Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa
File:                     5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa (raw, json)
Hash identifier:          Eg6QUnI5Hz72j3/ZnvKho7LbMA1b8Gf3+o2TGYWzNjk=
Subject key identifier:   9A:C0:05:9E:9F:2A:83:14:A4:47:E2:53:02:EE:06:84:80:98:E6:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C4DEB28E76099FDE1D840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:4d:eb:28:e7:60:99:fd:e1:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=91a7f214-834c-4923-840f-8871a0a0e004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:19:de:53:b4:39:98:a9:f7:21:d8:d6:17:
                    2c:1f:a5:26:0d:0f:2d:e4:f3:95:50:35:42:65:7f:
                    e2:9f:98:3e:4f:93:cd:4e:99:19:8b:ea:1c:ff:cd:
                    aa:99:52:6a:7c:fb:61:64:da:4b:68:d2:60:94:1a:
                    31:f4:8a:4a:29:0e:99:e9:28:94:df:f5:85:e1:f8:
                    6f:03:0a:21:3c:fd:df:0a:ae:0e:b5:30:13:dc:90:
                    92:9f:de:64:4d:12:93:17:fd:d0:1b:36:cc:3f:bf:
                    e5:ca:a5:d7:90:fa:45:4c:c0:a4:40:21:0e:82:e9:
                    48:51:fb:b4:bc:c6:42:ba:f0:c7:86:ba:65:da:54:
                    d9:54:ff:40:43:60:4a:a9:ef:99:6f:e3:dd:8b:3a:
                    9f:65:2e:ec:01:b1:f8:ee:5d:ed:8f:c6:9f:5a:a3:
                    b6:b5:ab:1f:64:3f:6b:9a:29:84:d3:f7:14:7c:77:
                    84:60:54:24:3c:0f:c6:82:e2:23:91:bd:6f:16:25:
                    ec:ac:b5:a9:67:06:2c:f7:f1:1a:ea:97:5f:a3:0f:
                    13:c2:93:d9:a5:3b:68:cd:6e:b3:f9:b4:1c:37:a5:
                    ae:3d:21:fd:24:16:3f:bc:6f:82:cc:e1:83:a8:d2:
                    6c:7c:6a:21:c1:f3:d6:ad:ea:39:2c:7d:9f:17:b4:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:05:9E:9F:2A:83:14:A4:47:E2:53:02:EE:06:84:80:98:E6:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:2c:41:19:5b:9e:6f:35:e2:6e:f7:56:5d:5d:1e:c0:36:
         d2:f5:cf:89:5f:2d:04:3b:88:55:30:0d:16:ac:0a:90:56:2f:
         91:32:5f:2b:dc:21:21:43:3c:8d:fd:a2:4e:98:93:58:ba:a7:
         f1:47:dd:6e:1e:9a:ee:06:02:0b:b6:1c:1d:43:b5:05:72:3a:
         6b:54:1b:88:ed:6b:93:37:3f:b7:03:1d:23:b2:c3:75:0f:04:
         46:74:2e:a3:99:4c:5c:49:56:84:bb:d5:8f:de:07:71:48:c0:
         fb:15:f2:f4:52:be:e4:46:8f:79:07:c4:54:72:63:ba:55:d9:
         27:09:25:9d:5e:1a:ef:9a:f0:aa:8e:b5:8c:35:7e:5e:e6:d3:
         71:33:5f:55:25:8f:f2:4f:c0:ad:85:9f:a3:cd:4f:d8:4d:c4:
         1b:af:86:05:ef:79:60:2f:5b:dd:9b:3b:eb:5d:3c:d1:8f:01:
         be:d3:88:60:00:95:9d:52:5b:6b:92:52:59:31:1a:1f:ea:a9:
         65:b0:de:70:f1:4f:17:7d:cb:b3:11:01:83:e8:08:50:64:fe:
         76:0a:a8:e3:58:c2:c4:13:d0:27:eb:2d:de:5c:ce:a0:fd:f2:
         20:b7:5f:90:7b:7a:c9:5c:e0:6c:1e:09:2b:17:cc:90:e2:39:
         d4:80:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:50 2025 by rpki-client