Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3671f9-3e79-3a62-918c-bfc1be3b12a9.roa
File:                     8c3671f9-3e79-3a62-918c-bfc1be3b12a9.roa (raw, json)
Hash identifier:          nwinrafiU6WuN6Cr4btR1EbEhXyp/1hMN4YIdX0Jd0s=
Subject key identifier:   43:B2:CE:25:E1:71:7E:44:07:06:A2:7D:D9:03:A2:E5:55:6E:87:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF96D82D90757A4B61D246
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3671f9-3e79-3a62-918c-bfc1be3b12a9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.73.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:96:d8:2d:90:75:7a:4b:61:d2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ea77eb5d-66ba-453c-96f4-1f2358462983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:08:3b:ed:75:60:a9:e6:7c:24:ab:b8:97:
                    d8:1f:ca:49:af:c8:9d:7b:37:cd:30:38:73:cc:ff:
                    0a:b3:dc:93:40:ee:96:16:f1:8e:0d:c8:ba:88:0e:
                    49:d3:b4:1a:bd:47:48:8f:f1:cb:99:93:72:f3:37:
                    7c:be:28:c4:82:7c:8e:3d:36:14:6c:d7:ba:6a:a0:
                    1c:e4:da:3d:eb:86:f3:35:b0:59:07:b2:61:27:4a:
                    75:4e:81:4e:b9:a8:54:d7:bc:6b:16:53:9e:39:ac:
                    eb:5c:50:79:99:41:8a:73:74:65:c8:10:75:02:06:
                    97:af:f1:69:ad:47:2c:f6:16:a7:7c:1d:58:cb:8d:
                    41:27:84:45:f5:a5:d4:ad:79:b3:75:21:72:7e:3a:
                    89:88:e4:82:68:2b:28:b9:36:92:b9:87:37:7f:96:
                    81:87:e9:e7:e3:be:0a:b3:08:e0:3b:e9:e8:5f:bf:
                    ed:6d:c9:f5:65:ec:f7:17:88:e1:25:fc:08:09:95:
                    c5:3d:c6:a8:30:3f:a1:1c:6b:2f:f7:38:93:6a:60:
                    14:76:4d:2f:87:9f:5d:f1:a4:d0:d9:80:b5:78:bc:
                    af:32:dd:dc:e0:c4:92:68:8e:93:67:42:18:88:80:
                    b6:77:82:07:5c:45:13:b2:0b:95:83:f1:f3:f3:1b:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:CE:25:E1:71:7E:44:07:06:A2:7D:D9:03:A2:E5:55:6E:87:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3671f9-3e79-3a62-918c-bfc1be3b12a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:de:86:87:74:ab:a7:bb:db:8f:ed:55:16:62:3d:44:b4:
         49:8d:c5:2b:c5:65:06:77:20:52:c6:db:7c:24:b2:9b:d0:c2:
         b4:32:d1:36:be:7b:23:8d:90:e8:8c:4b:1e:63:dc:46:b2:6f:
         8b:24:d8:e1:b4:01:46:10:60:ae:2c:b1:02:4d:1c:d8:75:c8:
         06:18:6c:9c:ea:8e:41:fd:89:07:96:fd:c1:ab:cd:61:12:48:
         60:af:38:fe:8d:c6:d9:3f:04:0a:e6:f7:df:75:26:f6:5a:b5:
         3b:35:50:0e:23:ba:5f:01:25:ae:a7:17:0e:c9:01:18:b6:70:
         3c:3b:e9:8b:7f:a5:39:3a:ea:78:4d:c2:4f:a0:76:7e:af:38:
         c1:27:db:4c:bc:c2:ad:e2:e6:06:79:00:5c:f9:82:29:d4:17:
         7e:d6:32:ec:9b:84:48:7f:9a:1e:99:48:2a:80:71:7b:54:8e:
         32:9a:da:66:24:88:8b:f2:65:ee:39:05:9f:c8:18:26:ea:4e:
         84:11:28:66:2f:e4:ad:6b:6a:46:c2:8b:00:74:eb:1e:75:a2:
         f0:58:30:42:61:ee:a0:21:76:c4:87:3f:96:70:8a:20:bf:3c:
         79:a2:78:e8:4f:69:1a:79:d4:95:65:88:30:54:2f:8d:c5:f3:
         ff:24:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:27 2025 by rpki-client