Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0112b5-b506-3257-b496-c15de8659a17.roa
File:                     aa0112b5-b506-3257-b496-c15de8659a17.roa (raw, json)
Hash identifier:          SgMx53Y5BaBfzhO4EBDchxM4jye9HSC/tS8pCzFVEsQ=
Subject key identifier:   98:A6:2A:DA:82:31:DA:C6:21:9C:E3:3E:1A:35:EF:C4:05:3F:5D:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C083A3FDE88319B7CC11F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0112b5-b506-3257-b496-c15de8659a17.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.74.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:3a:3f:de:88:31:9b:7c:c1:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=465047a2-6e1a-486f-b4fb-c11eed60f558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:e6:71:92:fc:aa:da:30:5e:07:ea:4c:f3:
                    b5:6b:dc:c5:ec:75:52:58:4b:db:fe:42:89:8e:da:
                    93:1b:1c:75:60:58:2d:7e:ee:61:8b:94:50:6e:cb:
                    4f:d9:7a:bb:11:bc:9c:e5:7a:22:c8:b6:34:65:15:
                    51:08:ab:32:10:c3:ae:97:c2:0f:3c:36:59:a1:aa:
                    44:8f:57:04:dc:b7:b3:6b:f1:3d:6c:66:44:08:d6:
                    be:ab:2d:df:4f:15:15:b2:23:69:14:03:c6:75:4d:
                    a5:48:f2:25:bd:fc:d5:09:a8:c3:4b:6e:21:e5:45:
                    ca:a0:be:75:60:28:5d:de:f7:f5:d8:13:ac:79:19:
                    8a:3b:4c:cd:9b:3d:bf:80:d5:12:a3:0e:e3:6b:bf:
                    fe:7b:84:98:5d:45:ef:69:3d:bc:ab:15:db:e8:ac:
                    3c:c8:1c:57:d8:d2:f1:c6:1a:78:6a:77:7e:b2:32:
                    5c:1b:7d:2b:ad:e3:bf:30:7c:28:8c:91:a9:c3:66:
                    2f:7a:5b:e5:52:27:f4:c1:a8:f8:2f:36:00:21:b9:
                    8d:3d:55:42:46:47:df:fa:5c:cf:4e:33:8e:b5:04:
                    3a:fc:9a:04:2a:96:78:0e:dd:bf:f5:2f:a6:b2:a9:
                    49:9f:f4:8e:d6:12:4b:7a:d2:b8:93:f5:47:54:4b:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:2A:DA:82:31:DA:C6:21:9C:E3:3E:1A:35:EF:C4:05:3F:5D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0112b5-b506-3257-b496-c15de8659a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:4d:13:4c:9e:9d:cc:75:7a:85:29:ae:f0:f7:eb:5f:90:
         e1:72:af:30:0b:f7:7b:85:d9:b6:2f:e7:cd:4b:07:4b:05:31:
         98:c3:13:16:77:80:56:02:66:55:50:f6:e3:3a:b9:76:85:b2:
         db:64:0d:73:b1:2d:bc:f5:f6:c3:20:7f:32:1a:55:23:60:65:
         de:94:2f:9c:e6:cc:76:0e:6c:2d:cf:c2:36:8d:f7:60:8a:65:
         dd:02:70:1c:ca:7e:81:1d:49:f7:77:f9:4b:a9:52:13:54:16:
         79:a6:b0:40:26:d6:e5:02:de:97:f8:07:e3:5d:a9:59:a3:24:
         d6:8d:01:98:64:4d:74:90:91:0d:a8:9b:93:f0:b1:39:86:2a:
         23:cd:27:58:f8:38:c1:60:ed:c6:75:45:61:98:65:0d:90:28:
         8c:23:bb:7f:8e:11:9e:86:0d:7d:c2:8d:fc:c1:40:44:c8:d3:
         e4:d2:ba:5b:33:fd:09:f3:83:b5:b0:fa:48:0c:b3:87:cb:6f:
         71:32:bb:26:57:b0:0a:04:ae:cd:26:b1:a1:1d:fe:cf:71:d4:
         40:21:ad:62:8b:50:4c:08:a7:1c:ed:d6:79:0d:67:73:f7:51:
         a1:0d:42:01:01:65:82:58:a9:be:42:85:4c:72:6b:a2:cb:0b:
         ef:d4:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:34:41 2025 by rpki-client