Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc84b9d-9f6a-3481-937c-a94476a5dc0f.roa
File:                     acc84b9d-9f6a-3481-937c-a94476a5dc0f.roa (raw, json)
Hash identifier:          twf0+eUocHOYK9hkmU0jaXKitdeRMu361wwFf0Qs6e4=
Subject key identifier:   60:D0:01:0B:04:1B:42:83:F5:D4:17:5D:2A:3C:33:A4:C9:62:B1:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF0EC44327EF0F13AC1200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc84b9d-9f6a-3481-937c-a94476a5dc0f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.81.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:0e:c4:43:27:ef:0f:13:ac:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7af3c8a6-ba1c-4799-990b-6800d6ca45c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:fb:ff:cd:72:ad:00:fd:d3:e0:34:22:3b:
                    c3:ab:2c:3e:44:1f:5d:0e:b7:60:e7:c5:41:27:a9:
                    a5:c6:b7:fc:56:8f:73:bb:4e:b6:1c:80:c6:62:0e:
                    93:17:07:9d:d8:3e:56:6e:14:ad:4d:40:3e:9a:e6:
                    3b:8f:00:5d:c6:2c:16:83:89:83:96:c8:9d:15:54:
                    eb:ef:b6:74:6b:c3:33:8c:95:4a:1d:f1:ac:64:49:
                    e8:f2:18:66:84:64:7b:29:c3:70:24:e0:14:65:a1:
                    17:e1:d3:7c:c9:07:03:1d:f9:bf:e1:29:84:d2:dc:
                    4d:a5:00:df:fa:f9:2d:a7:09:2e:58:e8:09:7d:ae:
                    a4:b6:57:53:73:db:fd:de:f2:5d:07:cc:20:65:e0:
                    f6:d5:4f:5e:49:7f:ad:77:00:25:fb:e6:aa:2f:77:
                    ed:25:9d:83:6d:50:87:c6:10:72:94:90:42:86:a0:
                    0b:94:40:da:b4:9c:57:68:2b:65:ca:de:10:09:7b:
                    38:62:4e:dd:f0:88:38:56:cb:cb:f7:7d:8b:e6:a5:
                    b6:eb:51:4e:5c:fe:d8:9a:b1:02:df:3f:e6:e8:fb:
                    73:0c:86:6e:24:5b:ad:13:6d:a9:27:72:7b:c8:01:
                    1b:1c:c0:eb:1d:35:6d:83:8d:14:0d:19:70:e8:c4:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D0:01:0B:04:1B:42:83:F5:D4:17:5D:2A:3C:33:A4:C9:62:B1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc84b9d-9f6a-3481-937c-a94476a5dc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:34:32:d5:15:d5:8e:90:9b:91:41:89:97:84:b1:40:61:8b:
         66:63:46:4e:d1:6e:00:52:d5:a0:47:14:6e:bd:44:8d:4c:43:
         0e:d1:ed:38:a1:d8:1c:a2:a0:64:c2:4c:6f:97:29:64:ed:53:
         6e:88:9e:ee:34:c5:0e:84:54:62:7f:80:80:39:2b:76:04:14:
         7c:51:75:fd:cc:60:d0:11:08:11:89:bd:60:fa:48:e3:3f:0f:
         91:f4:2e:38:0a:f4:8f:15:6c:02:6d:3f:1a:df:88:e0:4e:87:
         28:eb:64:f0:d6:6f:40:83:ff:c1:c8:15:92:98:e7:60:24:ac:
         8b:0a:de:c5:3b:0c:05:f7:4d:a8:81:ac:f7:83:6c:1b:8a:94:
         1e:d3:58:39:69:70:e4:72:74:f2:bd:51:8e:cf:e3:f8:d3:fd:
         8d:83:b4:09:79:7a:63:0f:18:ce:28:d9:68:34:4e:6e:83:5b:
         bb:d3:94:da:b5:7e:40:e6:bd:e4:b1:1f:35:f9:9b:bd:7f:a0:
         c2:50:55:44:fd:1c:51:3d:29:62:e9:8f:4c:17:57:be:96:5b:
         17:b6:3f:82:7a:31:c5:15:fe:b5:40:5c:b2:4a:a0:65:27:54:
         d1:c2:fd:1c:92:27:93:eb:64:83:80:b2:0a:93:48:e6:2e:13:
         f7:7b:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:29 2025 by rpki-client