Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace42354-7157-390b-8486-f393493739c8.roa
File:                     ace42354-7157-390b-8486-f393493739c8.roa (raw, json)
Hash identifier:          8b7EQHzh6e/lLLA1ah9b26wQ3cVTRLyqGpu7qaqQ7ak=
Subject key identifier:   82:9D:4F:13:A8:47:0B:BD:D4:34:FE:4A:A6:BC:DB:7C:6D:B3:8D:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4318EFE4A257AB8B1347E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace42354-7157-390b-8486-f393493739c8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.149.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:8e:fe:4a:25:7a:b8:b1:34:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=cb2af3cb-9099-4351-b94a-20487bd70026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:7c:25:da:2e:7e:74:a1:0c:47:89:9b:6b:
                    53:02:bf:c9:b6:f0:68:3d:fe:5c:f9:da:1f:f9:63:
                    62:dd:74:b9:cc:81:9a:0b:f7:6c:72:6f:42:32:63:
                    82:d7:cd:a5:46:82:5b:aa:04:2d:0c:63:bc:1c:ea:
                    69:2b:d1:a7:83:ad:94:10:2a:5e:9b:93:d3:0e:22:
                    fc:33:74:c0:21:a3:9c:4a:cb:cd:81:11:db:eb:6c:
                    45:99:9f:5d:3b:07:29:e2:21:f3:18:ee:39:1b:14:
                    9d:97:65:a2:98:1d:d5:87:3f:f8:43:df:5e:db:1e:
                    7e:ed:e6:16:11:3f:b5:8e:09:98:6d:a9:88:44:cf:
                    8d:b5:f7:11:cb:4f:9d:5b:7f:ee:4b:39:67:ff:2a:
                    9f:d2:d9:88:1b:fe:88:7e:84:0c:78:29:d0:9d:73:
                    a6:cc:ac:3e:13:b6:b6:6d:5e:ca:6d:22:67:04:6a:
                    e7:d4:c0:00:55:a1:e4:0c:2e:cb:4b:be:1a:8e:7c:
                    55:9e:b8:80:ce:9f:3e:7b:91:8a:1d:d7:16:2c:68:
                    73:1e:36:96:21:09:36:58:cd:19:2c:94:c3:bc:95:
                    23:41:bd:c1:2a:ed:a1:e1:39:4b:3b:72:06:b0:d0:
                    cc:d3:50:35:68:f7:82:9a:ad:3b:50:fa:40:c7:31:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:4F:13:A8:47:0B:BD:D4:34:FE:4A:A6:BC:DB:7C:6D:B3:8D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ace42354-7157-390b-8486-f393493739c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.149.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:9c:6d:7e:36:04:28:63:da:f1:af:4b:8b:60:44:9b:ec:
         82:2b:c5:bc:25:bf:f7:e3:55:ba:3c:df:88:fa:7b:92:34:5c:
         c4:e1:20:f8:f6:b4:6e:2b:44:3a:ed:88:87:ba:ab:5d:70:03:
         dc:d0:ef:1b:c7:86:59:8c:e5:60:4c:91:eb:4d:5b:2d:83:a6:
         6f:7e:77:01:62:ce:66:44:17:96:20:a1:91:18:bc:f7:a5:d8:
         4c:23:27:c9:5c:07:5c:58:a9:f2:84:fb:a3:1f:60:e6:cb:ba:
         87:90:a1:0f:f0:7f:27:11:e2:fb:30:e6:d9:5d:56:7d:96:26:
         ee:33:ea:66:6b:f6:25:4b:31:67:72:df:e8:5f:34:53:ed:86:
         e2:03:84:d1:7d:16:6c:6d:ff:d0:9c:6f:6d:32:47:05:6a:0a:
         4e:ac:af:c7:7a:d0:36:20:09:c6:42:b8:f0:c9:a6:e0:7d:c5:
         30:d8:47:13:e3:23:38:cc:3e:b8:4b:2d:30:7f:c3:a4:91:83:
         d6:70:18:7a:5b:1a:37:7d:91:98:ec:91:67:cb:b3:d4:47:2b:
         38:4e:35:6b:dc:c7:1d:92:5d:d4:b8:70:3d:06:57:f0:18:12:
         56:ec:e5:8e:5b:6b:e1:52:ff:a4:53:f3:3b:df:b1:27:43:7a:
         e4:a2:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:02:47 2025 by rpki-client