Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8177bc29-1549-32d5-9948-b0be362cee85.roa
File:                     8177bc29-1549-32d5-9948-b0be362cee85.roa (raw, json)
Hash identifier:          L4KL5d3PTWyVZ81AQNKcmPm2jekDu8QYTpFMSppodmM=
Subject key identifier:   62:B2:4D:6B:D7:16:09:54:61:7C:EE:F0:E9:79:3C:D0:1E:E1:C4:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0691C584522617775549C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8177bc29-1549-32d5-9948-b0be362cee85.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.74.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:91:c5:84:52:26:17:77:55:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fb6c5162-324a-4e68-874c-88456b8d1a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:a2:c0:03:1c:41:22:c2:15:7d:7d:3b:c2:
                    67:85:f5:45:48:0b:ab:23:f1:53:78:c1:fd:e7:52:
                    d2:99:a7:3e:cf:f5:7a:8b:66:0d:cb:ed:83:7b:1e:
                    6f:6a:5c:e4:59:24:96:e1:c6:c1:fb:e9:a6:81:0a:
                    87:d8:a5:29:b0:33:92:1a:f8:04:82:65:f5:4c:66:
                    0f:5c:9b:cc:a8:bb:7b:0a:23:7f:b5:e3:bf:d4:e0:
                    b8:93:bc:f4:17:38:a8:71:d6:d0:82:ad:87:d8:d7:
                    db:af:39:16:8c:b8:8f:06:fc:ae:06:f6:db:b0:ca:
                    38:cc:61:d0:f8:cb:22:48:8c:d9:b2:02:c3:bd:9d:
                    a3:a4:18:a9:fe:f1:75:7b:cb:00:f4:3c:f6:63:86:
                    81:4f:76:d4:74:94:54:9b:06:0a:77:a5:f4:66:e5:
                    39:03:bf:20:91:8f:77:1e:2f:26:17:e2:c4:5c:13:
                    d2:8a:f8:9b:ba:e2:83:c1:62:f1:d8:57:bc:e0:4c:
                    33:94:9d:c1:62:9c:bd:12:19:73:29:ea:8a:2a:9c:
                    5f:9a:f6:d2:a1:59:e4:1a:ec:b0:0c:d0:74:fe:c7:
                    ad:14:fe:b6:67:4b:d9:92:2e:87:54:24:5d:b6:b5:
                    5b:5c:da:57:cf:a8:5e:30:94:31:c9:fb:9d:30:5d:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:4D:6B:D7:16:09:54:61:7C:EE:F0:E9:79:3C:D0:1E:E1:C4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8177bc29-1549-32d5-9948-b0be362cee85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:1b:91:5d:ce:d2:6d:d2:22:5d:00:85:20:30:dd:fd:ce:
         9d:5a:78:24:da:c4:30:28:d2:60:52:97:6b:dc:e7:e8:6f:27:
         c8:76:ed:7e:e2:75:aa:6c:91:46:9e:cd:69:ac:ae:a9:ff:48:
         64:46:b7:11:93:3d:e7:a4:52:0a:77:ea:94:27:96:95:15:48:
         ff:25:f4:38:8d:75:b2:ce:46:7a:c8:8b:d7:f8:63:f7:a6:c2:
         e3:6d:90:39:b2:7f:ea:1d:bf:ad:4a:9d:d4:82:31:d3:fb:80:
         12:dc:bb:d8:42:07:e5:81:b6:af:61:b5:83:c6:9d:29:ef:28:
         ce:a1:14:bb:56:7a:a4:04:a6:d7:19:a1:15:5e:6e:de:25:a1:
         75:0d:9a:63:1a:7e:53:82:bb:4b:f1:92:74:c9:33:77:75:4b:
         a6:bb:08:d0:63:c3:cb:94:45:5b:94:98:ea:e7:01:e9:f3:7b:
         a9:e5:c5:ef:9f:bd:11:e8:20:71:31:cc:e9:f9:3d:de:5e:72:
         99:3b:3e:fe:c9:66:43:cc:b3:53:23:f4:b0:1c:1f:c1:8c:cd:
         bd:17:18:cd:7f:de:dc:b6:3f:2c:56:89:d6:54:55:5f:9c:cb:
         22:82:fb:dc:b1:3a:92:90:df:60:4a:44:e0:19:e9:2b:e9:7b:
         72:b4:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:56:52 2025 by rpki-client