Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/404dc359-1d1e-3f1b-9f6d-7612852b20f8.roa
File:                     404dc359-1d1e-3f1b-9f6d-7612852b20f8.roa (raw, json)
Hash identifier:          ++BCzn8Kc1JbVMP84kt3De75Pye0tR8pXBPTZEjLQQ0=
Subject key identifier:   8A:F8:BA:51:E1:F4:CF:48:A5:5E:AF:26:D0:96:40:FB:57:6D:54:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319CFAD5C1C0C4B7BF9700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/404dc359-1d1e-3f1b-9f6d-7612852b20f8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.186.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:9c:fa:d5:c1:c0:c4:b7:bf:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=85a491a2-c276-41f4-8525-fd248cfb4ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:50:e4:0c:9d:cc:6c:8c:4d:b2:08:79:54:
                    58:12:8e:76:d8:6b:2d:ff:1c:75:71:b8:5f:9d:53:
                    80:90:89:51:52:df:4d:bf:1c:de:08:6b:54:06:9c:
                    48:ad:a9:c6:b5:22:f0:d2:db:5c:69:24:f2:85:7a:
                    be:9c:35:98:d6:cf:9a:72:b2:00:2e:26:59:58:15:
                    aa:05:4a:f7:f5:62:2c:98:22:da:57:da:bb:b4:ec:
                    fa:e5:78:a2:11:c4:97:3a:80:f7:51:49:25:2d:38:
                    58:da:e8:77:7d:d3:db:90:31:83:b5:eb:78:5d:b7:
                    3a:6b:da:bc:88:21:9c:17:be:87:25:08:58:eb:ad:
                    56:f5:ad:7c:7d:0b:91:a6:34:88:0f:50:41:40:48:
                    6a:f2:75:6a:dd:3e:bd:aa:fe:80:cf:ab:85:cf:15:
                    a7:8c:be:7d:8c:b3:83:2a:ca:0b:5e:0f:53:d2:37:
                    24:0a:e2:52:3c:9d:0e:d5:44:16:09:90:11:41:a8:
                    25:a6:1a:c1:b5:a5:f2:c1:44:c1:d0:8f:e7:2c:90:
                    46:90:f0:be:ef:46:63:3b:d6:cb:76:51:d8:18:11:
                    28:27:a1:76:a9:e6:ea:aa:0e:0e:fd:fd:e4:59:1b:
                    6d:a1:ef:50:dc:3a:bd:69:ed:80:ea:3a:12:67:69:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F8:BA:51:E1:F4:CF:48:A5:5E:AF:26:D0:96:40:FB:57:6D:54:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/404dc359-1d1e-3f1b-9f6d-7612852b20f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:2f:b4:f5:37:8b:5d:5f:6f:49:13:7a:d4:b3:28:2d:2e:
         de:c3:b1:ac:88:43:e8:64:18:b1:03:d9:84:19:29:e4:41:ab:
         b2:e5:23:c5:b5:36:0a:5f:75:98:16:32:49:8f:cd:55:e0:98:
         2a:3a:22:5a:c3:9f:5f:ce:b5:75:05:91:4a:97:ec:cf:85:a4:
         d3:a2:03:59:ec:9e:4c:78:00:ff:55:55:c8:fa:97:06:b6:e0:
         50:dc:12:5b:e6:f5:78:8a:dc:5f:85:94:32:71:6d:ef:cf:c0:
         df:83:0a:ba:6e:cc:e7:71:bf:9c:10:da:63:20:6b:7e:d4:52:
         f7:61:ca:d5:ce:b6:7a:ff:c6:e6:70:fb:90:01:78:52:ab:7e:
         c6:1a:d2:66:7b:e3:b0:af:ab:5c:76:04:31:c8:b5:b0:56:d3:
         f0:78:b7:ca:a7:f7:bc:24:84:dc:2a:15:36:0d:e7:af:7c:9e:
         54:f9:a2:c2:18:b9:aa:bd:cb:da:26:3e:08:92:8c:fa:1f:59:
         56:36:a7:1f:18:fb:22:2e:b6:9e:7a:33:16:ef:57:3b:dd:fd:
         b4:d6:df:f7:f6:0b:e1:07:0a:05:9f:cc:38:25:13:8c:4d:78:
         f8:17:de:78:2a:5f:da:dd:b7:1c:8b:14:e7:d5:0a:92:70:88:
         c4:a6:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:38:56 2025 by rpki-client