Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5e1537-2c38-3937-9bdd-b219b7562fc4.roa
File:                     8e5e1537-2c38-3937-9bdd-b219b7562fc4.roa (raw, json)
Hash identifier:          28IDr8J3uJT5Mph+fRss4a/EPVtlBlIRC54IQI4ZmOo=
Subject key identifier:   32:6E:6A:2E:E3:29:58:55:6E:29:60:4E:73:A6:A1:97:63:E6:6D:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319366F0D63A19E11C5C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5e1537-2c38-3937-9bdd-b219b7562fc4.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.16.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:93:66:f0:d6:3a:19:e1:1c:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=497b1c0d-14ea-42fb-b233-bd158c2f13de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:c4:bb:81:70:87:d1:05:03:52:b2:04:2e:
                    e0:ae:51:ab:78:ee:9f:8e:25:88:84:5b:99:39:a4:
                    42:a1:8c:cd:41:de:5a:13:6f:9d:8b:12:6a:83:76:
                    09:d0:02:a1:38:f7:45:dd:f0:6e:3e:74:85:ea:f0:
                    9f:17:42:b5:26:7c:f4:74:d6:43:db:c2:73:0a:c1:
                    9b:95:18:a2:7a:d9:56:7d:9d:99:52:72:65:cd:7a:
                    2e:87:ce:94:97:f8:d0:41:89:0a:b1:f8:62:c2:72:
                    51:38:1e:b3:05:83:7b:d0:28:27:1c:25:96:08:66:
                    e0:10:f8:f6:1b:56:d2:f6:6d:a6:15:a0:fc:37:aa:
                    c2:e7:04:be:98:40:c7:46:60:eb:b9:0a:b4:1d:31:
                    27:c0:ef:f5:04:de:48:0d:7a:5c:9d:7a:c6:38:9c:
                    f7:70:34:14:66:12:97:00:d4:ff:e5:c8:fe:fd:53:
                    e4:27:38:ab:11:10:dc:d9:2d:f4:8f:c4:d4:87:2e:
                    7e:8d:bc:ad:f2:6d:62:0f:f6:aa:27:2c:fa:62:79:
                    f7:be:66:24:5f:8f:a3:d5:16:0f:e4:48:8c:54:c2:
                    d1:2d:a7:bc:74:b3:be:05:c1:d7:a7:98:0e:4d:09:
                    6a:0b:c3:fc:41:a4:68:b6:c7:ac:e4:25:f2:e7:83:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:6A:2E:E3:29:58:55:6E:29:60:4E:73:A6:A1:97:63:E6:6D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5e1537-2c38-3937-9bdd-b219b7562fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.16.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9c:a0:1f:a0:31:f0:a9:55:46:b7:1f:e4:09:42:34:3d:6c:
         b5:26:b8:00:c2:7f:4a:e9:68:c9:cb:f8:b2:63:5b:0a:1e:a3:
         21:01:ec:6e:23:14:a7:c0:b3:38:d7:9d:3f:2a:4a:2f:0e:07:
         22:37:fa:ac:38:4d:49:1e:74:9e:fc:bf:95:26:b4:33:57:49:
         c6:8f:14:d9:20:51:e9:55:1e:69:85:8c:a1:a4:87:78:36:80:
         08:68:1f:b1:97:af:cd:84:b9:d5:36:10:53:ee:3b:c6:a9:84:
         a1:f0:96:54:23:27:b3:ea:0b:bf:83:f8:3c:5e:c0:40:be:82:
         cd:d7:aa:bd:80:9e:d9:bd:52:b0:af:09:4d:90:21:e2:46:20:
         8d:dd:f8:bb:a7:47:4b:b6:19:7d:4b:be:52:59:d7:50:a7:4a:
         16:94:4c:da:63:44:23:b9:24:79:45:39:db:33:00:25:25:f9:
         51:11:dc:7d:2d:ff:66:f1:be:2a:aa:d5:4a:dc:23:86:89:ae:
         72:1f:14:b0:37:e7:55:da:b4:f9:2e:52:10:a9:62:ed:2d:82:
         b0:0b:9c:15:93:b3:3a:fe:b6:65:98:13:84:c5:07:21:d1:1a:
         b6:79:aa:71:94:e7:ad:6e:31:b7:da:1a:15:e5:03:5d:37:4f:
         f5:3f:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:13:20 2025 by rpki-client