Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63561373-3436-31f8-9f30-de3e98e6f523.roa
File:                     63561373-3436-31f8-9f30-de3e98e6f523.roa (raw, json)
Hash identifier:          HfSCu8rtxn9+CQTswbVcF+1YPKPna+eoh55ewJfgNrA=
Subject key identifier:   7D:83:12:3E:CC:2E:AE:31:47:D8:36:2B:99:26:77:27:D9:C9:CE:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430D094019D51EFB531A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63561373-3436-31f8-9f30-de3e98e6f523.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        73.191.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:d0:94:01:9d:51:ef:b5:31:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=c49907e1-2d66-4c76-9dd0-aa1a353c18dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:d1:76:65:38:a8:66:c1:dd:27:e1:b0:19:
                    db:5c:71:66:49:7a:f8:cb:19:b8:51:4c:06:14:e1:
                    28:d5:04:1b:2b:fc:36:7b:8c:62:b7:bc:15:91:73:
                    49:50:4c:af:20:00:f4:e1:3d:23:2e:7f:5c:40:f2:
                    4e:7b:dc:ce:9d:8b:0c:40:2f:d5:2b:c6:93:99:41:
                    f8:5e:7e:51:64:72:02:5d:b7:cd:fd:b0:2a:ae:ac:
                    93:3b:ff:1b:5f:58:3a:4a:03:1f:a7:db:58:8b:11:
                    f5:c6:ca:86:90:64:0c:b3:fd:b8:c9:db:d9:16:dd:
                    61:ad:15:29:45:0e:18:0e:d2:85:b0:4f:f7:a9:58:
                    92:8d:ac:ff:28:b0:66:b7:41:bd:09:0e:33:a8:10:
                    88:75:9a:a0:97:78:e2:76:d7:66:58:76:40:48:34:
                    da:f9:e9:2e:93:14:d6:3f:db:90:79:0c:f1:f5:7a:
                    e0:4a:cd:4c:2e:11:f8:43:1f:51:3e:b9:af:31:d0:
                    43:e4:f3:1f:94:4f:0f:94:e9:fa:38:dd:ad:7e:59:
                    48:f9:b9:8f:d1:99:61:6c:7e:8b:6a:22:78:9f:85:
                    89:49:c1:ed:fd:f4:ab:87:7d:08:a6:63:e8:1c:85:
                    3b:80:25:6c:67:df:d9:c0:76:aa:36:6b:8c:15:13:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:12:3E:CC:2E:AE:31:47:D8:36:2B:99:26:77:27:D9:C9:CE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63561373-3436-31f8-9f30-de3e98e6f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:94:f4:61:69:bf:61:54:f4:fd:8a:42:48:98:4e:03:08:8e:
         ff:13:cd:93:18:56:5e:6c:1f:93:1f:25:0f:0c:c4:02:d6:53:
         67:ad:ba:d8:59:61:13:bf:92:93:6f:88:06:6c:ce:b9:59:f5:
         d8:19:47:91:53:2f:bf:05:be:aa:8a:b9:08:a7:bc:7b:a6:fa:
         38:b3:ff:f4:be:ce:c7:8c:bc:0d:24:79:cf:61:ec:e9:12:f8:
         50:7c:37:74:26:e7:a3:23:ea:02:be:6b:86:54:26:05:36:cc:
         67:3d:31:a5:30:dc:18:eb:f3:33:18:fd:3f:71:c6:f6:27:60:
         f2:bd:a4:5d:d0:28:5b:e7:eb:e3:84:b1:10:4e:c8:ea:e5:d4:
         d0:24:74:97:bc:0c:ef:a9:dc:82:e2:a4:ef:ed:b4:87:b9:52:
         76:5d:b7:82:e0:12:d0:07:2a:d3:88:04:6e:ac:0c:30:4f:c5:
         93:3a:c5:97:09:17:81:15:7c:06:0f:55:f9:df:46:7e:08:58:
         9e:3a:4e:6c:f9:b3:87:7d:b2:f1:55:68:0a:d1:09:06:ba:87:
         75:eb:45:4b:9e:68:0f:f8:6e:6b:bb:fb:fa:22:b1:0b:15:11:
         ba:40:ca:b1:07:f3:55:db:c4:94:f3:7e:fb:e5:06:99:47:2f:
         0f:d7:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:27:54 2025 by rpki-client