Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92aa389d-189d-3571-8ab5-d441090be11b.roa
File:                     92aa389d-189d-3571-8ab5-d441090be11b.roa (raw, json)
Hash identifier:          qvGDHcQN8ne3o6gcfNhGE2bKMtlVM6OtsHHynUeUkBg=
Subject key identifier:   E8:6D:98:8F:08:9C:3A:BA:F0:E3:F0:78:6D:FA:E5:99:FC:B5:18:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C065DB93726E3FA97A68080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92aa389d-189d-3571-8ab5-d441090be11b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.168.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:5d:b9:37:26:e3:fa:97:a6:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7da1ea0d-ac91-4ab2-a29e-9181722759e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:55:03:f3:41:16:8b:be:5e:c2:30:7d:8e:
                    56:97:1e:8f:77:46:be:2e:55:1d:54:91:90:62:a6:
                    5e:44:6b:57:0a:7d:e1:93:20:77:31:99:ea:03:b8:
                    a3:ff:3f:5b:95:1f:7a:c7:ea:df:e7:0e:a1:b8:86:
                    36:ea:48:df:e7:87:df:64:06:28:3d:de:f3:4b:6c:
                    a2:a9:9e:b9:63:2b:1a:c9:29:f3:28:0e:27:8f:d7:
                    99:7e:b9:3c:1b:5e:fc:5c:ed:7f:bd:ab:5c:0d:6e:
                    6f:1a:b9:a6:ca:09:44:c6:ce:7e:27:9c:15:2c:3a:
                    81:a7:e2:f5:95:6c:bf:55:bf:8b:96:12:06:96:a3:
                    41:7c:3d:a1:cc:05:8e:f7:0c:96:7c:4e:98:83:27:
                    3b:63:68:08:e7:53:0d:5b:22:ed:31:20:bc:17:cf:
                    37:45:e4:8b:9c:8e:2a:e6:0b:58:a0:61:d9:91:4a:
                    ca:b3:e1:87:54:5b:53:68:2e:39:59:01:7e:a4:eb:
                    20:7a:3c:64:96:4a:7c:1f:96:04:87:5f:1b:8b:1a:
                    11:68:db:d5:b0:1f:ef:06:04:7d:08:ba:f3:94:01:
                    96:e5:d7:81:c1:d0:8e:e5:c1:3b:9f:f5:76:fc:15:
                    21:8e:45:14:96:a5:2c:d2:db:ae:ce:0c:8f:7d:e2:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6D:98:8F:08:9C:3A:BA:F0:E3:F0:78:6D:FA:E5:99:FC:B5:18:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92aa389d-189d-3571-8ab5-d441090be11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:d3:fd:e9:f8:3e:13:9a:88:9e:74:a7:41:47:03:ab:9d:
         9b:5c:04:2d:e7:77:44:37:73:77:04:17:cc:74:6d:2a:de:84:
         3f:6b:80:ee:9a:6b:da:fd:9f:ea:6b:c3:f8:f1:53:8b:02:cc:
         a2:37:e1:3d:b5:d3:a3:a9:a0:5e:09:8e:71:c1:73:34:27:fe:
         8f:0d:71:23:ea:71:b1:af:08:e7:97:9a:83:f3:f7:78:5b:b8:
         8e:90:ff:89:96:15:46:37:43:ef:21:c6:dc:1f:1a:df:24:9c:
         3b:46:c6:56:35:97:e9:de:ae:c5:01:4b:c0:a4:99:41:a4:94:
         35:a4:ff:ba:a8:04:c3:f6:b0:7c:8d:4f:d8:7d:62:2f:11:cf:
         78:7a:95:a1:e8:fd:7f:0c:35:99:1d:e6:60:29:56:f0:59:18:
         d6:6d:7b:94:df:97:f3:63:e5:d8:81:63:97:21:79:2e:0f:e7:
         e7:0a:a8:5d:35:a4:8b:59:26:d5:33:73:f8:80:c1:40:39:8e:
         8c:23:9b:86:82:58:ac:61:fa:f3:0c:11:39:e7:b2:39:94:e9:
         2f:b9:99:cb:82:ae:e5:f9:f5:f0:86:93:58:85:9f:92:2e:bc:
         69:82:52:e4:e4:d2:90:22:02:77:05:70:be:a7:cb:56:60:82:
         a7:be:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:57:20 2025 by rpki-client