Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8085d0-7a80-3323-b960-ece209c99d3d.roa
File:                     9f8085d0-7a80-3323-b960-ece209c99d3d.roa (raw, json)
Hash identifier:          d0KgSee3P16Pk+SBSwNLz7JM+TySvnzfL9uh7tzlluk=
Subject key identifier:   7C:BD:B4:FC:F4:CF:0F:C3:8C:E2:19:37:48:3B:BA:9B:35:F5:C1:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431483602BD36771300F880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8085d0-7a80-3323-b960-ece209c99d3d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.25.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:48:36:02:bd:36:77:13:00:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=c7b00fe9-31f3-4a1b-8a77-98ae0ec59a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:b1:d3:24:ba:8f:98:81:ab:df:7d:c9:c0:
                    9f:13:f0:b9:14:10:1f:46:f0:43:e2:c9:51:a2:9f:
                    f2:f0:01:d5:cc:61:78:5d:7e:9f:5b:5b:a9:bb:a4:
                    bf:fa:c8:a1:17:70:be:ef:a5:ae:52:3f:01:47:07:
                    b8:5c:3d:9b:ae:16:2e:80:ea:11:28:01:8d:28:9e:
                    cd:dd:e5:cb:a3:5d:ea:52:6e:7e:ba:5f:90:2b:02:
                    55:27:0f:74:94:1b:44:81:78:75:f6:4d:cb:e3:34:
                    3d:fb:36:0e:0b:ff:49:44:6e:11:32:b2:db:3b:b8:
                    a5:c6:be:04:25:3d:40:3d:c6:fa:b0:e0:92:eb:0d:
                    14:ab:24:fc:10:ad:76:d2:a9:e9:d3:c4:8c:0b:3e:
                    d3:31:c7:90:6d:cc:34:ae:c7:b0:fb:c6:17:bc:c9:
                    73:3f:34:44:8f:f6:dd:cb:63:7d:89:1c:d1:bc:f6:
                    33:32:eb:93:c0:45:c3:cf:22:a8:ca:2d:36:fb:cc:
                    f8:59:da:98:ea:64:15:b0:fe:d7:f3:c9:42:e2:bf:
                    bd:4c:14:59:9e:af:b5:23:97:7c:66:3f:c5:a6:4a:
                    a2:53:68:78:79:f5:59:ff:f5:25:36:34:ce:f7:b0:
                    41:77:08:91:c2:df:5f:8c:00:97:3a:51:ce:05:27:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:B4:FC:F4:CF:0F:C3:8C:E2:19:37:48:3B:BA:9B:35:F5:C1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f8085d0-7a80-3323-b960-ece209c99d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e3:e7:2d:7a:f2:6e:19:45:d1:18:b3:97:7f:77:ea:aa:23:
         69:a6:0c:15:55:28:88:44:4d:8e:9a:5e:8a:33:74:32:3b:e8:
         55:42:81:c8:af:eb:24:9d:d2:ba:f8:25:45:46:9a:42:0f:5c:
         8d:f6:50:72:fa:27:6f:eb:33:f3:8f:91:45:a9:5c:28:35:a7:
         21:f8:89:90:2c:b5:89:33:3c:f5:b2:9b:84:e1:b2:03:00:4d:
         be:89:57:89:78:fe:a6:ff:d6:c0:41:b3:f6:45:5e:a3:52:b5:
         9e:25:d9:0d:f1:26:a2:dd:d1:55:fb:64:2b:5e:05:de:35:bd:
         4b:69:4c:c4:5a:29:5a:fc:4d:c8:61:28:e1:b6:eb:47:5b:b2:
         24:84:47:c0:77:48:45:a7:67:89:96:d2:31:f6:52:23:5f:3b:
         e3:9e:51:bc:ff:e1:2f:e7:6d:63:41:97:3f:f4:88:bc:37:78:
         da:1a:39:8d:8d:51:cb:fa:7c:47:a2:a4:7e:97:e1:39:68:e6:
         0a:e0:fa:0f:18:52:cc:58:3b:e9:d0:94:0f:6d:3d:f8:2d:6e:
         45:15:02:fe:83:05:30:14:43:a2:9b:72:95:ea:f1:c8:2d:dc:
         b1:16:95:94:a7:7c:01:89:ae:8c:37:b7:b6:33:d4:12:b0:2b:
         44:66:a9:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMUg2Ar02dxMA+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YzdiMDBmZTktMzFmMy00YTFiLThhNzctOThhZTBlYzU5YTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSex0yS6j5iBq999ycCfE/C5FBAfRvBD4slR
op/y8AHVzGF4XX6fW1upu6S/+sihF3C+76WuUj8BRwe4XD2brhYugOoRKAGNKJ7N
3eXLo13qUm5+ul+QKwJVJw90lBtEgXh19k3L4zQ9+zYOC/9JRG4RMrLbO7ilxr4E
JT1APcb6sOCS6w0UqyT8EK120qnp08SMCz7TMceQbcw0rsew+8YXvMlzPzREj/bd
y2N9iRzRvPYzMuuTwEXDzyKoyi02+8z4WdqY6mQVsP7X88lC4r+9TBRZnq+1I5d8
Zj/FpkqiU2h4efVZ//UlNjTO97BBdwiRwt9fjACXOlHOBSd5mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy9tPz0zw/DjOIZN0g7ups19cFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY4MDg1ZDAtN2E4MC0z
MzIzLWI5NjAtZWNlMjA5Yzk5ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRmKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPj5y168m4ZRdEYs5d/d+qqI2mmDBVVKIhETY6aXoozdDI76FVCgciv
6ySd0rr4JUVGmkIPXI32UHL6J2/rM/OPkUWpXCg1pyH4iZAstYkzPPWym4ThsgMA
Tb6JV4l4/qb/1sBBs/ZFXqNStZ4l2Q3xJqLd0VX7ZCteBd41vUtpTMRaKVr8Tchh
KOG260dbsiSER8B3SEWnZ4mW0jH2UiNfO+OeUbz/4S/nbWNBlz/0iLw3eNoaOY2N
Ucv6fEeipH6X4Tlo5grg+g8YUsxYO+nQlA9tPfgtbkUVAv6DBTAUQ6KbcpXq8cgt
3LEWlZSnfAGJrow3t7Yz1BKwK0RmqSY=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:22 2025 by rpki-client