Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95aaecfb-a1e7-3a2f-9a51-9bd174b082a4.roa
File:                     95aaecfb-a1e7-3a2f-9a51-9bd174b082a4.roa (raw, json)
Hash identifier:          SpkYEyVBXpMXZKWptqczfyDv+DwL8AuSLhe4g0C6IKs=
Subject key identifier:   DA:7D:9B:16:56:F3:B6:54:00:EC:17:F7:9E:E9:3F:95:C5:26:F7:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05ABCB2A493D07D8AE5CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95aaecfb-a1e7-3a2f-9a51-9bd174b082a4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.80.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:ab:cb:2a:49:3d:07:d8:ae:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ca5dc8b2-d783-438c-87c1-b3b99df5fab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:c6:89:3e:17:69:04:9f:c1:4e:bb:7f:b2:
                    16:b4:c0:6d:98:0b:17:89:cc:5f:8c:5a:b7:29:14:
                    87:c7:ad:dd:a5:b2:c1:fb:52:d5:6e:d3:61:36:8c:
                    74:12:2d:82:51:65:b6:36:2f:d1:a1:a6:16:b5:53:
                    3e:87:a5:b2:ae:3f:ec:a7:ff:2f:7c:8b:09:5b:d7:
                    d7:c7:5b:41:2b:99:b9:51:ff:70:2f:8d:e3:b6:37:
                    61:70:38:53:f0:42:2b:d8:0d:94:5e:88:ee:f3:10:
                    84:22:22:a3:d7:ce:f4:6c:c4:2c:da:30:c8:8b:53:
                    f7:fe:6b:fa:69:2b:3e:ef:bf:61:df:b3:7c:fa:50:
                    39:0d:75:2e:2e:e2:09:f1:8d:c4:7e:74:c4:fc:bd:
                    b8:23:5f:aa:7b:32:d4:24:e4:28:55:f0:8f:7e:cb:
                    58:b2:c1:31:94:6c:5c:78:aa:c9:d3:29:80:86:eb:
                    91:c8:c2:84:c8:8c:e5:13:e6:b6:a8:58:5a:79:a3:
                    12:cd:3f:44:35:36:3d:4b:7c:56:91:f5:fd:62:65:
                    2d:a7:7d:17:ec:cf:88:3d:9d:69:ea:84:f1:0c:2f:
                    45:fa:77:ef:fa:c3:a6:97:ff:14:31:d8:2a:f9:e7:
                    0b:88:f1:44:04:5a:d3:cb:d7:38:4b:c1:47:c7:34:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7D:9B:16:56:F3:B6:54:00:EC:17:F7:9E:E9:3F:95:C5:26:F7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95aaecfb-a1e7-3a2f-9a51-9bd174b082a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.80.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:f6:df:73:3a:f0:d2:83:47:88:fb:1e:32:f1:af:fe:56:55:
         b4:18:17:64:e5:08:e7:1d:c4:a5:df:a2:9a:bd:da:ee:02:2f:
         55:e6:d7:3e:63:a8:62:22:d9:0e:72:c8:06:cd:ac:ea:84:69:
         17:e3:e7:8a:44:47:ef:34:b6:c3:fe:70:d5:0a:57:0f:e0:64:
         e8:5b:a7:26:26:f1:5c:47:ca:d0:ad:8a:2e:e7:e2:5c:54:ab:
         32:3b:1d:02:e1:34:2d:39:43:15:20:55:fd:e4:d7:ce:4e:79:
         43:d9:33:82:13:8b:46:65:bd:4d:3b:65:62:9d:8b:4c:c1:38:
         fd:c3:a6:28:24:e1:46:20:63:5f:66:10:6b:e6:a1:97:08:ac:
         b8:91:23:cc:2c:c9:b9:27:5f:de:77:f0:0d:b9:f4:26:29:62:
         e8:cb:ac:d5:b4:2d:b9:9b:a0:a2:7a:35:46:f4:f9:b9:0a:20:
         68:fc:dc:de:44:93:cb:1d:a9:96:42:ef:b1:27:94:2d:8e:55:
         48:57:14:85:b9:a7:80:02:f5:ff:dc:fe:c0:32:73:d7:73:61:
         97:3e:f0:5d:6c:54:61:a9:ce:dd:77:ec:a1:df:a4:60:39:3c:
         6f:de:59:f5:52:01:b3:5e:a5:fb:3a:8c:5a:70:e0:90:b7:fc:
         b2:29:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:18 2025 by rpki-client