Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cc413dd-8db9-3038-b676-9cce707289a5.roa
File:                     6cc413dd-8db9-3038-b676-9cce707289a5.roa (raw, json)
Hash identifier:          FkByT7N/XDVA0BJc/edFfrxUu4/UWWDz00hpB+bF0rs=
Subject key identifier:   4E:1E:E5:F3:2D:0E:8D:D4:9D:21:2F:D4:90:C7:73:39:0F:94:97:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06FE82F889FCB5D31C5680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cc413dd-8db9-3038-b676-9cce707289a5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.70.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:fe:82:f8:89:fc:b5:d3:1c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a26655c8-a517-4314-955b-0169e00d1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d8:95:ea:f2:1e:10:52:25:0d:3b:d6:f4:c7:
                    e9:8f:5a:3b:07:24:1f:e1:0d:e4:13:c1:dd:4f:d1:
                    d3:16:66:95:48:94:30:88:b5:ef:45:03:da:9e:1a:
                    ba:e4:66:34:bf:c5:f4:02:c1:9f:70:b4:a6:00:0e:
                    20:2a:f1:b2:13:bd:32:b5:f5:ec:b0:28:44:f6:52:
                    de:86:cf:f8:8b:34:58:ea:b8:68:57:bb:14:36:2d:
                    48:52:b9:8a:00:f3:4c:d3:5a:d2:3c:c3:bc:b0:42:
                    7a:fa:fa:9b:40:70:26:91:81:66:5d:1b:4b:80:d6:
                    ee:1d:17:a3:3d:6e:e2:41:9d:01:b3:e6:9e:33:16:
                    9a:78:35:ee:ba:90:87:e8:6c:1a:54:39:4d:1c:2e:
                    13:1b:9e:ce:2b:36:28:58:b9:44:44:26:29:d0:59:
                    51:c4:29:3a:77:e2:e6:33:32:9c:b4:72:b1:52:16:
                    73:fb:c5:ad:0c:79:12:29:9c:16:68:dd:7e:a3:03:
                    7e:62:01:6a:5b:28:d6:7d:69:83:bf:d9:cf:e3:41:
                    79:8f:7b:e8:fd:c5:88:b8:30:3a:71:1e:92:63:76:
                    05:42:a5:ba:59:aa:7b:45:40:53:10:e5:0c:4a:b3:
                    e7:2d:00:fe:0f:bc:21:5e:dc:16:3d:0d:94:33:f8:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1E:E5:F3:2D:0E:8D:D4:9D:21:2F:D4:90:C7:73:39:0F:94:97:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cc413dd-8db9-3038-b676-9cce707289a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:12:a0:fb:e9:ab:78:a1:21:ff:2e:d4:f6:b6:3b:0c:2f:
         b6:bc:32:07:07:fb:48:79:8c:0b:c8:f4:15:41:e1:78:e2:48:
         99:a0:29:d6:02:bf:bc:2a:e3:72:45:59:c1:97:3f:d6:60:3b:
         3c:5a:f6:61:5a:b4:ca:81:58:23:da:51:99:71:e0:c3:31:a1:
         eb:c2:c1:99:67:7c:09:50:9c:1f:a9:e8:87:0a:fc:d8:fc:32:
         ff:a2:f6:43:7b:da:0f:5a:40:10:21:8e:64:af:3b:a2:60:2e:
         f4:cc:14:a9:ab:9b:3f:98:b4:43:f8:38:80:85:1f:1a:60:fb:
         e3:ab:cb:20:67:36:6d:d4:e3:1f:f3:ba:48:d2:7c:ea:d2:fc:
         79:c4:90:c5:c5:6d:d5:bc:cb:43:f7:2d:9b:97:f6:29:0d:9d:
         f6:fe:e7:df:25:e3:64:77:23:e1:df:f5:b0:4a:5c:62:98:70:
         b2:a3:77:fc:57:ad:f1:b6:7a:2a:19:a5:bf:02:23:57:31:b6:
         4c:bb:ce:50:dd:87:a6:d0:e2:2e:04:8f:5b:fe:22:4f:42:b0:
         2e:29:08:5a:c6:ad:a7:4f:ad:79:fc:66:55:2a:47:e1:3c:57:
         a0:d2:62:c5:8e:b5:f0:40:d3:c2:0f:56:aa:53:d2:ed:af:e1:
         3f:81:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:27:16 2025 by rpki-client