Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d9cb96-3972-36d4-8f7e-51a4171a0353.roa
File:                     64d9cb96-3972-36d4-8f7e-51a4171a0353.roa (raw, json)
Hash identifier:          HSlsaFPHJcwEpsNeBK1ISkk3fAeO6KIyMyukdltgVHU=
Subject key identifier:   ED:C3:5F:7D:FA:73:09:99:97:3B:DA:AB:9A:CC:35:D1:C6:9F:1C:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431B91B06D35AE74D43CFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d9cb96-3972-36d4-8f7e-51a4171a0353.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.38.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:b9:1b:06:d3:5a:e7:4d:43:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f12796ae-4d91-4f2e-9ab9-bdf1dc1d6cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:4a:6c:71:9c:0b:cd:79:d8:61:d2:18:6f:
                    e1:55:4d:d1:01:0e:61:0c:30:8a:fc:c7:49:e6:60:
                    ba:bd:4e:93:95:98:7c:01:d7:32:f2:e5:8a:94:f1:
                    88:5b:17:91:17:cd:b4:d4:b9:7d:d0:40:5a:58:02:
                    2c:d3:bb:e0:17:02:41:5d:1d:b7:ea:3a:83:9b:20:
                    7b:cf:62:2c:75:6d:e9:12:f1:6e:5b:fc:03:ad:a4:
                    52:8f:02:7a:c5:e0:8e:fc:c0:bb:c0:ca:f4:af:d7:
                    01:4c:73:94:7f:cd:cf:71:f7:cf:23:46:a8:4f:63:
                    9d:70:37:f9:6f:1f:bb:3a:82:ff:3e:e7:ee:68:3d:
                    05:97:c4:90:b6:79:de:ce:26:bf:90:65:d9:94:62:
                    8b:4e:b7:05:49:71:52:1a:6c:15:00:12:df:0e:3d:
                    53:7c:a4:a2:c1:4e:9b:44:0e:c0:74:5d:bc:2f:35:
                    07:22:f3:39:c0:7c:6e:08:a5:46:10:68:0a:2a:48:
                    b7:c2:08:97:0c:0c:76:79:38:16:4b:8a:9c:e1:f8:
                    0f:d9:12:49:2f:dc:b0:59:39:34:31:33:b3:ce:cc:
                    a2:7f:44:fb:20:48:3b:0b:a0:3c:49:6d:04:0c:e2:
                    20:8a:ca:48:ab:82:0b:eb:c4:06:8f:b6:7c:fd:70:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:5F:7D:FA:73:09:99:97:3B:DA:AB:9A:CC:35:D1:C6:9F:1C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d9cb96-3972-36d4-8f7e-51a4171a0353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:92:27:ea:e6:b2:79:90:2f:52:f3:06:a9:0b:49:44:b2:
         bd:fc:6d:b6:31:cc:f0:f6:17:7b:c4:46:9b:fc:c9:35:4b:9f:
         65:8a:e8:8f:6e:7c:4b:48:df:f6:19:6a:61:9b:c1:29:cb:4c:
         62:f5:fb:44:b1:b7:73:55:9d:c2:82:a0:f4:0c:04:65:67:0f:
         ef:2b:07:ec:22:5c:c9:8b:c7:34:ff:32:8b:ed:f8:a1:52:65:
         c4:c5:9f:28:90:c6:96:32:13:ac:a6:5f:7a:a3:68:8f:68:99:
         20:fa:d6:ab:e0:19:b7:78:ed:97:a3:3b:19:8c:99:1a:51:d3:
         a6:5a:b2:6f:f1:14:d1:fb:55:92:fd:bf:47:0b:73:a5:07:53:
         15:91:56:4b:0a:5c:84:eb:0a:f5:5a:c4:da:b8:a4:87:7d:e8:
         4a:bf:e6:48:bc:25:36:f5:e2:a4:71:73:8d:9a:9b:08:09:89:
         7d:b2:2d:d1:d5:c1:fd:06:d4:fe:de:4c:0c:65:75:c7:ca:70:
         5c:9a:bf:f9:cd:32:c8:ac:a3:80:9b:02:61:37:6c:34:18:c7:
         f2:e1:79:24:74:68:65:5a:69:b9:b2:5c:e6:61:9e:37:82:72:
         19:e3:2f:4b:7a:97:17:43:ce:06:29:fa:77:58:1e:cd:6b:50:
         ed:ca:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:38 2025 by rpki-client