Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/291b46ea-9191-33ff-84ba-1bda459e9b7d.roa
File:                     291b46ea-9191-33ff-84ba-1bda459e9b7d.roa (raw, json)
Hash identifier:          l1fXqAr4yBepkA3sXsnXObS93AT6PGHgbDybPppznVI=
Subject key identifier:   12:00:8F:25:73:E0:A2:27:45:BD:5E:47:95:FE:23:A0:C7:09:C3:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB09BDDC1135FF5EC48EC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/291b46ea-9191-33ff-84ba-1bda459e9b7d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.30.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:9b:dd:c1:13:5f:f5:ec:48:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=4e056a35-a87c-4bf5-98a8-4dfac12eb9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:65:91:56:2c:a7:5d:b7:1d:e1:5a:d2:a1:
                    22:3f:4d:a1:0b:de:ad:f6:df:2d:5a:bc:6b:fa:49:
                    95:fa:04:64:76:0c:35:7b:c0:b9:cf:28:e0:b0:1c:
                    17:a2:ca:82:28:e4:be:e5:ac:11:ee:2d:c0:24:3d:
                    13:84:f9:94:fb:40:db:f6:86:4d:90:b1:df:27:a7:
                    4c:14:53:85:d6:46:dd:44:ee:6c:58:05:c4:fb:78:
                    4e:fc:6a:da:4c:66:9c:b7:c8:71:16:ef:3a:97:7c:
                    0d:6b:50:46:17:2f:46:5d:76:25:18:22:07:d8:95:
                    b7:2c:85:dc:c1:36:74:c1:c5:0d:90:52:c6:bd:58:
                    ae:ba:45:58:38:62:bd:df:f1:9e:63:50:50:d7:44:
                    a4:26:4b:ad:ad:45:d5:54:99:5f:2e:13:ff:28:ee:
                    ba:7a:92:0f:89:24:54:60:63:af:c1:18:f1:66:8d:
                    67:18:98:d3:02:ba:33:aa:20:50:19:97:e8:d1:17:
                    8c:0f:4f:1d:c8:6f:e5:7c:66:02:7f:ce:16:de:7e:
                    0a:09:19:07:94:99:37:26:6d:37:48:2d:5b:d5:46:
                    81:4b:9d:46:2a:5d:44:47:25:e3:93:2d:86:29:a7:
                    c2:70:26:53:17:dd:ef:0c:5f:42:9b:55:f3:02:5b:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:8F:25:73:E0:A2:27:45:BD:5E:47:95:FE:23:A0:C7:09:C3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/291b46ea-9191-33ff-84ba-1bda459e9b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.30.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:02:aa:ab:94:13:a8:bf:dc:5c:f8:06:01:ec:2e:ae:3b:62:
         86:03:b0:05:50:2c:42:9a:76:ea:f3:a2:68:9c:d6:c3:d3:6d:
         2d:8f:a9:e7:ec:b7:d5:4a:67:2b:12:02:81:27:c8:42:0e:9e:
         2e:d9:08:18:f8:e6:83:ef:34:3f:35:09:2f:57:ae:95:c8:74:
         f7:68:ec:e6:19:9a:e6:7a:ba:a6:4e:6a:f6:2f:f9:32:b3:cd:
         75:29:e7:44:89:89:08:10:22:4b:43:5d:94:40:25:25:2d:fc:
         fc:31:00:1d:bd:18:f4:4a:33:ba:f4:f1:24:37:43:cf:7a:8e:
         41:84:5c:5a:4f:ee:be:22:d7:e9:73:18:95:f2:fe:51:c1:d6:
         ec:65:33:1f:ba:ec:64:11:b4:11:e2:de:5b:9f:9c:9a:33:fa:
         82:43:6b:e0:7b:19:f3:96:1d:69:59:4a:f3:bb:11:8d:96:06:
         c2:cb:0f:59:1c:82:7a:59:a6:f1:e9:9a:68:55:35:da:be:10:
         0f:97:85:65:f1:f8:1f:b2:9e:4c:a6:db:eb:41:07:9c:f3:66:
         dd:52:19:4c:a7:22:92:85:90:85:b6:4f:9f:eb:f9:65:6c:97:
         4f:5b:fc:e3:ff:da:95:7c:f7:48:a0:4f:5b:ab:e8:17:1b:52:
         1d:07:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:39 2025 by rpki-client