Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/535cd006-f16f-3cdf-9ab7-bcd1b8d45fc3.roa
File:                     535cd006-f16f-3cdf-9ab7-bcd1b8d45fc3.roa (raw, json)
Hash identifier:          ioAeny00Tg+2AXNU573W+HXhkyBEe03f9CDruHfaGmk=
Subject key identifier:   40:63:59:F6:84:84:EE:2A:DD:CA:5F:A7:61:64:8B:BE:78:51:4F:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7549E515CAC85904EF3000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/535cd006-f16f-3cdf-9ab7-bcd1b8d45fc3.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.137.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:49:e5:15:ca:c8:59:04:ef:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=8bfbe265-89ab-4500-ae1c-3b4e02318298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:8b:5d:0c:a7:28:91:9d:a6:b8:22:af:fb:
                    b2:11:b0:d2:b3:7a:51:04:00:d7:ff:92:6c:b3:9a:
                    79:04:3f:43:9f:d7:3d:22:7e:7e:1e:6f:37:b7:07:
                    3e:67:b4:05:cd:80:3a:ac:78:86:6f:ed:be:03:05:
                    3d:7e:a8:1d:b0:af:1d:d9:87:06:7f:1f:2a:b4:32:
                    1e:f1:f5:c5:6f:4d:fd:30:7e:6b:24:2e:4c:26:e5:
                    25:e5:cb:6e:41:bc:2e:07:9f:61:35:a5:cc:3c:73:
                    c8:2e:c5:d6:f6:9f:b1:78:e1:bc:8c:04:0c:31:98:
                    98:c6:34:50:72:de:ea:2c:a5:75:69:74:a8:ac:5c:
                    f0:8b:ca:43:d8:7d:90:49:00:4d:66:30:46:66:ec:
                    2d:02:c7:57:ef:d9:28:85:05:2e:92:9c:41:60:6b:
                    c4:ce:6c:19:8c:64:10:fd:8b:66:17:dd:bf:19:a4:
                    8a:ca:40:f6:61:8e:b9:d1:ce:62:81:0b:85:6c:5c:
                    8f:ec:2e:a2:46:10:71:81:4c:0d:24:03:87:52:ad:
                    66:36:c4:02:e6:b3:79:19:81:03:f8:a9:10:6c:cc:
                    80:b1:59:84:7e:c1:a0:bd:a7:cd:5c:54:f1:d6:7f:
                    de:78:a2:02:d3:63:b8:9d:3c:8d:1c:e7:d8:23:7e:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:63:59:F6:84:84:EE:2A:DD:CA:5F:A7:61:64:8B:BE:78:51:4F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/535cd006-f16f-3cdf-9ab7-bcd1b8d45fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:e5:58:b0:ae:2b:4a:67:40:d4:08:34:30:0c:02:22:7e:
         85:23:f7:a2:ed:90:9e:02:19:04:40:09:90:d7:ef:87:9a:1e:
         59:43:42:c3:7c:6c:e6:2a:4e:a2:d5:93:68:70:e4:ab:fa:f0:
         11:08:2d:97:b5:a9:e2:3d:6e:43:e8:a9:f7:a6:37:12:c8:0c:
         b0:8b:89:38:85:43:0a:26:5b:78:57:0c:a6:f7:10:fc:7d:46:
         89:0b:db:2a:5d:d5:0f:52:6d:6b:fa:2d:a1:ac:82:87:25:8f:
         64:be:ff:c0:e8:cc:3f:b8:75:eb:16:bc:b3:60:87:9d:26:c8:
         74:81:cc:6a:9c:99:ab:3e:a7:f6:04:3e:4a:4d:fd:98:58:dd:
         42:e4:5d:26:c6:15:7a:58:86:25:73:e7:50:41:d2:e1:f1:45:
         c9:ec:91:11:cc:0f:8c:aa:fb:25:bd:92:57:4b:aa:35:d7:65:
         d0:ef:10:55:03:9b:d9:06:03:f9:4e:b2:aa:ed:a8:9b:37:13:
         34:a5:18:c5:cb:ba:27:91:07:ad:f8:9c:01:ad:9c:66:69:70:
         f5:b7:ef:d0:53:01:8a:4f:95:bf:b8:82:22:88:b0:4d:1f:c2:
         73:4e:99:ef:be:58:11:08:c6:ae:f0:3b:06:22:2b:c5:9c:95:
         c2:af:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:55:52 2025 by rpki-client