Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f08e8f5-7b7b-3b07-a123-fc0751a28073.roa
File:                     7f08e8f5-7b7b-3b07-a123-fc0751a28073.roa (raw, json)
Hash identifier:          g4h0ZZdbJnFaVwPBBO13DGbihBuhDSAcmDbO0Qutig4=
Subject key identifier:   07:D0:4A:6A:73:20:09:58:5C:59:BD:81:6E:10:88:B0:58:42:5B:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF728FD5F0DFCD25338C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f08e8f5-7b7b-3b07-a123-fc0751a28073.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.210.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:72:8f:d5:f0:df:cd:25:33:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2d2c615f-0d56-4e28-af74-b8aab9233762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:5d:6b:4e:1d:13:13:69:8f:11:df:01:ab:
                    5e:6f:87:86:b3:9e:e1:a1:c4:35:56:4e:6d:85:00:
                    8f:e4:22:63:94:87:68:18:4b:44:0f:c1:12:ed:d5:
                    36:ec:a9:d7:8a:b5:8a:7f:0c:b8:f2:d2:48:c8:83:
                    72:c3:cc:58:5a:22:00:03:97:d6:72:0a:c0:8b:49:
                    68:69:33:8c:05:d2:79:7e:8a:4e:56:40:1f:08:7d:
                    99:6a:dd:a3:3f:0b:6e:f6:83:b0:d1:a1:20:a2:7f:
                    22:6c:c6:6d:d5:7e:80:41:65:9d:e3:e0:f8:72:5b:
                    15:15:ef:b4:4e:54:8b:e0:cc:b0:05:69:bd:97:2d:
                    05:92:92:b9:9f:e2:31:95:96:cb:c0:f6:b2:53:7f:
                    0b:68:cf:c3:b0:54:94:09:4c:08:ce:22:d7:a1:23:
                    d2:08:01:6b:87:35:f5:ec:bb:38:e3:46:20:10:01:
                    5e:23:21:75:96:a9:37:32:49:c6:93:bd:b0:ee:82:
                    ba:ee:c0:ee:1f:cf:b9:bc:e7:39:29:a8:a2:ea:54:
                    e4:1b:c0:10:d7:75:2b:ad:d6:98:30:63:2d:3a:c8:
                    bc:59:3f:17:a8:b9:d5:5c:7b:d3:ea:a2:9a:ff:8d:
                    90:57:4f:7e:e6:d6:42:df:50:33:d2:79:61:79:5a:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D0:4A:6A:73:20:09:58:5C:59:BD:81:6E:10:88:B0:58:42:5B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f08e8f5-7b7b-3b07-a123-fc0751a28073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:20:b3:76:bd:68:4c:84:18:68:b4:80:45:d1:6b:32:08:56:
         fb:dc:c6:51:16:bd:e5:9a:4c:15:7f:3c:22:7f:40:60:f4:3f:
         64:32:bb:fa:4a:10:16:21:c2:29:d6:83:1b:74:15:89:eb:86:
         75:53:92:65:f1:36:dd:a6:a7:68:48:73:f4:8a:57:39:f8:56:
         3e:27:78:04:46:b4:82:12:34:7a:02:3b:84:45:76:35:0b:0f:
         39:ca:c0:af:7c:f7:1d:d6:83:55:07:01:c1:4d:17:a9:a2:84:
         5f:b2:b0:69:c3:bf:5a:a5:14:31:45:c4:ba:5b:34:33:b5:18:
         14:16:9a:87:49:32:92:8e:3a:39:8c:27:b8:fc:48:49:e0:2a:
         22:91:04:fd:b6:6a:50:eb:2e:23:a7:9d:03:06:4b:71:1c:bb:
         62:b0:3d:f8:38:c7:6e:99:86:5d:fb:62:a5:49:e0:87:37:03:
         3a:aa:a4:ec:7d:9e:31:9f:2a:46:08:47:18:dc:ca:11:fd:51:
         ec:22:81:3e:22:d7:42:da:3a:f5:c8:47:57:65:e1:57:c8:7f:
         31:a1:d5:ad:8f:48:38:33:3d:c2:16:ea:9c:ae:eb:7b:29:61:
         69:b9:db:ab:57:6b:cd:2f:14:d8:50:d9:d6:8f:4a:ca:cb:5a:
         4e:5f:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:19 2025 by rpki-client