Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd4c36b-46c6-316d-9b40-091b069b41b9.roa
File:                     5fd4c36b-46c6-316d-9b40-091b069b41b9.roa (raw, json)
Hash identifier:          OapXqMMc0PmIlrw8KKnrszcxAn++dXaMNl62xNqCbpU=
Subject key identifier:   3B:02:2A:AC:FC:0B:E4:D3:53:DC:99:16:C1:F2:60:C7:C9:8E:3E:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF754E9BC48B731E8B234E14
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd4c36b-46c6-316d-9b40-091b069b41b9.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.207.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:4e:9b:c4:8b:73:1e:8b:23:4e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=abee2d85-18d1-4ab2-9a4f-87e37e7be63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:62:d5:03:14:28:cb:a1:e2:3e:d8:ad:dc:
                    ed:77:a7:ff:f9:e3:f9:b7:5b:e6:0a:8c:05:12:02:
                    b4:4b:48:63:8f:43:45:69:12:6f:4c:64:3f:28:a3:
                    db:54:0d:69:e7:54:2a:32:0a:de:eb:1f:74:e7:44:
                    18:84:8b:e9:f2:33:a2:e5:8d:36:8a:84:2b:f0:14:
                    34:9f:f3:da:80:5d:a7:60:49:97:c1:30:58:c1:16:
                    54:1e:48:2e:5e:70:76:e4:d3:09:90:f8:ec:20:f3:
                    c8:d1:f6:1e:f3:4b:d3:66:ba:8f:93:24:25:b1:b0:
                    98:04:f7:24:5a:ec:c2:b0:ba:0b:b3:2e:1e:3b:43:
                    a4:ad:22:06:9d:a9:1c:44:08:4b:6e:4a:e2:ad:86:
                    8b:ab:85:a7:e0:c8:9d:41:d8:c8:8b:9d:36:24:13:
                    92:2b:b0:95:c7:65:0b:47:d4:ad:f5:31:4f:70:37:
                    8b:8e:e5:44:f0:94:2f:52:0f:bd:20:ba:b5:07:ed:
                    a8:34:d4:85:b8:6b:e3:95:8e:ee:3a:54:33:cb:9a:
                    9b:3e:1d:1c:e0:1b:c5:31:19:7f:81:0b:78:ed:1f:
                    0c:52:e1:d0:5e:6e:8f:98:e0:c5:59:73:29:42:dc:
                    50:47:af:b2:8a:f3:8b:d2:d4:e9:51:24:86:7f:ca:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:2A:AC:FC:0B:E4:D3:53:DC:99:16:C1:F2:60:C7:C9:8E:3E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd4c36b-46c6-316d-9b40-091b069b41b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:51:5b:af:f7:40:83:35:6a:e8:3e:dd:19:42:b4:0a:06:82:
         f3:d6:67:2d:4a:c2:0f:16:19:9c:48:af:c9:9b:47:50:c1:20:
         fd:1c:c0:4c:8d:40:0b:ee:71:2b:7c:8b:df:cb:99:90:69:6e:
         34:57:fd:db:b0:0b:c7:89:1b:8f:6e:a6:36:a3:bc:53:08:6f:
         3f:b1:b1:24:f1:64:44:e2:33:b6:27:73:9f:4c:14:1d:59:f2:
         51:ea:a7:47:0d:0b:7c:56:93:ed:c9:17:38:c0:f5:a4:9b:b2:
         21:e0:51:4d:fd:d1:5d:8f:40:ce:4b:4c:66:83:52:e0:c7:be:
         6e:15:82:cd:a1:53:c4:22:70:78:b7:70:e3:b9:17:a5:8a:1e:
         7b:af:20:c4:8e:30:58:31:ed:55:08:70:34:cc:c5:50:87:96:
         3c:0b:cb:0a:81:79:cc:df:f9:8f:f4:3e:07:11:b7:47:fc:81:
         9f:0d:e6:32:e5:8b:da:d8:cc:0f:86:30:19:b6:f9:69:06:c7:
         bd:97:e7:7f:b2:a4:de:a4:9a:43:6a:0a:31:f0:4a:12:9f:8e:
         52:99:8c:3a:80:2a:6b:93:59:0b:67:15:35:27:66:dc:2c:9d:
         f7:f5:73:dd:ce:f0:3e:af:47:ac:ed:a2:67:f8:55:8b:33:84:
         7a:d5:51:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:57:11 2025 by rpki-client