Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab1785eb-5b72-3b27-934d-ed8d169572fd.roa
File:                     ab1785eb-5b72-3b27-934d-ed8d169572fd.roa (raw, json)
Hash identifier:          YXeTwglCcPjMbAmN+MsYfF76Y95eOiviWCUzaxHd1SM=
Subject key identifier:   FE:EE:09:64:3C:89:A5:2A:70:20:54:49:23:E2:AB:4C:96:0C:1F:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05F620875AA0377361FB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab1785eb-5b72-3b27-934d-ed8d169572fd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        73.165.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:f6:20:87:5a:a0:37:73:61:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7160fbb0-2846-4e42-98c6-6560455c7665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:08:b4:64:38:09:e7:38:d7:b0:87:99:80:
                    94:87:db:53:c7:d2:cf:a5:2f:9a:69:ce:d8:6e:5f:
                    46:77:48:0f:5f:40:58:06:3b:ae:ec:c2:1e:58:b7:
                    76:91:29:d5:d0:ec:26:eb:8b:90:69:dd:f7:cf:99:
                    95:17:6d:03:aa:4d:36:ef:a0:f5:a2:90:61:fc:97:
                    c1:8b:95:93:fd:fe:d6:2d:9a:84:bc:fc:9e:e9:98:
                    21:9e:e6:8b:dd:82:90:09:a9:e5:12:00:12:20:40:
                    24:b6:8c:5c:89:13:37:5b:f1:bc:12:c2:a6:56:33:
                    49:9b:c6:31:9e:58:fd:5e:29:12:64:7f:05:64:4c:
                    3a:88:93:61:22:5f:b7:d6:fd:b3:2f:be:55:2b:7b:
                    8b:5e:ae:53:7a:d4:d0:67:c0:b3:a4:c9:20:d7:a1:
                    7e:67:5e:62:de:b2:ee:29:fc:ae:4e:dc:11:c1:88:
                    af:6d:55:3e:b8:f6:84:a1:fe:fe:b9:93:8d:8b:89:
                    35:42:a8:3f:5c:5b:ac:22:81:cf:19:0b:e5:fa:e6:
                    d0:ef:92:2f:44:58:bf:43:f2:cb:b8:0e:3d:71:f3:
                    7a:ac:8e:0c:1e:8b:15:81:e5:19:31:cc:cc:76:1b:
                    0f:01:14:e0:35:5a:ca:ff:ac:3b:93:d9:e8:62:a5:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:09:64:3C:89:A5:2A:70:20:54:49:23:E2:AB:4C:96:0C:1F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab1785eb-5b72-3b27-934d-ed8d169572fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.165.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:71:80:62:48:1d:ca:c2:5d:ac:81:e6:f3:61:71:50:01:1c:
         33:4c:3b:8d:f7:e5:47:a6:9b:11:0c:29:f8:19:20:fe:f7:77:
         65:6b:2e:f1:ba:3a:fb:85:d7:78:1c:d7:d7:6e:a5:3e:73:6c:
         86:e4:f3:1c:83:58:6b:88:59:21:ad:c5:91:7a:f2:8a:47:cf:
         a8:7b:ae:f5:1d:87:3f:e0:28:69:c3:c1:28:71:15:3e:4c:b2:
         07:16:55:96:a2:c5:99:4f:81:51:9c:5c:75:0c:a9:d2:30:ca:
         8e:f0:66:ea:69:03:01:08:fe:fe:6b:16:15:2b:ea:bf:77:7e:
         9e:4b:3b:55:d6:9f:f8:2e:89:6d:3d:94:9a:44:a5:36:c8:8d:
         64:81:39:06:10:fd:d2:38:b6:94:ba:0b:95:8a:f2:f3:d2:21:
         0c:3c:2b:ee:59:7f:95:86:25:03:cd:e5:b8:5e:81:3f:14:e2:
         d9:17:c7:95:40:c6:d1:af:4a:e2:41:a0:ec:13:55:2d:ed:a9:
         9f:0b:ad:12:c7:85:98:03:4a:dc:1b:0b:8f:87:cb:f3:04:ec:
         67:54:aa:17:bc:03:97:7a:05:a7:59:e0:84:6c:ce:b9:69:c7:
         e0:f0:90:c4:0f:4f:6a:5f:80:f3:04:4c:d8:7d:d7:b2:76:36:
         b7:e6:5b:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBfYgh1qgN3Nh+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NzE2MGZiYjAtMjg0Ni00ZTQyLTk4YzYtNjU2MDQ1NWM3NjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjMItGQ4Cec417CHmYCUh9tTx9LPpS+aac7Y
bl9Gd0gPX0BYBjuu7MIeWLd2kSnV0Owm64uQad33z5mVF20Dqk0276D1opBh/JfB
i5WT/f7WLZqEvPye6ZghnuaL3YKQCanlEgASIEAktoxciRM3W/G8EsKmVjNJm8Yx
nlj9XikSZH8FZEw6iJNhIl+31v2zL75VK3uLXq5TetTQZ8CzpMkg16F+Z15i3rLu
KfyuTtwRwYivbVU+uPaEof7+uZONi4k1Qqg/XFusIoHPGQvl+ubQ75IvRFi/Q/LL
uA49cfN6rI4MHosVgeUZMczMdhsPARTgNVrK/6w7k9noYqV4bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7uCWQ8iaUqcCBUSSPiq0yWDB8kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWIxNzg1ZWItNWI3Mi0z
YjI3LTkzNGQtZWQ4ZDE2OTU3MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSaXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClxgGJIHcrCXayB5vNhcVABHDNMO4335UemmxEMKfgZIP73d2VrLvG6
OvuF13gc19dupT5zbIbk8xyDWGuIWSGtxZF68opHz6h7rvUdhz/gKGnDwShxFT5M
sgcWVZaixZlPgVGcXHUMqdIwyo7wZuppAwEI/v5rFhUr6r93fp5LO1XWn/guiW09
lJpEpTbIjWSBOQYQ/dI4tpS6C5WK8vPSIQw8K+5Zf5WGJQPN5bhegT8U4tkXx5VA
xtGvSuJBoOwTVS3tqZ8LrRLHhZgDStwbC4+Hy/ME7GdUqhe8A5d6BadZ4IRszrlp
x+DwkMQPT2pfgPMETNh917J2NrfmWx4=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:13:15 2025 by rpki-client