Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa
File:                     33834404-93d0-3e75-9b3c-28f9341241a9.roa (raw, json)
Hash identifier:          /yaDb1Q/DJlWiTicWYnA/YaMC2KJ/Alg8QTXAXJXBek=
Subject key identifier:   78:85:9D:4E:6D:0C:30:77:68:4D:74:50:23:E3:5C:73:3C:ED:D0:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8402398344EF911607AA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        73.67.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:40:23:98:34:4e:f9:11:60:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=85a969a2-49ed-4144-b8d2-a55f9f8795a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:3f:bd:05:ba:7a:4e:0f:b3:81:97:e1:33:
                    83:03:ef:e0:fb:e9:c8:5d:6a:f5:bb:df:c1:ff:9f:
                    29:25:20:22:af:54:89:e6:8c:45:d2:57:ff:b8:1f:
                    8c:55:42:05:5c:10:5e:3c:c4:89:27:84:9d:f1:3c:
                    bb:52:b6:f4:88:4d:98:a4:32:e8:65:d8:10:58:50:
                    7d:83:fb:cf:24:c0:0c:43:3d:14:6d:9e:d9:93:aa:
                    cf:0d:e2:80:ee:ad:e5:c2:cb:ba:31:3a:69:99:cb:
                    e2:76:9a:06:64:aa:e4:0e:34:0a:30:f8:3b:4f:84:
                    33:4d:1a:eb:32:d9:79:8a:17:78:ed:f3:10:74:69:
                    6a:3f:52:88:57:3a:b1:e9:6a:b8:fd:e8:29:fb:2f:
                    d4:b4:48:e6:9c:19:a4:7c:0c:8f:08:08:3f:a9:fa:
                    58:c8:7d:3b:76:39:13:ab:cc:b6:0b:d1:f4:d8:cd:
                    c5:30:c7:6f:0c:95:ac:81:cb:01:e8:0d:81:a4:9d:
                    b4:50:13:ca:a7:8d:e3:84:74:12:1d:b6:36:2e:84:
                    2b:2c:64:11:8a:67:c3:93:52:ab:83:77:d0:d1:f2:
                    5b:b7:0a:d8:b3:1f:59:53:43:13:f0:97:1c:96:72:
                    67:35:0c:9f:bd:c2:da:5a:ae:9c:c3:a5:1e:6d:e6:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:9D:4E:6D:0C:30:77:68:4D:74:50:23:E3:5C:73:3C:ED:D0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:cb:91:b4:57:9b:4a:db:35:16:33:2c:38:43:5d:a1:7c:
         d6:d2:a0:10:3c:79:c3:e0:17:d7:e3:42:65:e5:7e:3a:87:39:
         52:72:f1:90:88:d0:31:b5:5a:ae:1c:59:35:cb:40:14:1f:37:
         bc:79:e5:5b:f9:77:7d:7c:04:e3:6e:75:c0:56:73:a3:47:33:
         d5:d5:a1:48:ce:2f:c0:3f:67:e3:e7:02:db:84:64:1e:77:7d:
         66:0e:51:f0:da:88:af:2c:35:bf:57:24:0d:94:5c:70:d1:f6:
         99:d5:1d:7d:fc:1c:10:f3:f1:1c:38:09:4a:6f:55:d9:73:cb:
         1a:fb:6b:73:98:ae:4e:f7:a6:3b:ee:3f:6e:74:ec:ec:d2:58:
         e0:51:ff:39:45:51:1a:97:bc:5f:69:25:ec:7e:d2:ff:30:a3:
         8c:e6:c9:41:fc:95:6b:c9:d7:67:34:85:c6:e0:87:bb:5d:4f:
         8c:18:f7:79:b1:0e:83:95:15:62:9b:e1:a8:ce:5e:60:bd:39:
         84:a4:68:8d:bc:33:6e:88:83:37:90:13:f1:a3:ce:e0:b8:78:
         d2:77:e0:40:0c:29:f7:56:5c:8e:77:6d:9d:f7:26:78:24:01:
         ff:79:c8:98:0e:58:b0:6e:3c:ed:0d:40:ab:4b:b9:a3:0e:f6:
         f6:bb:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:04 2025 by rpki-client