Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa
File:                     74a89ece-f802-3c15-8dcc-0965e55764d1.roa (raw, json)
Hash identifier:          3mxA7yFcnQLneaVW5YCiAgRan2xtt6AyDAk6pfjRBOE=
Subject key identifier:   B9:22:8D:0A:0F:5D:72:CB:1C:D9:86:30:C5:F6:07:54:37:3E:29:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4325A628D66D3597C3E2E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.6.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:5a:62:8d:66:d3:59:7c:3e:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=78adf076-347e-41d2-903b-db4bb213cec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:58:fa:d6:43:d6:14:b1:d1:c9:63:9b:d6:
                    19:0c:9b:33:a7:ae:17:01:00:46:cd:1f:52:75:b6:
                    d1:1b:5f:68:37:3b:fe:b6:c6:b2:ee:98:19:54:65:
                    d8:e4:84:e1:a4:d4:20:cb:0c:bc:89:e7:dc:5b:24:
                    68:1f:c9:51:ba:19:9d:b1:b3:2d:39:16:37:ba:11:
                    84:74:5d:98:c9:6e:b2:41:f8:ad:f3:0d:47:1b:8a:
                    54:1c:8b:86:a5:09:5f:cf:bb:5f:2d:51:0f:00:08:
                    cd:d3:10:71:00:9b:17:0d:9f:6c:ab:5b:9b:5f:11:
                    41:cc:ed:0e:51:a4:2e:27:2a:1e:a1:ac:fd:09:c8:
                    43:b8:2d:2e:0f:a7:d1:1c:e7:7a:b7:77:11:25:2b:
                    21:33:a4:c3:ef:5c:39:e8:4b:fb:fe:4c:58:18:e1:
                    c9:1a:d2:11:74:51:59:2e:25:8e:48:02:a0:69:a6:
                    a8:3f:de:0f:d6:f7:84:fc:f4:c1:86:80:90:29:fe:
                    49:89:62:cd:c9:d5:43:da:36:a6:ac:e8:10:61:3c:
                    b5:2a:e0:75:ce:7c:4f:c6:f7:b0:07:16:a9:19:b0:
                    86:53:6e:06:1d:99:95:27:f8:4b:72:75:7a:91:16:
                    03:1f:76:16:31:ff:dc:83:55:21:c1:cb:46:9a:a7:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:22:8D:0A:0F:5D:72:CB:1C:D9:86:30:C5:F6:07:54:37:3E:29:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:6d:ef:bf:6c:26:9c:ac:4c:b2:de:fa:6b:f3:9e:e1:57:
         9e:ca:29:41:60:4b:c0:eb:d9:56:32:f8:f7:7a:ff:aa:84:5d:
         c6:34:ab:27:d2:76:3f:f1:c9:1d:1f:ba:63:33:34:78:f3:c7:
         c2:4e:cc:16:07:e4:d1:5e:0c:a3:48:d4:f5:91:a0:0e:c3:d3:
         af:1f:6b:20:6c:d3:31:a3:71:e4:0e:af:8a:41:31:2a:3d:6b:
         3d:30:b6:78:1a:3a:04:90:6c:ee:13:1d:20:e7:df:6a:2d:d9:
         8b:37:6c:50:a6:dd:6f:dd:d4:29:23:62:0c:16:64:d3:9a:0d:
         eb:48:81:c3:fd:b5:8b:08:a0:9e:d7:34:6a:66:30:93:f9:ef:
         ee:3d:7f:29:e6:eb:0d:22:04:03:a1:5b:65:05:ce:7e:43:f5:
         27:34:bc:a4:76:d9:4c:06:29:43:32:60:58:71:54:c8:85:6a:
         7e:e3:7d:6e:21:cd:38:33:1f:da:e5:1a:7a:27:d7:e7:84:78:
         d0:cb:1e:48:d8:a3:5c:a0:e5:c0:20:b8:cb:65:02:45:56:5d:
         a7:1c:0d:f7:fe:49:5b:58:38:fe:73:ae:1e:e9:64:9b:3a:93:
         49:71:05:f1:af:2e:f4:45:01:95:c4:f8:73:a3:42:ac:de:a0:
         1f:ab:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:58:18 2025 by rpki-client