Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/842676ee-da65-3709-ba36-5b9c5d0ad09c.roa
File:                     842676ee-da65-3709-ba36-5b9c5d0ad09c.roa (raw, json)
Hash identifier:          jfNcxmAIQ9xcFs2y2gPG2aND+gquR1SzEYEs6ubpGV8=
Subject key identifier:   4C:0A:D3:3B:31:09:22:9E:13:E8:F3:3C:A2:ED:43:0B:84:90:87:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431844625051A54E5D86600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/842676ee-da65-3709-ba36-5b9c5d0ad09c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.126.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:84:46:25:05:1a:54:e5:d8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f07c528c-6d40-417e-988e-02679c84fbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:11:ed:83:1e:5c:77:92:e4:5a:06:01:ea:
                    33:74:e4:16:cb:01:51:b6:75:4a:e7:e0:bb:db:98:
                    8f:94:20:06:80:e4:a4:9d:ca:09:08:2b:c1:f1:d8:
                    9d:aa:4d:57:3a:ec:4b:eb:26:7b:dc:fc:b4:31:2e:
                    64:40:48:95:59:24:08:96:2a:e5:9e:57:90:cb:aa:
                    e8:e4:d6:8d:60:79:0f:28:79:c4:4b:a8:b8:d6:40:
                    39:df:cd:2e:70:37:2f:61:ab:f2:4f:f2:50:5c:25:
                    73:d8:a8:95:e1:2c:34:38:73:74:4c:0b:5a:1c:5e:
                    4f:f0:e1:2e:fb:27:9e:18:7b:b5:60:c5:50:44:05:
                    3a:aa:3c:19:fc:06:10:a3:c5:fd:66:71:b4:8d:0c:
                    e4:66:8b:ef:c5:f5:c1:97:dc:a9:9e:84:70:16:6b:
                    9f:ed:11:bf:d6:7b:87:d0:fe:06:89:03:5b:92:35:
                    7f:02:ac:0b:12:ad:25:14:de:da:fc:e1:1b:72:24:
                    fb:e8:e8:dd:16:9e:84:c1:3c:eb:04:ec:e2:4a:39:
                    85:d3:fe:62:b9:56:19:72:a4:59:d4:09:5b:cc:31:
                    0b:07:47:62:e2:a2:b5:30:0c:89:2b:da:a3:b5:ab:
                    11:4e:0f:49:b3:9f:65:b8:03:d1:cc:26:17:76:dd:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0A:D3:3B:31:09:22:9E:13:E8:F3:3C:A2:ED:43:0B:84:90:87:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/842676ee-da65-3709-ba36-5b9c5d0ad09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.126.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:38:66:86:76:51:46:61:30:bf:b5:ea:fc:93:81:04:de:
         fe:96:70:d7:ec:5c:41:54:20:49:bd:44:be:f5:f8:45:38:8c:
         23:7f:76:b3:2e:7c:0e:2f:c8:3f:a3:5b:b5:e9:f5:d3:6f:9c:
         79:a3:10:91:c5:df:e9:60:ac:0c:ab:84:42:bf:01:f0:78:73:
         17:0e:6e:58:4a:10:c3:08:37:48:56:23:76:62:0e:1a:42:01:
         c4:80:cf:7f:5e:22:77:57:32:58:1a:84:1f:59:71:e3:94:48:
         13:b2:48:3f:7a:b7:5b:5e:e1:62:11:75:01:13:a3:04:8c:ba:
         d7:a1:5f:62:49:2e:48:d2:da:d6:58:0e:2f:b7:0f:cd:ce:e0:
         d0:b6:4c:46:c8:b4:67:12:9b:b4:0d:ab:b0:0d:6c:b5:28:d7:
         39:30:4b:8f:6c:88:3b:21:0f:29:dc:59:8e:1e:dd:54:69:19:
         eb:6a:c4:d9:6c:10:47:e6:f2:50:9d:1f:1f:f7:e3:c9:fc:c2:
         39:2f:04:c2:51:94:d5:41:2c:e1:8a:bf:f0:61:7b:fe:a2:32:
         8e:01:af:86:39:96:87:50:36:18:78:d7:4c:21:44:41:56:cc:
         00:5d:eb:f1:f4:fe:57:a5:6f:42:c4:51:1a:3e:d4:96:4a:3e:
         d1:49:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:31:35 2025 by rpki-client