Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/623ca811-15ab-3300-af1f-6e0be7ae98c3.roa
File:                     623ca811-15ab-3300-af1f-6e0be7ae98c3.roa (raw, json)
Hash identifier:          WXJKye0WE5H98wdc+8J+lV6paNaBtDILJ1ZajjWkSFg=
Subject key identifier:   C9:87:82:CA:66:DC:2E:F5:E2:0C:90:3A:BE:56:C2:AE:77:F5:4A:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75C26B509E1F4EE1E6BF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/623ca811-15ab-3300-af1f-6e0be7ae98c3.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.7.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:c2:6b:50:9e:1f:4e:e1:e6:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=62da9343-5c28-42ec-ad49-7bbd1e38a043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:15:7f:a0:cd:13:2f:5d:5e:4e:8c:21:04:
                    4e:23:9b:99:c7:4c:19:a6:04:f9:28:41:23:cb:41:
                    7f:ae:85:2e:b7:90:d3:47:4e:e4:ec:77:1d:67:61:
                    6c:56:c7:7b:80:f7:f1:ef:99:4e:21:62:00:30:d4:
                    d9:e4:d7:99:32:76:67:3b:54:89:71:69:54:ff:97:
                    1d:7b:bc:4a:ce:18:09:8c:f8:d1:4c:d8:2b:16:61:
                    ba:09:9f:0c:10:0d:9f:d9:2b:97:08:53:99:26:41:
                    80:11:69:a1:b5:c3:c5:74:50:b7:81:1b:20:ae:08:
                    a3:14:63:c9:68:51:62:62:68:10:0b:1d:dc:5c:75:
                    06:8f:d6:16:3d:1a:63:1f:33:2d:03:c4:e7:3f:b3:
                    04:9b:0d:dc:95:36:d9:bd:3c:cc:cc:92:96:34:e9:
                    3c:49:c8:b2:18:9a:73:09:a8:43:8b:e7:a1:5e:5e:
                    d0:e8:3d:82:12:1c:f0:8a:58:4d:51:ff:1e:9f:6e:
                    be:5d:25:12:3a:de:e3:cb:cc:3d:54:15:0a:4a:ce:
                    11:f2:3e:5b:9d:30:9f:25:ca:fa:1d:32:22:4e:80:
                    4e:ad:94:d3:18:a0:95:9e:10:5f:df:ab:c6:da:61:
                    96:fe:7c:df:16:da:d1:1b:a2:a0:3c:af:14:e2:dd:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:87:82:CA:66:DC:2E:F5:E2:0C:90:3A:BE:56:C2:AE:77:F5:4A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/623ca811-15ab-3300-af1f-6e0be7ae98c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:7b:28:9b:b2:2c:d3:ad:1b:d1:10:39:26:ea:97:9a:17:7c:
         a4:d5:b0:74:c8:49:82:a7:e3:04:35:9e:aa:07:26:be:8f:2a:
         b3:4a:7d:d9:e6:93:09:92:85:ef:cc:75:ca:7f:cc:e7:11:54:
         11:ae:b7:66:e0:4c:60:87:14:22:be:8c:a1:79:89:41:08:77:
         2d:f5:95:d9:b1:5c:44:46:d2:90:fa:1c:16:35:19:1f:be:14:
         72:aa:43:07:a2:56:45:07:d5:ab:b8:4c:fc:ba:d5:11:f8:56:
         c9:83:71:c2:c5:cf:e1:bd:65:c9:6f:27:9d:6d:22:7e:b6:68:
         b2:94:61:e4:6d:cc:d3:69:ec:c9:23:0b:70:6a:dc:c7:24:90:
         9a:7f:08:37:18:f9:b9:20:7a:f7:37:e7:30:cf:38:20:3f:f2:
         d9:63:fd:db:d1:d8:e8:52:a6:5a:50:0e:2a:36:7e:3d:c7:ab:
         f9:a8:78:7b:14:d5:4b:4c:0d:e7:f3:e7:38:4b:f3:51:5d:cf:
         4a:33:d2:cf:cc:0d:51:fb:e2:97:ef:7a:1c:6c:07:99:98:20:
         eb:45:88:57:ba:17:ce:24:f6:6b:cf:4b:50:97:e6:19:49:af:
         90:e0:7e:9b:0b:3c:5b:a7:bf:4f:13:3a:ea:a7:89:ef:83:69:
         12:af:12:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dcJrUJ4fTuHmvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
NjJkYTkzNDMtNWMyOC00MmVjLWFkNDktN2JiZDFlMzhhMDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7gVf6DNEy9dXk6MIQROI5uZx0wZpgT5KEEj
y0F/roUut5DTR07k7HcdZ2FsVsd7gPfx75lOIWIAMNTZ5NeZMnZnO1SJcWlU/5cd
e7xKzhgJjPjRTNgrFmG6CZ8MEA2f2SuXCFOZJkGAEWmhtcPFdFC3gRsgrgijFGPJ
aFFiYmgQCx3cXHUGj9YWPRpjHzMtA8TnP7MEmw3clTbZvTzMzJKWNOk8SciyGJpz
CahDi+ehXl7Q6D2CEhzwilhNUf8en26+XSUSOt7jy8w9VBUKSs4R8j5bnTCfJcr6
HTIiToBOrZTTGKCVnhBf36vG2mGW/nzfFtrRG6KgPK8U4t0azQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmHgspm3C714gyQOr5Wwq539Uq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjIzY2E4MTEtMTVhYi0z
MzAwLWFmMWYtNmUwYmU3YWU5OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANd7KJuyLNOtG9EQOSbql5oXfKTVsHTISYKn4wQ1nqoHJr6PKrNKfdnm
kwmShe/Mdcp/zOcRVBGut2bgTGCHFCK+jKF5iUEIdy31ldmxXERG0pD6HBY1GR++
FHKqQweiVkUH1au4TPy61RH4VsmDccLFz+G9ZclvJ51tIn62aLKUYeRtzNNp7Mkj
C3Bq3MckkJp/CDcY+bkgevc35zDPOCA/8tlj/dvR2OhSplpQDio2fj3Hq/moeHsU
1UtMDefz5zhL81Fdz0oz0s/MDVH74pfvehxsB5mYIOtFiFe6F84k9mvPS1CX5hlJ
r5DgfpsLPFunv08TOuqnie+DaRKvEmw=
-----END CERTIFICATE-----
Generated at Tue Jun 3 07:24:28 2025 by rpki-client