Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/454404e0-93a9-3a90-9119-2deae4a6858c.roa
File:                     454404e0-93a9-3a90-9119-2deae4a6858c.roa (raw, json)
Hash identifier:          JnyJlCUVnu1VrBGYIUvNQn3rSP1SQNpDIEbuthk34jQ=
Subject key identifier:   A3:23:4C:A6:29:10:A6:B5:71:1E:14:9E:B2:16:78:C0:8F:55:39:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0825909A161A2A393BAC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/454404e0-93a9-3a90-9119-2deae4a6858c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.247.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:25:90:9a:16:1a:2a:39:3b:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=20c3af15-dc06-453d-b4a7-7c7676e7cd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:fa:95:15:87:06:89:51:e3:56:fd:4a:bc:
                    0b:20:9c:19:d0:ce:d6:d2:96:a5:8b:f0:57:48:80:
                    c7:6f:c1:7d:24:b0:40:67:27:ed:d0:70:42:cc:d9:
                    3c:06:ec:7d:54:39:a7:f5:48:b0:5b:6e:0b:c6:a7:
                    66:bf:1e:b8:ae:0d:4a:23:ab:65:f2:c0:fa:4b:cc:
                    8e:98:e6:5d:ab:7a:85:32:6c:2d:6f:fa:1c:0e:14:
                    b8:e9:95:a6:3e:fd:79:dc:d2:fa:c6:21:34:bf:29:
                    2e:e6:3d:5f:aa:89:cf:04:d6:09:1d:c0:f7:20:55:
                    c7:61:68:75:da:cd:2b:82:1b:de:19:67:86:89:96:
                    a5:7d:da:23:bf:ad:b3:58:22:3c:32:8b:6d:59:9b:
                    1d:7c:7c:a8:7d:51:9d:d0:72:18:f5:8b:de:b7:ba:
                    1b:ac:f8:40:29:10:d8:4d:55:c5:b5:5e:e6:5a:d1:
                    56:d5:d6:88:7a:e1:53:07:7b:d7:d6:63:c0:5d:71:
                    ad:05:c4:c4:1b:45:d9:0f:79:68:e2:dd:ac:c3:d0:
                    a1:7e:12:e7:6c:b1:72:46:df:5b:c0:a6:a5:d4:fd:
                    13:bf:b2:e3:98:db:6c:f4:1e:b7:ff:9f:d5:be:2a:
                    f1:59:b1:3d:8e:7d:32:b5:f7:47:3a:55:8d:68:2f:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:4C:A6:29:10:A6:B5:71:1E:14:9E:B2:16:78:C0:8F:55:39:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/454404e0-93a9-3a90-9119-2deae4a6858c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:30:5a:a0:7a:84:11:f3:fe:6e:3b:31:a8:ce:db:4f:5e:a4:
         f3:55:b8:81:36:33:c4:5a:fc:eb:e2:8e:14:0c:3e:8d:c1:e9:
         59:0b:2e:b7:2c:4a:41:d4:4f:bf:a9:6c:21:1b:cf:81:fb:37:
         fe:fc:ba:fc:25:be:e3:92:a5:1e:ca:f4:ee:28:8b:64:87:f4:
         5b:f0:4f:45:12:b1:04:52:42:bc:22:f7:a9:78:a4:c6:b5:33:
         af:3c:24:ab:41:9f:65:dd:2d:eb:d6:24:af:ef:2c:30:b9:26:
         53:0f:35:7d:24:e4:e9:4c:e7:6f:07:90:14:c8:e9:7d:b1:0c:
         b9:ff:0a:61:5a:c0:60:8c:15:47:b4:8b:87:67:aa:90:73:24:
         86:e8:a5:fe:28:c6:41:c5:b4:3f:da:5b:b3:2c:2d:04:53:6d:
         07:b3:f7:fc:51:d1:ee:bf:d9:45:27:c1:a6:8d:7e:61:58:7c:
         57:61:13:61:c2:51:db:df:34:45:7f:70:55:8e:84:da:72:5d:
         3f:8c:69:f5:0d:9f:62:45:8d:51:42:b9:27:f2:33:e4:cd:ec:
         3e:e2:6d:be:2d:a9:e7:d8:7f:c2:50:6e:9d:b0:e0:c9:ae:74:
         49:24:7c:6d:84:54:e5:24:0a:1f:76:7e:bc:6a:ac:82:1d:ff:
         a6:89:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:55:32 2025 by rpki-client