Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa
File:                     4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa (raw, json)
Hash identifier:          moTWPAQs5OryC9b9BtPKLKNBihvr4g0D9QlYLsxCy+0=
Subject key identifier:   39:3A:F0:0D:82:67:B2:65:78:CF:76:F7:CF:98:D1:C6:02:B3:D0:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4320EA760736B7BDED904C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        73.161.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:0e:a7:60:73:6b:7b:de:d9:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=dfca1aba-3ef6-4881-9105-8d8d583f0412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:b1:59:1a:4b:8b:ba:4b:4e:09:17:0f:41:
                    4e:4e:65:17:4e:a4:4c:44:66:5f:04:e8:6d:b3:37:
                    58:51:8f:84:f1:81:bd:59:63:17:37:83:42:7a:c1:
                    e2:25:a2:c5:9a:8d:59:20:70:a7:c8:f1:ff:17:9d:
                    fa:da:8b:46:fb:b2:ab:27:47:1b:27:4c:68:de:f0:
                    d6:43:df:59:7d:6d:f8:69:0f:23:16:d1:46:94:6d:
                    6e:7d:59:8a:d9:bf:81:98:1e:15:07:f6:45:f7:b7:
                    0f:cd:e4:58:5b:28:7c:ad:d8:80:53:ea:ab:ec:9f:
                    f2:93:61:b0:fb:5c:1f:ec:af:0d:8d:ce:9f:4c:9a:
                    0c:46:69:88:1d:3f:84:58:8f:59:83:f1:16:70:ef:
                    05:4b:61:fb:b4:c9:1f:45:87:19:28:c7:cc:a8:2f:
                    fd:97:d8:7e:21:14:f5:16:ae:8f:72:82:55:06:87:
                    6a:09:59:88:8f:b6:38:4c:a2:82:66:2e:0a:11:66:
                    98:7f:8c:a4:e6:cb:9c:b8:44:38:fc:08:42:c2:79:
                    b6:d2:4e:db:2c:67:06:56:93:98:c1:4c:2e:65:29:
                    b5:f9:a2:50:a4:6c:b0:82:3b:ea:86:f9:b6:ab:75:
                    2b:d9:83:f5:16:24:57:fc:88:2f:c0:65:f5:0c:b6:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:F0:0D:82:67:B2:65:78:CF:76:F7:CF:98:D1:C6:02:B3:D0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:60:df:1c:9a:55:08:43:06:f4:3c:54:e0:30:92:ae:bb:
         4c:ae:21:1c:31:b4:ce:94:03:e7:2d:40:b6:5e:ef:74:96:62:
         12:b1:73:e8:e7:53:c7:03:9f:6f:7e:ee:66:ae:0e:a9:c7:18:
         68:3e:67:69:b7:e7:a8:99:f4:27:c6:1f:96:e5:54:f9:fb:e8:
         79:bf:a5:37:5a:89:2b:dc:1a:75:db:4d:89:97:fd:34:ca:e2:
         66:43:1d:d6:38:89:d1:22:f2:a0:57:ee:8c:3b:9e:c6:88:c5:
         58:b2:07:e1:90:1a:87:17:0a:7b:32:e3:f3:4b:74:c5:05:1f:
         87:d3:bc:bc:c0:64:fc:ec:bc:d1:c6:65:ad:26:52:f3:23:ee:
         b7:45:26:10:a3:a1:ba:42:e8:dc:3d:df:63:7e:0f:b3:f4:96:
         d1:2c:27:4e:7f:f6:4e:d9:bb:aa:7a:e4:c3:52:bb:a2:22:46:
         83:1a:cf:3c:69:f5:33:ef:9a:00:c9:29:29:7f:cf:94:8e:59:
         93:46:51:9c:b4:64:be:c5:52:a2:05:c9:d3:3a:33:f3:38:0d:
         97:30:3b:99:db:4b:54:9c:25:eb:65:2f:22:fb:bf:7c:5e:ec:
         9f:20:c4:0f:86:e3:fa:ce:c3:4c:45:47:a2:9e:34:3c:76:bd:
         34:e2:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:53:43 2025 by rpki-client