Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643eab78-2c62-3a1a-9445-7af4e277c573.roa
File:                     643eab78-2c62-3a1a-9445-7af4e277c573.roa (raw, json)
Hash identifier:          jcAlGT0EruqVP4vwiR0i+7puj6xt6qc2ozXV011RsqY=
Subject key identifier:   2B:7B:04:C0:58:D0:2A:04:C0:21:6C:24:44:55:A8:7A:62:5D:F6:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05CD78BFFB37AE17F95280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643eab78-2c62-3a1a-9445-7af4e277c573.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.226.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:cd:78:bf:fb:37:ae:17:f9:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=93c55db1-211c-47c7-bf7c-f10b5591baa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:b1:fd:6c:78:1d:7a:ba:c7:a3:43:a1:c1:
                    dc:e9:11:b8:fb:05:51:a9:20:8c:44:60:dd:17:c4:
                    99:b3:92:9b:6f:35:93:84:a2:ce:b2:ac:48:9d:af:
                    a1:c0:5f:d7:e2:47:38:18:cd:8c:63:30:cb:85:ce:
                    9d:2e:59:9a:c5:0a:24:c5:98:34:5b:18:0c:f3:04:
                    17:3c:01:0f:30:00:01:2d:cc:08:69:a2:c4:2b:68:
                    b6:f2:7a:f7:22:73:12:c9:39:31:ef:ef:c6:f7:29:
                    f1:3f:50:39:59:8b:66:9c:75:31:81:9f:65:85:e0:
                    83:06:91:02:c2:54:98:0b:89:d9:6e:be:3b:a4:94:
                    b6:47:ae:32:ad:95:b6:31:50:2e:50:52:2f:e2:9f:
                    2c:21:24:db:e6:b2:1d:f9:14:c5:03:4c:20:c0:a7:
                    6c:6f:23:3a:0e:ce:70:ce:39:b8:97:a4:54:86:fd:
                    6e:c3:0a:37:86:63:4a:ed:62:d5:56:32:b5:d2:d8:
                    8f:48:a3:76:37:d4:f8:bf:a3:d2:e0:74:34:7b:93:
                    65:22:31:7f:71:94:ff:39:75:42:98:ed:cf:db:23:
                    8d:b2:21:fa:30:86:f3:3d:58:4e:28:5c:16:23:6b:
                    34:d3:bc:59:93:3f:ed:73:00:11:e1:67:de:e4:41:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:04:C0:58:D0:2A:04:C0:21:6C:24:44:55:A8:7A:62:5D:F6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643eab78-2c62-3a1a-9445-7af4e277c573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:55:4d:b2:13:d2:27:53:53:4c:50:91:87:47:6f:d3:68:
         ab:ec:dc:4a:4e:e8:ba:48:79:b1:bb:13:80:05:8d:45:06:ff:
         78:29:0c:43:85:23:6f:8c:d0:ec:48:6e:db:17:43:39:cf:01:
         a3:9c:30:9f:7b:b4:67:69:9a:77:d2:34:0c:cc:e8:c6:2d:99:
         dd:9b:d8:87:90:60:48:06:92:e2:d6:1d:63:0b:ec:b4:1a:05:
         2d:e9:fd:19:44:ce:9b:f3:ab:a4:51:a2:5c:7a:ea:8f:3f:a8:
         f5:53:37:26:d2:40:6a:d4:11:51:93:73:7b:f4:c5:63:fd:14:
         20:5f:9e:16:5a:07:bb:2c:bd:01:fd:15:0e:01:7a:49:4d:e2:
         57:ee:bf:1d:b8:22:eb:be:df:25:a2:29:4d:d1:22:09:47:de:
         93:83:56:cf:5a:83:54:f9:e5:03:1a:ba:e0:c3:1a:a1:05:3d:
         d8:7d:f6:eb:b1:ae:ad:82:21:0f:48:a5:c0:05:5d:1c:74:00:
         f2:19:db:e2:ff:3e:e3:04:9a:b7:30:70:80:16:71:37:ea:cf:
         06:f1:e5:c7:f3:39:3b:80:40:9c:28:70:4c:64:22:8b:71:ff:
         3e:05:e3:c2:d7:93:b5:33:d0:63:7b:19:49:0f:60:cc:c2:7b:
         db:17:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:19:30 2025 by rpki-client