Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5c7ded-3523-3a82-acb4-3f8a5a0f69f3.roa
File:                     4b5c7ded-3523-3a82-acb4-3f8a5a0f69f3.roa (raw, json)
Hash identifier:          aR0//mx19xP+y+XhqWJt/brUN8GNIzFU0R/YC49m4B8=
Subject key identifier:   28:B7:4B:26:EE:70:A9:5B:5E:F9:67:77:A8:F8:A5:44:53:7B:C9:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75C58D0C545E05406E50F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5c7ded-3523-3a82-acb4-3f8a5a0f69f3.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.82.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:c5:8d:0c:54:5e:05:40:6e:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=d880736d-7308-4d7b-887d-9cbc649fe601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:ec:d7:bf:56:f8:ec:2f:e6:e6:83:2e:74:
                    80:a9:93:5b:77:18:96:c8:e1:9e:64:70:b6:97:0d:
                    0c:40:d3:56:90:f2:76:fc:ba:b6:54:17:ad:19:25:
                    3e:50:27:b8:fa:54:8d:74:c2:91:4d:bf:17:3d:c6:
                    a5:33:33:6e:e0:8d:ba:72:54:70:f3:36:84:46:df:
                    a6:41:d4:0b:66:76:8e:98:8c:fc:fd:22:07:36:90:
                    26:ac:7e:fd:c9:07:e2:e3:2e:e5:36:dc:d3:3a:51:
                    49:86:73:67:f2:e1:54:86:26:19:29:ba:0e:22:6b:
                    7e:43:5f:b9:54:de:cc:38:7c:fe:0d:c8:ce:7d:54:
                    fe:09:53:5f:c3:42:3d:ca:70:3d:ac:98:c8:1c:82:
                    8b:9d:90:15:8d:a0:e1:d0:f7:fd:32:ed:ab:1b:14:
                    f8:1f:f0:21:f4:8d:64:00:b9:99:5a:5e:23:0c:dc:
                    df:72:9b:54:eb:32:1b:3e:19:79:e5:88:b0:d1:d8:
                    91:94:6e:f7:3d:8d:e9:ac:6f:2a:2f:ae:fe:99:39:
                    ad:fc:7e:06:af:51:05:2c:fa:08:04:26:5d:e0:4d:
                    3a:29:74:9f:1a:d0:20:22:3b:8b:4c:e5:dd:64:5b:
                    68:e8:81:09:ed:ad:52:3b:2c:8c:bb:6d:36:9c:a5:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B7:4B:26:EE:70:A9:5B:5E:F9:67:77:A8:F8:A5:44:53:7B:C9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5c7ded-3523-3a82-acb4-3f8a5a0f69f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.82.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:fb:52:1d:62:5d:67:56:79:3d:ab:7e:63:eb:d7:b5:da:
         15:1b:25:77:5e:81:60:29:5a:f3:cb:d1:76:21:3b:3f:5f:73:
         fa:b6:cc:2e:d5:98:2e:bb:22:9d:ad:92:d3:e7:1d:5b:bb:dc:
         c9:d9:0e:7e:f9:20:2a:aa:b5:4a:d0:a7:46:de:5d:24:bb:d5:
         38:83:8e:83:cb:de:67:18:3b:89:60:55:ca:c7:69:41:a1:cb:
         ae:c8:55:c9:13:33:87:03:18:05:70:fd:ef:4e:54:4f:af:2b:
         02:2a:24:ea:5b:83:ba:d0:87:61:ed:41:c6:26:fc:78:da:10:
         0c:17:71:4b:09:eb:d6:2d:90:3c:6a:d7:08:65:5d:6c:e6:20:
         3f:20:13:d9:56:c4:ee:8c:62:2d:f5:25:d1:b8:cf:b6:77:ee:
         04:39:08:d8:1b:c6:54:bc:38:49:4e:2a:8f:89:9c:bc:66:91:
         72:a1:f3:e9:78:d6:bf:c3:96:83:2f:47:56:9d:98:fc:d6:16:
         2d:e4:ef:1a:68:12:43:ff:7b:7a:c4:45:c0:cf:19:81:5b:bd:
         8f:1b:10:44:23:2c:d7:cc:54:62:ff:55:66:84:f1:14:17:93:
         2c:af:4c:a8:71:02:8d:30:91:27:64:91:af:47:d0:1f:21:da:
         af:4a:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:25:11 2025 by rpki-client