Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/693f105f-be32-35fb-aadc-7a8cd711c40d.roa
File:                     693f105f-be32-35fb-aadc-7a8cd711c40d.roa (raw, json)
Hash identifier:          8fKexo5x+zZWPFQTJ47+qG2XSrWFGPkBWyoV708g/dU=
Subject key identifier:   B8:1A:CD:DE:13:81:53:7A:F2:9E:93:18:0C:A7:3E:CF:54:BE:12:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FE5E1DB1C14C8BF0A4A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/693f105f-be32-35fb-aadc-7a8cd711c40d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.67.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:e5:e1:db:1c:14:c8:bf:0a:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=40b7b82d-1363-414e-b19e-ad524538bb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:5b:01:b3:a1:de:de:b1:b4:aa:55:33:df:
                    e0:55:62:c6:8b:05:af:c6:1c:60:1b:26:a5:47:dc:
                    73:d8:5b:78:69:9b:78:2d:13:08:92:77:d5:c2:7f:
                    01:e3:3a:ad:7a:44:69:51:a0:8e:44:d6:6d:9d:4e:
                    0a:03:69:cb:fa:18:eb:a3:31:2c:35:8f:4c:6a:e8:
                    23:e8:4e:50:5e:4f:bd:f3:57:32:6d:51:a3:1a:5a:
                    39:42:35:ef:4d:c5:f8:88:d3:cb:48:f0:a3:ed:f6:
                    71:fd:49:92:71:b2:d3:ce:17:3d:50:6d:66:8b:d8:
                    ae:93:ce:6c:8e:28:76:f0:82:52:e6:c4:33:ed:22:
                    6d:20:d6:45:9a:12:e5:10:3e:08:70:59:5c:ed:e2:
                    b3:62:e4:67:dc:04:b9:35:1b:a9:72:6d:cd:79:42:
                    e0:ad:6a:ee:fe:4a:a6:17:e7:4e:12:6a:15:40:4c:
                    86:c7:3d:f4:1e:d2:fa:e9:db:a8:c1:5b:89:03:71:
                    ad:af:a9:1b:70:52:e5:22:f1:39:78:9c:52:7c:eb:
                    32:36:c7:db:38:84:46:45:5b:41:05:5b:8c:23:95:
                    8a:74:19:d0:27:88:5b:d4:32:f9:2d:35:15:9a:6b:
                    36:ad:31:0b:41:2b:2d:a1:c5:11:8a:37:2d:ac:68:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:CD:DE:13:81:53:7A:F2:9E:93:18:0C:A7:3E:CF:54:BE:12:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/693f105f-be32-35fb-aadc-7a8cd711c40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:c0:5f:d3:aa:a6:55:b7:21:17:21:4d:d6:57:67:b9:f7:
         1d:4e:af:65:f9:eb:e0:52:df:c4:3c:b6:b3:98:5b:8b:5e:5c:
         f7:5c:3e:9b:dd:24:66:c6:d4:db:19:4d:66:86:3a:e9:54:24:
         8c:88:09:71:1e:83:15:5f:6a:45:c3:bd:1b:45:c4:80:07:28:
         1c:5d:c8:c1:73:ea:7c:33:d3:d1:c1:46:09:01:75:65:f2:5a:
         2a:1f:eb:18:40:c7:58:77:e7:dc:9f:e4:7f:55:5d:a5:c3:68:
         8c:c0:eb:3e:8b:f7:33:2c:07:28:f2:88:f8:b1:8a:b7:a4:8f:
         6b:bf:e4:fa:81:51:fd:03:d7:4e:fb:ee:90:6c:82:4b:ee:f1:
         df:22:9e:10:1a:8d:87:e0:63:49:a0:b3:06:d2:f6:8c:45:ad:
         d0:c6:11:64:d4:60:1f:67:78:23:ed:35:85:89:11:5d:58:9e:
         43:2d:af:7b:b6:a5:b3:89:9c:71:d1:b6:6e:e8:11:fd:f5:8e:
         c7:89:91:91:17:e1:fd:f7:47:da:97:c5:c5:3f:45:db:19:b4:
         a6:83:3b:2b:64:ea:0d:03:34:60:6e:31:43:81:a3:de:35:fe:
         ee:df:96:ec:03:da:5c:38:46:38:e4:90:0d:db:df:3f:35:c4:
         b1:d6:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:47:09 2025 by rpki-client