Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e75f9e-c01e-380d-bade-d2174b38b306.roa
File:                     36e75f9e-c01e-380d-bade-d2174b38b306.roa (raw, json)
Hash identifier:          ep39zKyEeYIQwf84wcyMdDLe3tyJvev1ZVmDduNBBQU=
Subject key identifier:   9B:DB:11:03:0E:D8:0F:90:21:1A:FF:70:E4:A8:A9:4E:B8:88:87:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0F3BDD862FEC65B303F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e75f9e-c01e-380d-bade-d2174b38b306.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.168.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:f3:bd:d8:62:fe:c6:5b:30:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=671cf9bc-a14e-4058-b806-9e7c18ad3893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:fe:a3:4b:82:16:81:24:d5:06:f1:26:14:
                    4a:4a:ed:c1:70:a0:32:56:4e:85:99:05:c2:4e:8a:
                    39:57:9a:94:b2:be:82:16:c8:89:06:af:14:4c:1e:
                    5d:ea:2c:20:af:e9:9c:8c:ab:a2:e7:7b:ca:88:18:
                    e1:39:ba:c6:d9:30:d5:a0:73:54:13:1e:3f:69:f8:
                    e9:c5:6a:e7:7f:00:74:f8:3d:cb:d4:52:25:e5:37:
                    48:ec:6c:37:09:dc:63:3e:63:ef:be:0c:ef:b5:25:
                    4b:1e:44:72:12:e9:e6:bf:a8:5a:5f:36:42:ea:6f:
                    82:27:40:05:12:b8:0f:b8:29:0b:af:8f:87:3a:df:
                    93:45:9b:ed:f5:fb:af:32:d8:6a:51:fc:8a:72:42:
                    80:f6:e9:3a:0e:24:3a:f4:ab:a4:3f:54:c9:e2:03:
                    f5:42:cc:fe:c9:5b:93:ec:f5:38:5f:e3:69:fd:92:
                    7b:93:42:6e:4f:7b:95:7c:c9:a4:bf:d3:49:e4:e4:
                    1d:95:94:c2:ba:f1:83:80:86:89:a2:ce:00:2c:df:
                    c3:85:9a:e5:42:d1:a6:7e:bf:90:f1:98:8e:e7:b3:
                    c5:30:04:18:46:cd:be:c3:5b:bb:8a:43:8d:32:4d:
                    7e:bd:df:ed:82:65:4c:15:2d:96:f9:1b:c4:84:f5:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DB:11:03:0E:D8:0F:90:21:1A:FF:70:E4:A8:A9:4E:B8:88:87:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e75f9e-c01e-380d-bade-d2174b38b306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:39:49:93:cc:72:0a:2f:b3:31:ee:1c:51:bc:93:d6:47:a9:
         9b:16:18:e9:4b:cb:1e:00:91:87:94:d2:1b:89:32:c9:31:9c:
         21:f7:94:7f:83:f7:8d:0c:69:d2:4c:7f:13:46:8d:c6:4d:80:
         71:2a:f9:49:ac:05:b4:67:cb:ca:dc:ac:c8:af:00:8a:33:39:
         19:65:8d:fc:5e:ca:4b:22:e8:51:56:fe:b6:0f:4b:7a:f4:d1:
         8f:f6:a0:ec:4c:b6:65:ad:f9:9c:cd:97:d1:cb:43:cd:2c:45:
         d7:ab:65:fc:9e:dd:b2:ca:5c:1a:aa:1c:27:af:99:22:01:a8:
         1a:57:8a:be:34:43:13:6e:62:de:25:01:da:02:64:3c:10:a6:
         be:93:67:e4:5a:ee:6a:35:fc:a5:76:90:0a:83:a9:26:bc:48:
         c3:3d:9e:7d:65:13:1c:67:49:a9:e1:f0:7c:94:d7:74:56:c5:
         b9:e9:e0:af:51:98:35:3e:5a:cb:27:bf:fb:0a:4c:af:67:c2:
         b4:01:56:1f:b8:ee:ca:d0:e0:33:15:c4:6d:b7:e7:33:11:0d:
         9d:ab:77:37:12:d1:ac:b7:71:90:47:32:00:00:ab:12:cd:5c:
         0f:54:ab:5e:5b:bd:90:1b:82:82:a1:95:cc:a9:01:93:30:de:
         43:18:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:04 2025 by rpki-client