Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a188526-4827-312b-b637-e4673e2cda0b.roa
File:                     4a188526-4827-312b-b637-e4673e2cda0b.roa (raw, json)
Hash identifier:          9RXHHX1mGotPgWpav1uovVyIN657Gzjk17eS7CDt4rs=
Subject key identifier:   8C:BF:AB:32:28:F7:DE:9A:1B:76:E6:D9:BE:9D:14:A3:70:5B:7B:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C7156E398C6C609AB5000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a188526-4827-312b-b637-e4673e2cda0b.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     33659
IP address blocks:        73.150.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:71:56:e3:98:c6:c6:09:ab:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=79039aee-46bd-4ba8-a083-43c5aee4b808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:57:c6:b1:5e:d0:e9:50:f7:28:1f:66:ca:
                    89:9c:1c:c5:7a:dc:dc:1c:a6:8c:80:6c:ea:24:2b:
                    d6:1c:d3:c7:93:f5:5f:64:f7:4c:92:52:7a:1c:05:
                    c6:d3:98:b6:be:59:48:f7:f8:46:1c:cd:a1:a4:99:
                    29:38:25:01:51:aa:df:5f:b3:b8:b2:9b:b8:3a:d9:
                    d2:08:ea:f7:6f:b0:a1:cf:d8:df:c6:63:43:36:67:
                    8d:da:6d:1d:b6:c8:6e:29:7d:14:fb:4b:b8:c7:07:
                    db:f6:13:6f:97:28:74:a0:0d:25:32:be:98:70:88:
                    04:e9:31:ec:dc:1f:24:f8:85:1f:6f:c6:71:68:43:
                    eb:ca:05:39:19:4a:50:ef:10:d0:7d:90:b2:ae:7d:
                    e6:e8:d7:ae:bd:83:53:de:ed:38:28:bf:c1:84:c7:
                    9d:96:3b:7b:0e:6d:58:3f:d9:0e:8b:33:d5:84:df:
                    64:15:04:bc:49:1b:f0:0e:56:55:52:b3:db:88:af:
                    f7:c8:c2:bc:bf:a3:9e:35:cb:bf:5f:df:96:4b:3a:
                    cc:4f:cb:40:6b:c6:21:22:8c:6a:28:25:01:5d:5d:
                    92:84:4f:36:c3:21:51:33:c7:4d:a0:90:d4:1f:94:
                    f5:1d:02:6d:f7:a5:d5:e4:47:82:bd:f5:85:eb:2e:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BF:AB:32:28:F7:DE:9A:1B:76:E6:D9:BE:9D:14:A3:70:5B:7B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a188526-4827-312b-b637-e4673e2cda0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:9d:46:be:43:8a:46:19:d4:08:bc:dc:61:04:2b:c5:84:2b:
         9f:b9:47:c0:ac:33:ab:c2:fb:1d:d9:c2:bd:89:86:7f:31:f7:
         8d:53:88:f5:03:fb:4d:16:ed:d8:e4:f2:09:c4:5f:b3:bc:b5:
         89:dc:0e:45:f6:93:e5:10:c5:09:9d:b7:f7:43:9b:df:39:9d:
         36:e4:e2:61:c0:d0:e1:2b:11:f6:c0:ad:9d:39:8c:4c:06:21:
         15:bf:77:c2:5a:91:3a:17:8f:b4:49:b6:28:ae:09:44:4c:46:
         c6:0d:70:af:5c:c1:7e:16:fc:39:0f:cf:48:fe:3c:da:83:27:
         c5:05:d0:af:86:92:d3:5c:f9:42:a0:fa:e2:4a:6d:1e:3a:2d:
         50:b3:fd:05:c9:76:c7:ac:d4:32:f7:04:ab:4b:fa:98:40:40:
         4c:13:1c:c9:37:4e:56:c1:64:df:cc:63:c8:f8:42:fe:d8:d0:
         2c:d8:38:29:c9:c4:f3:f3:a8:b6:6e:a7:dd:b6:49:4a:30:f8:
         5c:67:48:65:18:f2:f9:f7:34:4d:d4:ed:5a:6a:ca:d6:eb:09:
         05:12:31:5e:c4:97:55:f0:8a:4d:65:88:60:26:3f:52:79:97:
         51:f1:d6:4a:07:4f:50:0e:14:39:79:f9:c9:80:b6:fb:af:e1:
         c8:a2:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:53 2025 by rpki-client