Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3082bff5-df00-302b-aa32-ec65e84a3e47.roa
File:                     3082bff5-df00-302b-aa32-ec65e84a3e47.roa (raw, json)
Hash identifier:          ALShmbVezMUMkFo05HU70RHRrGQYQTuwXs/jxg2stUo=
Subject key identifier:   6C:AB:05:59:29:D1:32:BB:DE:BF:D9:92:EA:01:0C:60:A3:B8:1A:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0153D202703DA6641B040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3082bff5-df00-302b-aa32-ec65e84a3e47.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.93.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:15:3d:20:27:03:da:66:41:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=c1ca2c9f-13ef-467a-aa99-6c709b8f03c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:1b:df:4f:36:49:b1:c5:8c:7f:b0:bf:91:
                    7b:7c:c4:b7:48:63:43:c5:2e:6b:40:53:1c:cc:77:
                    be:81:55:16:bd:c5:eb:8f:f4:d9:e7:80:4c:1e:ba:
                    b0:29:d3:e1:78:80:18:e8:10:56:cc:50:c7:df:5d:
                    42:61:59:bf:5d:2d:17:f7:78:cb:29:70:8d:df:19:
                    69:20:0a:62:be:24:a2:0c:87:76:ed:3c:2b:2e:18:
                    83:2a:76:be:2c:7e:1c:72:1a:55:1c:c7:25:04:43:
                    da:8e:ea:c1:46:64:f1:c2:54:a5:a1:88:78:a2:ed:
                    02:de:f3:f9:02:70:d6:24:df:20:a1:e4:a6:bb:5d:
                    71:35:90:b2:77:8e:2c:86:ef:44:2a:db:97:da:f8:
                    98:87:2b:e6:3b:73:34:cb:ff:9f:3d:2c:72:d6:d1:
                    aa:54:5b:78:00:b0:9f:8b:15:86:a7:fb:cf:fe:1a:
                    d3:e5:51:3c:e5:f7:7c:b7:66:38:37:df:1d:a9:a4:
                    81:6d:5a:48:f7:c6:0c:35:97:59:63:8a:bc:ba:f5:
                    59:83:98:b1:ec:43:73:29:76:5b:5a:9f:25:26:f8:
                    90:eb:36:b6:4a:e2:12:19:e5:60:39:3a:f0:d4:6b:
                    0c:a9:18:81:2d:14:d9:cc:68:6f:9e:9c:20:f4:3e:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:05:59:29:D1:32:BB:DE:BF:D9:92:EA:01:0C:60:A3:B8:1A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3082bff5-df00-302b-aa32-ec65e84a3e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.93.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:70:d8:3f:a8:9c:06:15:18:f5:4a:c7:34:fe:76:5d:1a:30:
         03:54:bc:58:8b:7b:fa:65:fc:20:c1:c3:b3:c2:81:44:38:c5:
         69:4a:75:20:99:d6:a7:bf:bf:fc:c1:6e:a4:b7:60:40:5c:d2:
         5e:a0:49:8f:cf:63:da:a9:65:bb:f6:f8:be:95:29:36:88:a2:
         c0:b2:81:54:54:06:6b:6a:66:d8:01:51:51:b8:84:46:f9:71:
         fc:6f:9e:5e:c8:70:d1:fb:74:ae:0e:5c:dc:98:04:0d:79:7b:
         d5:47:05:3a:64:4f:f0:ed:d4:de:68:19:04:73:75:94:14:90:
         0f:76:20:c6:39:45:18:9b:08:47:c8:59:35:06:41:1f:90:3c:
         1f:6b:d0:19:23:e0:5e:0f:1a:c5:a0:51:d5:8c:18:19:19:46:
         fc:01:bb:7a:6e:fb:b5:b3:23:37:19:d8:bf:2b:74:6a:33:27:
         fd:37:99:52:00:23:25:e4:16:bc:d7:54:0f:54:9b:fd:5d:36:
         56:c4:4e:04:46:34:bf:bb:35:6c:ab:6f:b9:4d:75:3c:b5:32:
         50:df:3f:3b:88:6d:96:d5:35:5d:c1:c6:c4:bd:dc:df:7f:10:
         d9:ea:a0:0e:1b:66:5f:63:58:cf:54:78:0a:d1:c2:1f:65:92:
         f8:21:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:09 2025 by rpki-client