Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80144a86-4981-3d4c-a8af-8488c2efda5e.roa
File:                     80144a86-4981-3d4c-a8af-8488c2efda5e.roa (raw, json)
Hash identifier:          qSlZc3pSPMJSfMvO4e3q9mTJD0IKjIpWjjJCQl4o6lQ=
Subject key identifier:   14:37:8A:AB:B7:EE:AE:76:F2:71:ED:58:93:A7:F7:92:C3:60:29:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43198BE17500679D059E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80144a86-4981-3d4c-a8af-8488c2efda5e.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.17.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:98:be:17:50:06:79:d0:59:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=fed6dd7e-271f-4ab0-bccf-339f59c1080e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:51:23:d4:5c:89:3c:9e:24:e7:77:10:08:
                    96:56:b8:0f:e3:a0:8e:d2:01:35:66:18:7f:ec:a2:
                    b1:5b:07:08:9b:02:54:0f:96:15:6b:26:d5:c1:1e:
                    2e:c0:e7:80:e3:16:41:d6:4b:b7:4f:85:0a:b9:d5:
                    0f:cc:0e:35:36:f8:84:87:94:3b:c5:b5:24:2e:29:
                    b1:d6:6e:8a:a6:04:5f:33:3e:ba:4e:e5:ab:01:ab:
                    2d:86:3f:44:c2:88:12:44:33:0e:71:94:d1:08:a3:
                    df:6b:bc:73:e7:3e:93:41:f6:89:c3:0f:2d:d2:93:
                    ce:20:60:08:df:c5:fc:77:14:a7:48:07:0a:d6:a8:
                    d0:8a:a4:5c:ff:d3:99:f8:46:49:4e:5c:e5:01:56:
                    9f:b0:ac:f8:4c:bb:9f:19:e8:aa:48:09:ac:d9:1b:
                    00:7c:22:74:bc:6c:2c:46:d4:98:e8:d3:d5:4e:57:
                    48:6c:9b:a0:0c:18:33:d0:0c:7d:31:0c:06:64:db:
                    7a:7c:14:65:ae:c3:93:62:1a:e7:e6:eb:8f:33:19:
                    20:01:e6:f9:75:05:20:8f:8d:05:84:33:9b:b7:a0:
                    58:49:93:66:0d:5d:c0:9e:0d:db:a4:7c:21:01:58:
                    91:a1:6b:1c:bf:0b:3d:94:30:d9:01:ee:75:46:f1:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:37:8A:AB:B7:EE:AE:76:F2:71:ED:58:93:A7:F7:92:C3:60:29:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80144a86-4981-3d4c-a8af-8488c2efda5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:14:a4:c7:3a:d6:89:e4:f6:c6:d4:7b:50:43:ed:08:c1:
         c2:77:d6:0c:e8:a0:ae:fa:5b:6a:21:53:fe:92:e1:9d:53:1a:
         e7:e1:92:a9:e3:d8:72:a7:b9:a6:04:13:a6:4e:65:34:7b:14:
         dc:0a:bf:52:4b:e1:0f:4e:29:c4:d2:6f:8c:08:66:45:00:5e:
         52:52:0d:dd:6c:ea:b9:72:5a:6c:4d:03:d7:f1:d3:dd:12:f8:
         a3:c3:2f:e8:ba:a1:98:43:73:9c:63:82:89:d3:d2:5c:95:f4:
         37:02:44:7c:94:a3:60:f1:3c:1e:96:c6:b2:fd:37:cb:40:fd:
         27:a7:7e:8c:06:8c:b9:fa:f3:de:47:28:a0:24:ba:93:fe:18:
         7a:17:87:d9:02:d6:b1:f6:93:e4:ce:7b:96:a8:a7:bb:26:20:
         48:f7:d8:ab:6e:5e:ff:30:c3:fe:ad:0d:81:6b:2f:d1:03:c9:
         2e:52:cf:1a:a0:ec:f1:04:dc:fe:bf:07:98:d9:22:9d:6f:4a:
         9d:50:d9:be:96:53:9d:eb:3d:db:a5:79:cd:46:11:ed:04:5a:
         a7:af:48:a9:18:06:2b:fc:d6:d7:46:83:ba:73:a4:1d:28:4a:
         4d:e6:dc:c6:1e:3f:e6:28:c2:a3:44:3f:96:e5:c4:a5:a6:b8:
         04:1f:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:41:52 2025 by rpki-client