Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f483f5-6dd9-3945-a514-0092b43665bc.roa
File:                     a7f483f5-6dd9-3945-a514-0092b43665bc.roa (raw, json)
Hash identifier:          O+TZeFptk/hKy6b/TQkSvotIvA12POB1IOKelFb/CHY=
Subject key identifier:   DC:E4:3E:29:92:01:A7:1A:9E:72:85:9E:E0:19:AD:D2:1B:9E:13:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C089E79844C7D8618B2A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f483f5-6dd9-3945-a514-0092b43665bc.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.202.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:9e:79:84:4c:7d:86:18:b2:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b2567c0b-dd8f-40f5-95a1-287416ab8237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:91:cb:54:be:89:e9:51:50:f0:28:0b:d6:
                    5f:47:f2:69:c1:60:b6:05:f6:23:45:a0:b6:c1:e6:
                    72:9e:5a:02:2d:3c:da:1d:83:4c:fb:aa:ef:bd:b1:
                    37:66:4a:e8:91:fb:d2:f9:53:d6:55:32:b3:f1:c7:
                    8c:d4:f4:b4:7b:27:bf:f1:75:47:a1:b2:e8:c4:50:
                    cd:c5:3e:0c:64:27:1a:1c:13:ff:d2:9e:b7:b0:f8:
                    10:1e:6c:5e:fa:de:53:f8:8d:36:1d:ea:ad:ce:bd:
                    d3:03:42:43:0d:8d:cf:b7:9c:b4:92:a7:4c:ea:42:
                    69:ab:95:e7:e1:cc:02:d3:ff:12:22:c0:09:71:70:
                    0c:9a:47:b2:38:ba:f5:a4:e0:8d:32:e3:ff:62:27:
                    bd:3f:3d:b3:59:43:5b:1c:05:03:6e:69:f7:ca:fb:
                    bf:eb:41:ad:aa:d4:1d:5c:3f:c4:31:74:ad:78:01:
                    37:ca:1b:45:aa:23:13:58:f9:3f:67:41:1d:1f:9f:
                    c4:ed:22:c7:37:88:76:00:4b:b8:b6:20:fb:08:ad:
                    cf:1b:47:1f:b0:79:12:94:0a:63:12:df:b3:f8:b5:
                    1d:bd:cd:e5:47:05:5a:5d:a5:d1:05:c4:37:53:7a:
                    2d:4b:a6:2c:52:92:d5:ba:1a:f7:17:1b:50:f7:8e:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:3E:29:92:01:A7:1A:9E:72:85:9E:E0:19:AD:D2:1B:9E:13:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f483f5-6dd9-3945-a514-0092b43665bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:df:8a:30:1e:60:0a:51:a1:ed:4d:8c:37:8e:78:e9:d7:1b:
         cc:0c:37:90:de:fc:34:6b:5f:ef:3a:33:0c:b8:42:9f:ff:79:
         6b:76:98:5d:bc:eb:5f:fa:3b:5c:96:2a:d6:13:9f:fb:ef:d1:
         7c:8e:17:77:09:9b:fb:68:e4:c4:37:16:fc:c6:06:63:36:35:
         d2:9e:f1:52:0f:61:95:ed:f0:ba:55:cc:5d:26:d8:35:05:ce:
         75:76:64:6b:d8:00:27:5f:89:cf:9d:b3:f1:36:63:c4:a9:95:
         26:f9:5c:37:70:f9:eb:68:c5:70:52:08:6c:42:94:51:d8:4d:
         82:23:ac:91:d7:30:f8:3d:ca:f4:4b:f2:81:52:c5:cf:bb:06:
         c0:19:40:02:14:93:72:df:23:fb:3d:a5:47:f9:9c:1b:38:d9:
         11:be:70:b0:1d:e1:4b:5b:95:6e:9c:e5:de:65:41:04:b4:81:
         c9:aa:e5:d1:63:93:65:37:f0:d2:cf:c8:03:ee:05:36:0e:28:
         2e:32:13:b4:5e:bd:1c:f9:80:50:c6:78:f8:c2:35:9d:a6:bd:
         d0:41:23:e8:62:2a:21:54:91:fd:ba:b5:a1:3c:08:31:33:86:
         93:ee:6a:29:2c:66:7d:1c:1f:cf:c5:1c:7d:dc:a7:51:d6:59:
         12:54:3c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:52 2025 by rpki-client