Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34712146-2a69-30ff-a977-ce9ac27143f2.roa
File:                     34712146-2a69-30ff-a977-ce9ac27143f2.roa (raw, json)
Hash identifier:          TBpRnlyU+R5hvChh9x3TaLrF2azhWp+L3wxtdB+FTUA=
Subject key identifier:   0A:00:57:BE:85:79:83:95:F5:85:A6:03:6E:E0:7A:1B:4E:9C:4A:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB012D183387C6F74E277C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34712146-2a69-30ff-a977-ce9ac27143f2.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.92.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:12:d1:83:38:7c:6f:74:e2:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ded30739-83f0-4fc1-b824-0cc86caba360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:02:8c:78:bb:02:61:ed:ac:12:02:f8:db:
                    01:f3:18:74:b8:da:5c:ec:a7:72:6d:fc:42:a7:3d:
                    5c:01:23:a4:e6:62:e4:77:1b:17:fa:6e:f2:e5:ae:
                    ff:aa:6b:7e:b3:da:31:1b:6c:cf:e8:bd:bb:cb:50:
                    fe:f3:26:2d:a4:5c:28:a2:69:87:5d:77:05:f0:7f:
                    c7:eb:45:6f:84:1e:10:10:dd:8d:b0:b4:18:c0:fa:
                    97:6b:67:e9:f4:fb:76:a9:4c:7e:79:a6:3e:fb:70:
                    18:d0:bc:e8:bd:09:02:e2:24:72:3f:2f:2d:1f:20:
                    37:98:be:48:a6:8f:59:f2:9b:c8:68:0a:a7:81:35:
                    88:20:0b:74:51:2a:02:72:63:61:96:53:2a:51:1b:
                    bf:f4:73:e2:0a:10:49:64:b9:6c:66:5c:99:ff:c3:
                    b8:bb:79:09:41:0c:c4:d4:61:de:97:bf:56:4d:fe:
                    f3:51:b8:f0:ac:12:5c:fa:55:ac:ac:ea:1e:5c:aa:
                    32:19:f3:6f:29:21:38:24:3d:14:d3:c9:3a:bc:00:
                    84:97:9b:45:12:f6:30:e9:42:11:7c:85:90:dd:39:
                    43:b2:01:da:fe:66:94:f2:ad:67:39:1f:97:e8:2f:
                    9c:4b:0c:8c:78:d0:20:ed:f1:4f:a4:67:60:c9:d7:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:00:57:BE:85:79:83:95:F5:85:A6:03:6E:E0:7A:1B:4E:9C:4A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34712146-2a69-30ff-a977-ce9ac27143f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:8f:5e:c9:16:89:9b:33:ef:af:f3:f9:83:28:9c:fc:ab:
         f3:01:1d:ba:ad:36:e5:b0:2d:42:08:04:db:d0:38:90:ed:3d:
         f9:79:94:08:db:d0:8f:30:8b:c2:ab:ca:8c:53:47:17:42:00:
         f5:74:e6:d2:9a:aa:bf:ad:34:84:78:35:12:f3:fd:f6:80:c2:
         93:35:c9:e5:40:e2:a2:4f:57:0a:d2:11:84:49:c7:ad:23:b1:
         4c:c8:ac:b6:85:67:30:86:e0:c7:86:71:c4:57:6e:50:c1:f5:
         89:68:46:d1:5b:3b:f8:d5:c9:88:ea:1e:5a:b9:04:41:90:74:
         30:a6:f2:60:45:73:da:c9:1f:d8:01:7c:74:bb:fe:2f:79:54:
         21:f1:3b:50:9b:78:97:b8:51:73:43:9d:59:fa:d0:34:b0:78:
         b5:10:0b:6e:f4:57:78:9e:17:1d:52:d6:b1:eb:a0:a4:b0:33:
         b2:2f:f4:46:ea:0f:41:bd:cb:c9:7e:19:e0:be:64:85:45:bd:
         15:8a:96:a1:51:fe:10:ee:d6:2f:52:ff:32:f0:d0:0b:75:ef:
         a5:4a:2d:fa:fa:3e:5f:24:a1:16:e3:46:f7:9c:17:da:f3:99:
         82:fa:f7:8f:ed:27:95:61:5d:1d:a0:fb:a6:1c:28:b2:8f:ea:
         c2:2b:be:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssBLRgzh8b3Tid8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGVkMzA3MzktODNmMC00ZmMxLWI4MjQtMGNjODZjYWJhMzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOgCjHi7AmHtrBIC+NsB8xh0uNpc7KdybfxC
pz1cASOk5mLkdxsX+m7y5a7/qmt+s9oxG2zP6L27y1D+8yYtpFwoommHXXcF8H/H
60VvhB4QEN2NsLQYwPqXa2fp9Pt2qUx+eaY++3AY0LzovQkC4iRyPy8tHyA3mL5I
po9Z8pvIaAqngTWIIAt0USoCcmNhllMqURu/9HPiChBJZLlsZlyZ/8O4u3kJQQzE
1GHel79WTf7zUbjwrBJc+lWsrOoeXKoyGfNvKSE4JD0U08k6vACEl5tFEvYw6UIR
fIWQ3TlDsgHa/maU8q1nOR+X6C+cSwyMeNAg7fFPpGdgyddHCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoAV76FeYOV9YWmA27gehtOnErjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ3MTIxNDYtMmE2OS0z
MGZmLWE5NzctY2U5YWMyNzE0M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrvj17JFombM++v8/mDKJz8q/MBHbqtNuWwLUIIBNvQOJDtPfl5lAjb
0I8wi8KryoxTRxdCAPV05tKaqr+tNIR4NRLz/faAwpM1yeVA4qJPVwrSEYRJx60j
sUzIrLaFZzCG4MeGccRXblDB9YloRtFbO/jVyYjqHlq5BEGQdDCm8mBFc9rJH9gB
fHS7/i95VCHxO1CbeJe4UXNDnVn60DSweLUQC270V3ieFx1S1rHroKSwM7Iv9Ebq
D0G9y8l+GeC+ZIVFvRWKlqFR/hDu1i9S/zLw0At176VKLfr6Pl8koRbjRvecF9rz
mYL694/tJ5VhXR2g+6YcKLKP6sIrvr8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:27 2025 by rpki-client