Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561b628f-9466-3253-91f9-50498d7cb890.roa
File:                     561b628f-9466-3253-91f9-50498d7cb890.roa (raw, json)
Hash identifier:          yFqw7jzcNaKTNSJRfmYsqatrrU/ELi+DqghaZOv2BMs=
Subject key identifier:   65:26:29:3C:6D:48:8F:20:EF:DD:33:D0:EA:78:CD:B8:32:CE:4B:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1A8237A08C5C1A1602D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561b628f-9466-3253-91f9-50498d7cb890.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.71.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:a8:23:7a:08:c5:c1:a1:60:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d60cb784-2019-4c19-bb3c-7001c1701f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:24:b8:2e:7e:2b:6d:3c:94:36:fd:37:d4:
                    27:5e:fc:69:92:86:91:38:45:56:65:de:5e:3c:fc:
                    4b:52:05:db:2a:f4:60:22:cd:f5:96:bc:80:ee:f3:
                    dc:0a:dd:ee:d2:54:d0:89:b6:49:1a:d9:96:36:42:
                    cf:e6:b2:ee:ff:9b:f3:f1:c1:8d:96:5a:cf:78:77:
                    6e:24:68:31:7c:a3:41:c7:bd:b3:d8:0d:67:fa:52:
                    c3:38:c6:b7:43:36:a1:f5:ec:f3:5b:f2:63:ed:a8:
                    8b:c9:db:4e:07:cd:06:b1:db:e8:48:ec:6b:b0:50:
                    da:98:f2:4f:e2:44:e9:b6:13:06:90:53:18:c7:38:
                    82:5c:ed:68:27:a8:55:00:4d:fa:b8:d8:09:bc:16:
                    56:ee:81:86:d0:9c:a9:52:72:e5:8e:ae:09:1b:dc:
                    37:33:df:60:4f:16:0f:40:81:16:5f:85:1e:94:d3:
                    4b:08:12:a6:eb:0d:69:12:fc:37:e8:af:ed:8c:50:
                    21:bd:97:5c:8d:c2:9c:39:6e:4a:19:97:66:66:82:
                    b1:97:bd:6b:99:f7:8c:24:d0:b4:d6:1c:c4:0e:25:
                    c4:86:57:f1:5d:63:b2:1d:74:e0:ca:74:4a:70:25:
                    58:ad:ff:42:a9:9c:29:c3:32:2e:40:a1:53:79:fe:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:29:3C:6D:48:8F:20:EF:DD:33:D0:EA:78:CD:B8:32:CE:4B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561b628f-9466-3253-91f9-50498d7cb890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:f3:61:24:8e:a8:13:17:39:81:d9:c3:c7:d3:50:10:59:
         0c:be:bb:d6:e7:46:c9:a1:b7:7d:aa:d7:fc:e6:5b:11:a8:24:
         99:c3:da:be:be:37:25:6f:79:74:79:80:7c:b8:09:7b:55:ae:
         4e:54:b9:c1:38:8f:69:05:b1:b0:66:39:0b:fb:27:f9:d3:a4:
         1c:b7:64:85:11:1f:73:a0:55:d3:00:94:30:7a:8c:72:00:25:
         ea:66:dd:26:f6:e8:01:b4:96:4d:5e:05:26:80:e6:cf:9c:51:
         04:55:38:6d:a1:26:1c:a0:49:c5:c6:74:41:25:2e:30:2b:37:
         6b:6f:8e:7b:3c:78:0a:c9:90:6b:5e:c3:33:75:2f:d2:ff:0a:
         df:e7:e3:12:22:35:1d:37:5c:87:f3:30:bf:52:87:21:a2:f1:
         0b:b3:c6:42:17:dd:62:dd:bb:20:e8:fb:67:58:d6:6e:15:00:
         07:02:ce:3e:4b:61:23:a2:41:85:6b:0f:27:cc:22:e6:f9:1f:
         67:16:66:80:ee:dd:47:07:5c:53:a8:07:58:7f:39:1d:69:1a:
         01:b0:0e:70:c4:d7:f6:fc:df:a6:5c:b3:91:d4:f3:0e:34:b7:
         ad:2a:ff:71:e8:62:0e:bd:b4:af:69:de:fd:7e:31:b7:68:26:
         40:e2:73:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssagjegjFwaFgLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDYwY2I3ODQtMjAxOS00YzE5LWJiM2MtNzAwMWMxNzAxZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJUkuC5+K208lDb9N9QnXvxpkoaROEVWZd5e
PPxLUgXbKvRgIs31lryA7vPcCt3u0lTQibZJGtmWNkLP5rLu/5vz8cGNllrPeHdu
JGgxfKNBx72z2A1n+lLDOMa3Qzah9ezzW/Jj7aiLydtOB80GsdvoSOxrsFDamPJP
4kTpthMGkFMYxziCXO1oJ6hVAE36uNgJvBZW7oGG0JypUnLljq4JG9w3M99gTxYP
QIEWX4UelNNLCBKm6w1pEvw36K/tjFAhvZdcjcKcOW5KGZdmZoKxl71rmfeMJNC0
1hzEDiXEhlfxXWOyHXTgynRKcCVYrf9CqZwpwzIuQKFTef4zAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUmKTxtSI8g790z0Op4zbgyzktGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYxYjYyOGYtOTQ2Ni0z
MjUzLTkxZjktNTA0OThkN2NiODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUc+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRr82EkjqgTFzmB2cPH01AQWQy+u9bnRsmht32q1/zmWxGoJJnD2r6+
NyVveXR5gHy4CXtVrk5UucE4j2kFsbBmOQv7J/nTpBy3ZIURH3OgVdMAlDB6jHIA
Jepm3Sb26AG0lk1eBSaA5s+cUQRVOG2hJhygScXGdEElLjArN2tvjns8eArJkGte
wzN1L9L/Ct/n4xIiNR03XIfzML9ShyGi8QuzxkIX3WLduyDo+2dY1m4VAAcCzj5L
YSOiQYVrDyfMIub5H2cWZoDu3UcHXFOoB1h/OR1pGgGwDnDE1/b836Zcs5HU8w40
t60q/3HoYg69tK9p3v1+MbdoJkDic0g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:36 2025 by rpki-client