Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83095013-6abe-37ca-8ffb-736446cf4a72.roa
File:                     83095013-6abe-37ca-8ffb-736446cf4a72.roa (raw, json)
Hash identifier:          4DmC66L8zgbZyiVDTJVGR4xr2NYK9tkaYoLfMl+Z8eU=
Subject key identifier:   20:31:6B:F2:A1:06:B4:D8:9E:96:BF:B1:8A:12:84:33:4C:C4:7B:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF78CD6A6AC42104509400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83095013-6abe-37ca-8ffb-736446cf4a72.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.246.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:78:cd:6a:6a:c4:21:04:50:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=df2e301e-24ab-433b-ad30-b5bc6ab75baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:d5:c0:7e:3a:ce:65:03:0e:47:dd:73:ef:
                    77:60:51:91:0e:88:a0:52:47:34:c7:f5:7d:da:26:
                    14:d5:47:a5:5d:fc:c1:98:e7:92:93:b2:f2:b1:ce:
                    12:5a:e2:d4:b7:40:42:a1:a1:f2:83:c9:b1:71:05:
                    5d:68:c4:1a:62:dd:d3:8b:ac:72:57:0b:9a:06:e1:
                    44:15:be:a8:b8:5e:5e:f4:d5:1c:2a:e6:e8:b3:32:
                    37:55:cc:d0:ca:31:4d:bc:4e:2a:88:3e:63:90:b3:
                    02:12:56:4c:b6:34:6e:b9:31:94:08:ae:b2:67:e8:
                    89:a0:ae:11:df:1e:e3:42:9b:da:d8:ea:05:9b:a1:
                    91:04:52:f4:ad:e1:28:00:aa:fb:6b:16:aa:39:c8:
                    da:c5:20:f9:34:03:ff:61:91:99:79:bc:ad:9a:c9:
                    bc:e8:68:d1:ea:4a:bc:66:c3:30:ea:cc:95:f4:e6:
                    68:14:83:d0:6f:3a:40:da:74:a4:0c:c4:40:ed:ac:
                    28:15:ef:1a:23:21:72:98:ca:9a:2d:33:93:52:ca:
                    30:ca:8c:67:3b:46:64:10:8c:67:d4:4c:97:e5:f0:
                    4a:13:76:3f:d8:05:17:80:1d:06:63:ae:ce:ce:e8:
                    82:52:51:65:a1:bb:53:b1:be:d5:33:7d:46:76:a3:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:6B:F2:A1:06:B4:D8:9E:96:BF:B1:8A:12:84:33:4C:C4:7B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83095013-6abe-37ca-8ffb-736446cf4a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:32:8e:f7:c1:c8:90:05:1e:a8:4f:5e:c7:ba:27:60:62:
         a6:25:38:d6:20:d0:f0:89:47:9c:6d:09:b5:ce:c4:27:ff:62:
         a6:33:37:1d:95:40:cc:28:1c:46:37:9a:5e:4a:ad:8b:69:08:
         53:81:54:46:be:9a:1f:c3:8e:f5:a0:10:78:97:1a:a9:36:8f:
         6e:4a:04:c0:b5:7d:e6:73:60:28:d8:96:9e:c5:22:f3:e0:5e:
         cc:36:3e:d3:2c:49:5b:70:85:db:eb:5a:76:2e:82:eb:71:2e:
         57:4e:78:ba:fd:87:88:3f:c8:1e:a2:0e:87:70:d6:6b:de:d7:
         f9:2f:d4:e2:46:66:4b:0e:84:bf:f5:bb:cf:07:a5:e8:ef:87:
         c2:32:e6:22:59:98:99:72:a0:1d:8f:4f:2d:b8:3f:32:3a:9d:
         84:37:e0:d4:00:34:19:0b:83:2a:2f:16:c2:00:49:bf:e5:f8:
         67:92:19:f5:d6:a7:49:83:61:2a:00:71:d5:c5:65:74:8b:a5:
         5f:87:e0:d9:b4:9f:40:a1:84:f3:10:76:16:74:9c:71:32:c3:
         4e:e6:d7:6e:12:42:bf:79:76:78:08:48:15:68:10:17:5a:3d:
         74:99:2e:a2:04:32:d1:5a:24:de:fe:e6:f5:c3:ef:c1:ae:45:
         f8:9a:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:30:07 2025 by rpki-client