Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0a33cd-75a8-3c8b-a715-a60400f490c0.roa
File:                     4c0a33cd-75a8-3c8b-a715-a60400f490c0.roa (raw, json)
Hash identifier:          7HuRlHJ2P5B+iiP5Hn3Pvg42zvVNGaJLF3rotHBjnRU=
Subject key identifier:   06:DD:DB:E8:4D:D3:77:B9:3C:E1:44:3A:03:91:17:AE:D8:0C:73:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C068A4A41A0621CA66050F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0a33cd-75a8-3c8b-a715-a60400f490c0.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.72.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:8a:4a:41:a0:62:1c:a6:60:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1deb61d7-7002-4f54-9660-41c582335f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:77:21:a4:87:ff:27:a4:7c:32:51:0a:d6:
                    40:f4:2b:23:93:1a:e1:82:03:ba:be:23:8e:80:3c:
                    e8:6b:eb:be:93:ac:92:ff:df:d9:41:12:88:d3:90:
                    77:a8:6e:8d:d0:9a:49:e6:d6:d2:e3:a7:9c:79:2d:
                    c8:fb:60:0a:93:14:87:f0:5e:ae:46:d2:ce:88:20:
                    78:16:d4:ac:db:1e:da:3f:47:70:45:ef:21:0a:e8:
                    09:ac:53:07:fe:a7:4a:f4:90:71:66:7c:aa:2e:38:
                    7d:e7:af:52:0b:a4:ee:2e:37:ad:1b:1e:aa:d0:88:
                    df:44:05:83:71:b1:0c:7e:6f:27:b0:bb:57:d1:b4:
                    e2:7a:a5:4d:c2:f3:7c:ef:e0:63:e9:56:f2:da:d7:
                    4a:72:d7:a6:23:2d:5d:e4:23:e1:b7:20:e5:c4:ca:
                    53:b2:c3:80:2e:1a:8d:75:4a:3b:ad:3d:d2:ae:ce:
                    df:b5:56:3c:61:86:bb:62:7b:e8:04:a7:6f:34:9a:
                    b0:5e:cb:75:18:65:72:89:93:39:9b:f5:13:de:13:
                    2d:0e:ef:f6:f4:af:f1:d4:78:1f:f6:7e:ae:85:4a:
                    9f:e3:d1:0b:bc:90:7a:ce:b9:8a:89:02:77:12:56:
                    13:c3:80:5a:7d:fa:6a:a1:9c:fb:fb:60:f6:eb:c3:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:DB:E8:4D:D3:77:B9:3C:E1:44:3A:03:91:17:AE:D8:0C:73:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c0a33cd-75a8-3c8b-a715-a60400f490c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.72.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:7c:e0:70:40:65:d5:87:05:9f:ce:70:5e:d1:c7:85:1a:
         b6:79:9c:92:42:8d:6f:9c:9e:72:62:b9:a5:a3:9f:e1:2d:8c:
         17:0c:56:79:b9:03:27:e9:71:05:30:df:f6:90:aa:4d:87:c0:
         66:bb:a2:16:d1:a0:bc:5d:01:be:52:0c:f7:83:8b:a1:50:a4:
         7e:72:4d:fd:b8:2a:1a:be:d8:40:86:43:8c:15:26:78:d6:0b:
         0a:1b:42:ef:d0:7e:b7:4e:5d:a5:a5:65:f9:ee:44:d1:72:79:
         60:d7:c6:ee:36:f5:85:a9:26:38:a7:79:97:e8:cd:e4:a6:e1:
         67:54:56:ac:3c:74:f8:de:2e:79:78:5a:ba:95:d8:6a:5f:85:
         2a:01:62:91:88:20:3f:6d:a8:bf:d0:47:88:48:66:96:b9:c8:
         dc:ec:a8:f5:43:5b:1d:fc:04:f4:b6:4d:2c:ed:89:ce:c2:3e:
         a3:36:1e:64:d3:45:f1:fd:c6:8d:27:9a:ef:c7:f1:7a:a2:ee:
         34:38:4d:64:9c:c7:4c:d9:7e:5d:13:22:7f:cd:d2:83:64:94:
         d7:34:7e:11:d6:85:fe:e2:53:1a:fd:08:bf:15:50:43:30:65:
         45:32:13:a0:be:ee:8b:61:93:72:15:07:09:48:f2:ea:35:77:
         c2:35:f0:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBopKQaBiHKZgUPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MWRlYjYxZDctNzAwMi00ZjU0LTk2NjAtNDFjNTgyMzM1ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm13IaSH/yekfDJRCtZA9CsjkxrhggO6viOO
gDzoa+u+k6yS/9/ZQRKI05B3qG6N0JpJ5tbS46eceS3I+2AKkxSH8F6uRtLOiCB4
FtSs2x7aP0dwRe8hCugJrFMH/qdK9JBxZnyqLjh9569SC6TuLjetGx6q0IjfRAWD
cbEMfm8nsLtX0bTieqVNwvN87+Bj6Vby2tdKctemIy1d5CPhtyDlxMpTssOALhqN
dUo7rT3Srs7ftVY8YYa7YnvoBKdvNJqwXst1GGVyiZM5m/UT3hMtDu/29K/x1Hgf
9n6uhUqf49ELvJB6zrmKiQJ3ElYTw4BaffpqoZz7+2D268O/GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbd2+hN03e5POFEOgORF67YDHOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGMwYTMzY2QtNzVhOC0z
YzhiLWE3MTUtYTYwNDAwZjQ5MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUiaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg9fOBwQGXVhwWfznBe0ceFGrZ5nJJCjW+cnnJiuaWjn+EtjBcMVnm5
AyfpcQUw3/aQqk2HwGa7ohbRoLxdAb5SDPeDi6FQpH5yTf24Khq+2ECGQ4wVJnjW
CwobQu/QfrdOXaWlZfnuRNFyeWDXxu429YWpJjineZfozeSm4WdUVqw8dPjeLnl4
WrqV2GpfhSoBYpGIID9tqL/QR4hIZpa5yNzsqPVDWx38BPS2TSztic7CPqM2HmTT
RfH9xo0nmu/H8Xqi7jQ4TWScx0zZfl0TIn/N0oNklNc0fhHWhf7iUxr9CL8VUEMw
ZUUyE6C+7othk3IVBwlI8uo1d8I18NA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:55:34 2025 by rpki-client