Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8feb3e47-fbd4-3a6a-ab20-937a30fc2e99.roa
File:                     8feb3e47-fbd4-3a6a-ab20-937a30fc2e99.roa (raw, json)
Hash identifier:          j8DMiRl52b0N6ndmsXbeV3Ckaz8oS88M1GA6rWN/tRw=
Subject key identifier:   A2:52:A1:F2:7B:31:EE:3D:CE:56:39:56:6E:43:D5:87:0A:86:DC:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF7FEBF38A7378E3575C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8feb3e47-fbd4-3a6a-ab20-937a30fc2e99.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.44.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:7f:eb:f3:8a:73:78:e3:57:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=87a95395-5156-4227-a216-5616db2d66b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:06:dc:32:2b:0b:be:e4:42:48:ee:f0:c1:
                    3e:06:bc:64:3a:30:d2:b0:0b:d3:78:fc:7c:c8:d3:
                    1f:6b:4e:38:f3:24:37:67:28:05:9b:2f:01:cc:a2:
                    1f:2a:28:d7:fa:b2:f8:fd:c2:ed:bf:08:e4:e6:22:
                    1e:6a:49:e2:86:fa:ea:ea:22:68:ef:1c:fa:1c:a1:
                    a1:34:13:1c:70:47:fb:e3:cd:09:da:f8:04:ba:2b:
                    df:ad:aa:8f:30:86:f7:3d:0c:ef:8c:73:71:74:22:
                    e0:50:85:55:a2:ee:d9:61:01:cc:5e:54:83:31:ed:
                    19:34:f9:bf:6a:e6:2e:f6:92:9e:3b:90:47:b4:b9:
                    b4:1c:b8:46:5c:52:6a:9b:a9:18:d1:65:1f:ee:ba:
                    f3:65:20:19:07:c8:0e:53:08:99:b9:8c:8a:f5:9b:
                    79:7e:12:91:68:69:c3:db:c4:35:6e:d7:9d:0a:14:
                    95:66:d8:ea:ba:17:e7:6e:bf:07:e1:9a:f6:36:5d:
                    5d:2a:6a:b0:67:dc:4f:ac:47:49:23:f1:23:b6:cb:
                    87:a9:c0:d6:c1:30:da:80:31:e2:22:17:a3:26:d7:
                    16:30:a9:72:8a:96:6f:06:5c:27:34:2c:f4:17:f7:
                    04:f3:c9:4e:6f:8b:3e:2f:7a:02:15:92:db:0e:fe:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:A1:F2:7B:31:EE:3D:CE:56:39:56:6E:43:D5:87:0A:86:DC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8feb3e47-fbd4-3a6a-ab20-937a30fc2e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.44.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:6a:65:7e:5f:85:01:27:6d:94:40:59:e5:fb:6f:23:9e:
         74:f8:7f:46:1d:70:3e:2a:c8:e9:b5:06:3f:36:c7:03:1e:81:
         41:bc:c5:9f:a1:ec:a7:24:4c:7b:01:c2:25:ef:5f:50:3e:12:
         08:20:cd:02:52:61:33:61:59:9c:47:79:0a:20:f7:ae:e3:9d:
         0e:f7:c9:ca:f8:a1:3e:cd:0f:ea:ba:4d:e2:97:91:34:7b:7c:
         92:09:8e:16:ee:e4:43:c2:e8:15:55:85:1f:79:cf:9a:da:1a:
         42:b1:8e:02:6a:55:ad:e1:12:dd:9d:de:ac:22:11:d6:08:79:
         51:db:3d:75:ac:92:c2:d7:6f:76:a5:e4:89:f4:4d:f4:9e:23:
         44:d6:c0:69:d8:63:17:9c:24:09:0d:1c:77:5b:34:5d:3a:b0:
         98:c5:bf:dd:72:c1:84:bf:2d:ef:f0:c3:62:ff:f4:81:2f:48:
         a4:2e:76:be:c4:e1:cb:e0:f5:86:86:f7:97:19:22:eb:83:42:
         cd:3f:55:1e:4b:c7:be:ec:80:4b:2c:04:45:14:f3:af:c0:68:
         b8:10:f1:82:a5:6c:ca:56:22:16:6b:09:24:26:23:8d:3e:c8:
         75:53:a5:5a:cd:28:1d:62:f6:7e:c4:a4:92:75:8b:8d:88:e2:
         80:50:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:10 2025 by rpki-client