Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4edf845e-e2fc-3957-95eb-3a6db773eefe.roa
File:                     4edf845e-e2fc-3957-95eb-3a6db773eefe.roa (raw, json)
Hash identifier:          3Ufx1RXqQBczxlX1AwJE9KbxEC96crHFX7qCz76g9pQ=
Subject key identifier:   9D:35:76:4A:06:E0:7A:CB:36:3B:24:30:AA:C4:BA:B2:FD:FF:EC:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7597F0F8FEF294D5B8780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4edf845e-e2fc-3957-95eb-3a6db773eefe.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.89.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:59:7f:0f:8f:ef:29:4d:5b:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f2b978b2-fa30-49ac-a9af-e7358e8ac00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:84:ed:13:c2:86:1a:24:84:79:f2:b5:2c:
                    9d:4f:43:c5:08:c1:d4:57:84:9f:e6:02:e4:13:fa:
                    e5:e2:ec:53:df:ea:8b:ba:b8:dd:76:b7:2b:92:a7:
                    86:0b:b9:53:81:ee:81:a8:58:cd:1e:61:06:8b:6d:
                    85:d4:31:b5:45:41:7b:2f:71:e4:ba:61:e8:7c:49:
                    6d:48:67:d6:10:e9:96:ce:81:54:5a:c9:a7:c9:fa:
                    36:d0:f7:0f:9b:33:21:9b:68:fd:ad:fb:51:41:42:
                    03:a1:a3:f5:44:d7:ef:ea:72:00:ee:81:29:51:47:
                    4e:44:3b:53:7a:2a:d4:7f:9b:4c:14:b6:12:93:4f:
                    e8:ef:91:1a:08:43:79:09:4e:f2:49:12:0c:23:05:
                    b8:94:f9:c5:55:ee:aa:03:04:03:03:82:7f:40:f4:
                    0d:6c:4e:fa:8a:23:84:e5:00:3e:07:be:1d:1a:e0:
                    2a:d0:ec:a6:6f:3f:a9:86:cc:f0:28:cd:bd:28:5a:
                    60:12:e9:6e:ce:aa:31:df:1b:f7:62:5f:bd:97:52:
                    cf:46:de:81:bf:b5:ba:2f:fe:98:b2:30:cc:08:0b:
                    ce:80:f6:99:99:d5:3f:dd:e8:cf:b0:bb:74:c3:7a:
                    fb:0e:5f:35:c9:df:5a:30:56:54:fa:8b:e5:f4:9a:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:76:4A:06:E0:7A:CB:36:3B:24:30:AA:C4:BA:B2:FD:FF:EC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4edf845e-e2fc-3957-95eb-3a6db773eefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.89.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:e7:63:6f:b4:69:8f:93:25:c4:c4:73:98:ce:a2:8c:69:
         89:b9:d1:9c:01:3a:a2:31:df:f1:6a:c9:85:41:26:99:08:8f:
         32:61:d6:5b:26:72:00:4b:cd:70:c0:cc:e1:23:22:b3:34:d2:
         94:f1:a9:88:bb:8a:b0:1c:1f:a7:68:88:79:40:ea:40:bb:68:
         26:a9:fb:1b:21:26:e6:2b:ec:5a:02:40:95:e3:2f:c5:42:cc:
         1a:3f:ed:88:26:1c:07:20:17:dc:ad:20:62:6d:4e:6b:0c:6a:
         a3:3f:00:61:83:9e:9d:2d:e2:94:8e:8b:3c:96:e4:59:48:9c:
         8c:b8:96:4a:16:be:a8:42:52:02:df:d1:73:d3:85:c0:29:20:
         3a:6c:56:eb:32:66:a6:d8:7f:63:98:05:42:f5:10:b8:9f:ae:
         5d:8f:98:1a:fc:47:34:0a:db:e7:82:d8:9d:1c:90:bc:9c:5c:
         de:c5:65:ec:a8:e4:77:1b:13:99:42:ad:db:db:d5:f9:67:b8:
         07:08:cf:2d:76:b8:bd:b4:7b:9a:35:ca:4a:29:d7:9d:6c:e1:
         44:33:e6:17:ec:b5:5e:17:d8:2a:91:59:2c:26:41:66:27:5d:
         1f:c8:75:18:5a:3b:6a:cf:8f:f7:4d:bc:bc:0b:6f:8f:c0:f2:
         de:7a:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:03 2025 by rpki-client