Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a2978c1-2db9-3ba2-8232-5e36b3b47ec3.roa
File:                     3a2978c1-2db9-3ba2-8232-5e36b3b47ec3.roa (raw, json)
Hash identifier:          c/0F47MiN8qSyqStEuYgCdEWcHuQgUvOFOHYRKwZ5g8=
Subject key identifier:   64:6D:34:B3:3B:44:F4:FD:FE:2C:22:3B:A7:88:21:B3:16:CC:ED:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FD2BA8F316BC29D562480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a2978c1-2db9-3ba2-8232-5e36b3b47ec3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.11.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:d2:ba:8f:31:6b:c2:9d:56:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=091ab318-304d-47c5-914d-1ab51b9fadf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:c3:35:39:01:81:96:8e:69:2c:49:d5:61:
                    c2:6c:0c:4b:c2:f4:08:f9:a8:11:7c:4d:96:c6:85:
                    d6:ac:2b:19:10:79:c0:ad:bb:9c:a2:d7:46:06:73:
                    0a:bf:08:17:fe:b2:ca:7d:e7:95:29:6e:22:ce:e2:
                    74:73:30:42:94:a4:8d:3f:8e:49:7a:03:d0:17:3d:
                    ca:34:58:c7:19:d1:7a:8a:16:b7:55:33:66:f9:7a:
                    f0:ad:24:ef:30:87:cc:a9:e2:b9:29:20:eb:f2:a1:
                    f3:c5:f1:ca:a1:b7:ca:99:54:eb:1f:53:2e:f0:20:
                    0f:87:ad:dc:32:97:cf:26:e4:e2:7a:90:ef:b4:58:
                    8d:bc:1e:32:a4:af:2f:d3:32:2b:e3:cc:a8:85:5c:
                    2b:dc:be:43:02:2e:5e:58:20:cd:f3:0f:83:ef:60:
                    a5:38:e6:94:31:19:cb:27:5b:79:19:fc:64:d2:80:
                    a4:89:2f:24:88:a0:a7:ab:52:f8:18:57:48:d8:2a:
                    8e:07:64:02:e7:ac:67:32:84:10:d1:1f:6e:26:d7:
                    51:47:c3:f7:d0:85:9e:c4:73:09:67:cb:67:1b:1b:
                    78:2b:c3:54:79:06:96:13:8f:1e:e3:eb:d7:db:59:
                    81:86:a2:b5:22:01:62:cb:2f:af:46:83:4a:21:9f:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:34:B3:3B:44:F4:FD:FE:2C:22:3B:A7:88:21:B3:16:CC:ED:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a2978c1-2db9-3ba2-8232-5e36b3b47ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.11.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:69:00:d8:84:d0:e5:c1:85:91:5e:a9:ca:09:0a:3c:74:
         2d:04:a5:31:55:72:67:f3:04:09:55:3f:7b:cf:90:ba:92:37:
         1c:93:8e:e8:a4:16:23:a0:d6:3c:60:75:30:0d:7d:68:d0:62:
         0c:14:05:58:4e:6f:e1:aa:33:d7:0c:01:d1:45:28:cf:33:77:
         94:4c:bc:7f:6e:70:78:47:ca:07:f1:d3:e9:fa:32:c4:f8:d4:
         1f:e5:25:8a:c8:81:06:f3:3d:c0:19:2b:f9:5d:ab:e4:e2:b6:
         6a:3a:04:fa:70:60:63:35:c9:72:b0:03:d2:66:60:59:9b:64:
         7c:42:75:23:90:77:3f:09:80:a3:db:91:c7:62:f1:64:f7:cb:
         d9:2d:78:b8:9e:64:98:cb:1d:29:43:eb:d5:ce:8c:60:a6:d0:
         a3:0d:65:6c:55:84:86:87:3e:c6:21:46:e2:4e:4f:75:dc:12:
         66:ae:95:ff:47:53:7a:1e:34:c6:b4:4c:90:cf:eb:79:27:1b:
         63:7e:99:8c:e8:8a:28:1d:aa:7c:34:c2:bf:13:f8:89:b7:13:
         06:14:0c:b9:4f:2b:a6:c5:46:c5:ab:6c:f2:1f:7f:da:b0:ff:
         50:25:ce:43:c4:13:53:7e:7b:a8:69:24:3e:34:46:5a:87:37:
         e0:b5:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:25:05 2025 by rpki-client