Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970f7709-bcf6-389e-a757-ae6f7d391872.roa
File:                     970f7709-bcf6-389e-a757-ae6f7d391872.roa (raw, json)
Hash identifier:          60rDoWDXPc34J6uxY4tg7kHM1O5bqLYcfEFTLtQ67jI=
Subject key identifier:   C0:BD:AE:C3:C3:88:F2:8E:0C:6B:3B:26:10:70:DB:62:81:77:84:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF0E9E4E331F42DF59D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970f7709-bcf6-389e-a757-ae6f7d391872.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.81.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:0e:9e:4e:33:1f:42:df:59:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=86727dd8-5a17-42bd-8065-801ad615113f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:e0:49:ff:77:fc:7b:84:b6:46:2f:ff:82:
                    19:41:e6:fc:92:b6:e6:6b:b7:37:4c:67:6d:fa:a5:
                    6b:3b:70:af:9a:e2:c2:d4:dd:43:12:7a:03:05:7e:
                    ce:70:e4:19:59:4a:eb:9d:99:97:d0:29:ba:72:c2:
                    e0:0d:b3:4d:97:4e:f6:e1:f6:eb:46:aa:be:bf:45:
                    8d:25:19:1b:1d:c9:88:bf:e8:c2:a8:1f:d1:f2:17:
                    30:53:3d:bf:76:dc:3f:9d:9d:9f:d4:0c:d2:47:19:
                    1a:f3:e2:d3:0c:74:04:16:35:6b:1d:61:c5:b8:06:
                    2d:93:e3:41:f0:97:c8:6c:f4:cb:e4:46:c2:57:c2:
                    cd:e9:bc:48:3a:87:e9:7b:78:ac:93:09:58:04:42:
                    03:19:db:86:94:10:0d:33:f1:04:f8:28:74:5a:58:
                    e0:6e:33:f5:d5:4e:9f:fc:b7:3a:f9:49:97:8e:85:
                    8f:ba:46:04:fb:3f:c2:5e:4b:d6:ed:08:8f:70:ba:
                    08:91:94:52:8b:08:db:4e:33:c4:ba:35:02:57:1a:
                    ff:86:23:c0:ec:71:ea:5f:ec:e8:ae:62:2f:01:e9:
                    2e:06:73:89:2b:3a:e7:96:a1:d9:d2:06:c9:87:4c:
                    5a:01:bd:8c:17:e1:e7:f5:29:b4:75:af:f0:86:48:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:AE:C3:C3:88:F2:8E:0C:6B:3B:26:10:70:DB:62:81:77:84:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970f7709-bcf6-389e-a757-ae6f7d391872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:71:f0:84:85:cf:f3:07:f6:2b:11:1e:58:66:32:cf:85:30:
         b8:0e:50:5b:15:62:76:e5:f9:4b:b1:8f:23:34:0a:5e:bb:ff:
         c1:a2:ce:00:8c:aa:a1:f4:31:bf:89:84:27:60:88:83:c5:3c:
         bb:ea:29:55:b3:d0:a7:a8:95:fb:9d:c8:17:42:63:6c:de:b5:
         e5:68:a5:b4:b1:cf:5c:a0:10:e1:1a:d8:e4:d8:a3:c2:88:1d:
         40:6a:d3:1d:a0:74:c8:fc:00:8c:18:10:ee:de:87:80:6d:26:
         14:47:87:03:9d:cc:e5:4a:16:45:7a:5d:76:21:d3:6c:58:8e:
         89:87:1a:ba:e6:bc:33:ba:92:7d:ee:3a:c5:ce:15:fb:b5:9a:
         9b:c3:ee:50:96:aa:aa:a1:ef:2c:30:7a:07:53:fb:22:0f:77:
         72:ee:11:cc:69:b8:95:0e:15:c6:d6:e9:79:7f:73:f0:5f:52:
         11:2c:03:f3:fb:44:2d:91:f2:fd:48:8b:33:8c:16:44:84:aa:
         d9:ea:34:bb:a7:7f:b6:2c:99:bf:69:58:29:5f:cc:d8:d9:64:
         4b:91:c8:9c:45:82:a4:e0:60:0d:bb:8e:89:94:1c:2b:be:a8:
         97:20:26:b6:1e:c8:71:25:8f:4c:2d:27:56:97:da:10:a7:7d:
         30:45:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:28 2025 by rpki-client