Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72da6197-485e-3866-8760-9c5ba28b865a.roa
File:                     72da6197-485e-3866-8760-9c5ba28b865a.roa (raw, json)
Hash identifier:          G2wnZXlqBJUK68oo1x+wYBoW/md+U36W65k/OBQfcLs=
Subject key identifier:   BE:55:EB:E7:B2:B9:40:D0:F0:CF:34:34:3C:FB:92:7C:70:88:97:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319EE4E41CBA0222D85AE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72da6197-485e-3866-8760-9c5ba28b865a.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.218.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:9e:e4:e4:1c:ba:02:22:d8:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=534bbc87-c12e-4429-b2e6-c006545797b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:af:1c:75:5e:e3:74:d9:d4:58:da:ea:8d:
                    b0:40:24:4b:18:7b:56:4a:f8:49:51:03:30:28:cc:
                    34:ca:4c:e6:57:50:c1:ea:f6:74:6d:0a:44:a4:e1:
                    0d:0c:d8:20:7c:76:08:b6:22:6a:e4:d9:06:ff:5a:
                    0b:52:3b:7d:a9:e5:5b:ce:ad:8a:d5:4c:bb:a7:1d:
                    f9:d2:a4:dd:64:10:b3:8e:76:76:a1:c2:2a:e1:a6:
                    93:4a:34:ff:6a:16:97:b8:db:b0:0f:f4:8e:87:87:
                    21:ae:e3:aa:8d:47:1b:58:53:1f:4e:5d:0e:23:93:
                    d8:31:b8:dc:a8:33:eb:6d:5e:36:ad:d4:71:1e:34:
                    c1:66:30:bc:43:d9:f4:a4:f1:06:e1:ed:c3:76:49:
                    76:91:eb:0c:7f:86:b0:14:49:2f:fb:7a:42:18:c6:
                    a3:9f:81:86:89:3a:62:f4:a4:78:98:f0:f1:05:f0:
                    e3:ce:b3:bb:f8:cf:a2:6b:d5:77:53:0f:68:17:c9:
                    ef:e5:e2:57:ed:65:f0:5e:79:64:fe:fc:6a:47:30:
                    63:a1:a9:56:2a:1a:71:68:27:55:13:2e:a6:e5:d9:
                    48:d4:f8:5c:31:67:8d:e2:cc:f2:e1:69:0c:66:fb:
                    af:08:98:eb:43:f9:df:fa:ba:b7:28:db:18:bf:9b:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:EB:E7:B2:B9:40:D0:F0:CF:34:34:3C:FB:92:7C:70:88:97:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72da6197-485e-3866-8760-9c5ba28b865a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.218.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:26:03:98:81:9a:84:b8:81:11:d4:92:e7:13:fd:7b:b4:
         d7:7e:e1:e4:01:02:ab:13:68:3f:46:87:af:f6:22:32:d5:2d:
         21:6e:53:d4:60:55:8d:45:5b:d9:f6:b2:7a:59:c3:07:50:e5:
         e9:26:b9:4b:13:61:88:b4:cd:8a:c1:50:95:25:67:47:a4:c4:
         e9:12:23:79:17:33:df:5d:9c:c9:cb:bd:e2:13:fd:26:f5:a0:
         27:ab:86:0b:e0:6e:7c:f8:f0:19:a9:23:8a:31:cc:fc:14:de:
         e4:87:32:13:ac:10:de:06:0c:d6:9b:77:f8:52:1f:ce:e7:40:
         34:20:8f:fd:34:e1:73:6d:f4:a2:70:bc:8e:32:4f:fa:17:4a:
         d6:a4:dd:7b:86:13:91:83:49:c1:68:9d:23:18:4e:21:2f:c2:
         41:94:90:41:7e:7b:16:8b:1e:7b:77:3d:c0:f6:ea:e9:ab:b2:
         bf:e7:6a:5b:9f:79:10:a0:d7:79:b8:60:3a:47:86:28:d7:26:
         63:de:34:38:59:70:3d:87:59:49:0f:58:67:5d:14:5c:96:a9:
         be:3c:8d:76:f0:9c:89:e3:4c:af:4f:c7:91:37:dc:78:84:76:
         19:4c:5a:54:19:6e:6b:1f:96:33:f6:5d:88:91:c1:b8:a7:47:
         be:3c:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:56:51 2025 by rpki-client