a3:93:be:6a:4a:27:20:67:60:33:6a:
         25:a8:19:89:7c:07:7a:9b:41:be:0e:8a:5e:a2:b6:4a:90:46:
         d3:19:cb:ca:0e:76:57:8c:d3:15:5f:e1:5e:5f:54:b9:ad:6c:
         a6:44:28:75:e9:0f:a3:f7:49:33:d5:06:1c:2f:9f:a7:93:f1:
         80:1d:09:43:20:b4:93:9f:dc:55:97:67:3d:fa:02:66:98:a3:
         9e:59:e1:ea:25:e5:b5:1d:4e:e9:18:72:e9:cc:31:98:2f:cd:
         12:5b:87:89:65:14:1e:2b:8a:88:8e:a7:8e:0b:82:f6:b3:b5:
         25:5c:14:c5:3d:14:d4:71:23:7e:e7:8f:9a:10:22:51:7e:a3:
         26:74:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:11:02 2025 by rpki-client