Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d37750e-b50f-371f-82a0-1fa80dd7db4b.roa
File:                     6d37750e-b50f-371f-82a0-1fa80dd7db4b.roa (raw, json)
Hash identifier:          gh4E3qjsqFXALXfDgRGorFBNWWVLP8uPymCWJiCNb3k=
Subject key identifier:   30:FF:36:48:44:11:8B:D8:5A:5B:B9:79:BC:A5:80:7D:36:4B:94:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4325F67DB04EDEAF25FD940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d37750e-b50f-371f-82a0-1fa80dd7db4b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.77.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:5f:67:db:04:ed:ea:f2:5f:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=79d30071-7bbc-4b6a-95c0-c39d72b0e229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:fd:19:7a:9a:46:d0:f4:27:8b:f4:f1:9d:
                    83:f4:cc:3a:7d:fb:3a:4a:28:a8:24:42:2d:df:30:
                    b5:14:7b:41:d4:c6:4f:80:ed:e1:1a:78:65:6c:64:
                    a6:65:7b:ac:9c:79:58:20:c8:6c:48:05:6f:a9:d1:
                    65:05:02:33:58:d6:2c:19:73:85:f9:29:48:a2:f5:
                    97:d0:ab:57:1e:15:3d:5b:ef:11:82:cb:57:b1:55:
                    a8:8d:78:9e:d1:ef:78:18:3e:21:dd:0c:05:b1:b2:
                    b1:af:4f:29:1d:7b:81:d9:ac:bf:fb:25:12:be:8c:
                    32:aa:46:80:f2:15:08:3e:1b:ec:0c:9a:cd:60:a3:
                    cc:ee:b1:23:68:0d:dc:06:20:2f:4e:b0:cc:27:c8:
                    4a:83:1e:c3:55:05:30:b5:a3:ec:67:b9:b9:79:19:
                    eb:bc:b6:4c:95:4c:cf:2f:f8:ff:d0:2c:68:34:69:
                    f1:40:35:a8:95:5e:fa:e1:f9:b6:c8:06:ed:12:34:
                    79:d9:a3:02:8c:76:f7:36:76:38:24:79:d5:2d:9a:
                    af:28:4a:9a:6b:0d:e6:13:d0:b9:b4:01:74:ff:b8:
                    a8:b2:af:17:0b:61:3d:90:70:03:26:18:27:48:3b:
                    4c:8e:73:78:b7:b9:a6:fc:a5:b4:7a:b2:1e:0d:fc:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FF:36:48:44:11:8B:D8:5A:5B:B9:79:BC:A5:80:7D:36:4B:94:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d37750e-b50f-371f-82a0-1fa80dd7db4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:08:64:5e:9b:d8:1b:62:e9:8b:a2:41:e3:8c:6b:40:b9:e0:
         c3:55:32:04:81:91:b3:ff:eb:f0:40:b4:f8:71:5c:21:47:0c:
         28:bb:fa:27:bc:dc:a5:82:35:3f:d4:e9:82:78:17:f7:86:c9:
         87:71:18:cd:83:07:0d:af:fd:f9:30:d1:d3:93:18:57:28:d0:
         85:72:1e:64:72:ba:9b:a2:ff:d8:8a:23:52:84:56:41:d0:43:
         b1:7b:5e:78:a0:3f:ee:54:81:c0:d9:43:78:72:d0:39:ff:47:
         c1:3e:5b:db:35:b4:8e:df:9b:2a:aa:6d:2b:f5:4a:04:db:71:
         38:f9:40:c5:60:67:b6:87:84:03:84:2d:7a:86:1e:fe:32:9c:
         f7:b7:b2:5b:28:6b:6f:a3:cf:b0:aa:10:10:43:17:73:92:f2:
         7a:9f:90:85:97:ce:c5:7e:fe:e0:5f:c2:c8:af:09:3f:b4:15:
         13:19:ee:3a:92:66:2d:ca:df:bc:e5:7f:61:7e:06:a9:b8:ba:
         e0:53:77:db:79:86:a9:b6:28:55:af:1c:9b:f4:90:e8:d3:98:
         02:bf:92:ab:fd:c7:ff:8f:26:8a:01:29:87:70:39:59:69:51:
         9c:02:f0:5b:56:c4:ea:8a:c7:ab:4e:33:42:7b:fd:34:0d:9d:
         b7:73:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:23:53 2025 by rpki-client