Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a937b67-8219-334b-84d1-b9c8eaf2661f.roa
File:                     9a937b67-8219-334b-84d1-b9c8eaf2661f.roa (raw, json)
Hash identifier:          bkScB7IAbAaIokDugEQRtq6pTQlfGQLNSq7uxPlkv5E=
Subject key identifier:   2E:BE:D9:39:C8:67:B6:95:57:ED:FB:FF:DA:8D:00:4A:A8:EA:07:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1652C11DED1642DFDCE5D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a937b67-8219-334b-84d1-b9c8eaf2661f.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        73.177.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:2c:11:de:d1:64:2d:fd:ce:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=a89b09ec-25f1-4ff7-9e77-205847ecde72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:f8:99:52:d0:35:be:2a:44:de:58:14:a6:
                    3e:66:63:38:3b:36:3e:80:9a:b0:aa:9f:6b:47:ac:
                    80:9b:85:4a:5d:7c:83:a3:7e:f8:6f:69:30:13:3c:
                    a7:ef:64:1d:fc:0c:98:c7:9b:15:ca:b7:d5:01:af:
                    86:e4:95:95:44:a7:e3:af:5a:8d:8f:fe:37:06:bc:
                    2b:a8:11:4b:e2:b3:32:72:7e:03:37:c0:8e:ba:7b:
                    27:67:5d:b5:09:c4:1e:29:51:7c:45:28:6b:7e:bd:
                    9a:da:5c:37:50:80:d0:8a:ee:fa:92:52:4b:66:73:
                    45:71:6e:bd:f0:05:7b:c4:50:b9:42:ba:6d:d6:e9:
                    c8:56:b3:a6:79:c0:06:41:b4:4a:68:bc:81:0f:c4:
                    29:39:39:c0:01:74:aa:71:52:fa:d3:8a:e0:f9:7c:
                    48:8c:56:f8:38:ca:05:51:63:51:ed:e9:47:1d:40:
                    3c:62:4f:dc:5a:05:3a:91:b0:2c:5a:d9:d6:c5:d6:
                    79:a6:bc:bd:9e:26:57:41:32:39:6f:5b:fe:03:ad:
                    fb:c5:1e:26:30:07:cd:34:55:e8:77:5d:75:89:fd:
                    b3:85:74:70:b7:38:0d:d5:a5:06:40:bf:c7:fe:94:
                    9b:63:d0:80:93:8e:83:4f:b3:2e:0e:93:42:b6:42:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:D9:39:C8:67:B6:95:57:ED:FB:FF:DA:8D:00:4A:A8:EA:07:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a937b67-8219-334b-84d1-b9c8eaf2661f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.177.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9c:b3:f9:42:92:21:df:75:02:b0:c7:36:b4:4d:f5:a1:98:
         70:8b:0f:2e:80:72:c3:95:2a:2c:be:1e:1c:92:bf:ca:55:34:
         84:1a:a9:91:ac:81:87:d4:f9:d5:09:4e:cf:93:8d:b5:b2:7d:
         67:76:34:a8:ee:c8:02:84:c6:87:1e:c1:85:38:59:18:79:71:
         4c:3a:92:fd:1f:c6:6f:35:36:39:57:2f:21:fe:77:63:03:54:
         61:6d:e3:ed:87:23:6c:15:98:4b:a2:53:1a:b8:1e:8e:a8:9c:
         2a:a3:7d:da:98:4b:c7:ba:32:d4:ec:f5:ce:36:08:25:70:e5:
         13:ee:99:00:67:5a:60:7f:5a:59:71:c6:81:07:c0:9e:23:77:
         ae:6e:56:b9:c9:30:a1:53:d1:50:64:64:f8:ab:a2:1e:c3:a3:
         3c:af:7b:91:fe:ec:f7:47:37:0e:05:56:61:6f:8a:f6:01:76:
         a8:01:ad:63:14:61:0b:1b:c3:4e:83:5e:68:98:7d:c9:cc:8a:
         28:f7:a0:60:e4:82:13:89:31:83:ef:42:89:45:a6:fa:20:84:
         a2:80:48:e3:72:91:21:a3:ff:66:5c:4f:cb:9e:97:8c:c4:9f:
         81:6c:3b:e7:13:c6:ec:26:8e:db:6e:b6:53:e7:f2:c1:43:4d:
         9a:94:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:45:46 2025 by rpki-client