Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7772c9a1-89ce-327d-bd80-c1826e2e4e36.roa
File:                     7772c9a1-89ce-327d-bd80-c1826e2e4e36.roa (raw, json)
Hash identifier:          92Es0o5MMOy/2ZtDBZE/COnTKkxIru9q3cHGs6rgojE=
Subject key identifier:   CC:4E:58:FA:9A:BE:52:10:F8:5A:67:A8:26:0C:82:25:8C:3E:1D:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7551BD0AF569E9AD21EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7772c9a1-89ce-327d-bd80-c1826e2e4e36.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.237.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:51:bd:0a:f5:69:e9:ad:21:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=19e7ce3d-2f46-4a6c-a504-b857ba47cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:05:df:b7:20:de:8f:79:5d:e5:c3:52:39:
                    c5:33:15:81:06:02:56:d3:7f:99:dc:8f:c1:bb:15:
                    a7:1d:ce:c0:a9:cb:bd:7b:6a:5f:f2:eb:59:80:df:
                    20:d7:e9:e1:0d:82:51:fd:33:cc:14:76:d8:58:c4:
                    cd:b2:27:65:1d:69:56:38:2f:dc:ec:9c:16:b0:db:
                    11:0a:87:a5:9e:92:b0:04:c8:8f:1b:09:b0:d2:90:
                    85:c3:06:80:50:f2:c6:70:ae:3f:50:4e:91:6a:bb:
                    98:b1:b4:80:3b:69:f7:27:0d:12:4c:f1:5f:28:31:
                    41:ba:4f:b1:bb:63:86:b3:85:ca:79:5c:1f:43:6e:
                    c1:0e:fa:06:d5:63:74:90:92:83:5d:76:f5:78:4b:
                    55:e4:0e:c5:81:cf:4c:f0:98:5d:e1:d3:55:62:05:
                    60:a3:f6:a2:c5:b6:a6:db:f6:22:56:56:55:3b:28:
                    8b:17:61:07:90:bb:78:f7:b1:06:6a:fe:8a:f4:f5:
                    46:20:1e:a9:0f:c7:03:2a:ee:1b:43:74:8d:fe:44:
                    7f:07:8f:45:1e:5f:e7:a6:04:a4:39:93:70:18:b9:
                    6f:0d:24:d0:13:26:46:b3:83:6c:72:d6:3f:92:34:
                    89:35:7f:3e:4b:e3:11:bf:01:53:8d:aa:3f:b5:7e:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4E:58:FA:9A:BE:52:10:F8:5A:67:A8:26:0C:82:25:8C:3E:1D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7772c9a1-89ce-327d-bd80-c1826e2e4e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:05:ad:05:76:fc:b7:35:7d:9f:39:0f:c0:ec:c0:b0:f8:
         33:c8:33:6f:16:bd:25:d8:fa:73:34:39:a4:44:20:32:12:44:
         d9:be:2d:26:c0:fc:aa:e8:37:0c:7d:ce:78:f1:2f:70:1f:2b:
         31:8d:f7:fc:88:60:47:34:4c:ba:ec:26:18:07:2c:30:7e:93:
         1e:36:a6:bc:9b:54:16:75:54:9e:c6:e4:e8:fd:d3:0d:e3:50:
         de:57:d1:be:f3:a4:ce:13:3a:70:72:21:14:12:14:0f:8d:bd:
         fd:f5:5e:df:20:db:cf:f9:46:8e:b1:a4:bf:b1:ab:14:22:21:
         c7:cb:98:a6:ce:ca:e9:25:32:4c:c6:6c:1f:27:16:d6:45:f2:
         17:fd:e1:b6:bd:1e:63:08:a8:40:24:65:38:74:ca:92:82:a9:
         36:1d:6f:3a:76:4d:96:58:76:f4:8d:4d:3f:e7:0f:04:df:bf:
         bc:1a:b3:21:a7:f2:62:78:7f:6b:89:0b:e5:9a:59:70:a4:c4:
         73:db:1f:57:93:1e:42:cf:f7:ef:22:8a:0a:79:37:52:d6:b0:
         98:c3:f6:e3:d9:ea:2c:9e:d8:f1:1c:c3:22:0e:49:7d:e2:3d:
         e9:86:85:28:e2:a9:41:94:98:01:8f:e4:64:c4:52:cd:eb:ff:
         a0:0f:ef:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dVG9CvVp6a0h6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
MTllN2NlM2QtMmY0Ni00YTZjLWE1MDQtYjg1N2JhNDdjYzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0kF37cg3o95XeXDUjnFMxWBBgJW03+Z3I/B
uxWnHc7Aqcu9e2pf8utZgN8g1+nhDYJR/TPMFHbYWMTNsidlHWlWOC/c7JwWsNsR
CoelnpKwBMiPGwmw0pCFwwaAUPLGcK4/UE6RaruYsbSAO2n3Jw0STPFfKDFBuk+x
u2OGs4XKeVwfQ27BDvoG1WN0kJKDXXb1eEtV5A7Fgc9M8Jhd4dNVYgVgo/aixbam
2/YiVlZVOyiLF2EHkLt497EGav6K9PVGIB6pD8cDKu4bQ3SN/kR/B49FHl/npgSk
OZNwGLlvDSTQEyZGs4NsctY/kjSJNX8+S+MRvwFTjao/tX6HqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxOWPqavlIQ+FpnqCYMgiWMPh04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzc3MmM5YTEtODljZS0z
MjdkLWJkODAtYzE4MjZlMmU0ZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEvBa0Fdvy3NX2fOQ/A7MCw+DPIM28WvSXY+nM0OaREIDISRNm+LSbA
/KroNwx9znjxL3AfKzGN9/yIYEc0TLrsJhgHLDB+kx42prybVBZ1VJ7G5Oj90w3j
UN5X0b7zpM4TOnByIRQSFA+Nvf31Xt8g28/5Ro6xpL+xqxQiIcfLmKbOyuklMkzG
bB8nFtZF8hf94ba9HmMIqEAkZTh0ypKCqTYdbzp2TZZYdvSNTT/nDwTfv7wasyGn
8mJ4f2uJC+WaWXCkxHPbH1eTHkLP9+8iigp5N1LWsJjD9uPZ6iye2PEcwyIOSX3i
PemGhSjiqUGUmAGP5GTEUs3r/6AP74U=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:49:35 2025 by rpki-client