Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7f793c-2c3e-3a4d-b20b-b66ccac7b124.roa
File:                     ae7f793c-2c3e-3a4d-b20b-b66ccac7b124.roa (raw, json)
Hash identifier:          nImACtzaDICUnYHZqq4lj+Ei/Zqjz5/eTgzZFiahWok=
Subject key identifier:   AF:88:F8:4B:C8:7D:D4:94:30:6F:65:FA:5D:66:63:B7:04:F8:FF:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4319CE1631B603777C55900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7f793c-2c3e-3a4d-b20b-b66ccac7b124.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.186.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:9c:e1:63:1b:60:37:77:c5:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=169b5d0a-b75f-4f11-9507-d795fb48ad9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:dc:dd:36:a4:ef:fc:18:2a:78:8e:25:cd:
                    5a:3a:15:de:f2:81:ad:87:d5:4b:c6:29:a3:5d:53:
                    ba:f9:bd:9f:cc:a8:9c:c4:d6:58:02:9c:18:05:a8:
                    08:7c:be:17:27:2b:1f:35:f4:79:9c:e2:9f:d8:d7:
                    19:7b:c3:b4:93:d5:dd:a9:29:75:b7:12:90:2a:37:
                    1d:77:09:a6:d2:4a:34:8e:42:ff:44:07:8b:78:92:
                    f7:06:20:c1:e4:40:20:d9:fb:d2:38:88:51:59:20:
                    6c:18:41:5b:94:c1:25:0a:96:e1:b5:aa:bf:82:fc:
                    44:9a:4b:77:0d:a8:c2:6b:1b:5d:5f:17:8c:44:38:
                    83:0c:13:9c:23:72:f8:77:1d:3f:95:02:d5:49:17:
                    ad:15:40:d5:84:96:c6:b4:49:33:76:63:da:b3:e5:
                    92:28:c7:1b:9e:5b:c7:72:d2:9c:33:c7:0d:94:00:
                    74:93:90:09:20:40:2d:ad:9e:06:57:d8:4f:9f:d3:
                    ae:76:30:e5:5a:bd:ae:c3:86:ea:24:eb:43:92:76:
                    6d:83:2b:1d:8b:b2:dd:8b:fe:0d:f6:6c:83:45:20:
                    ac:70:c0:d2:28:1a:89:09:03:28:36:76:8c:13:c0:
                    bf:2f:2c:97:a7:ad:0e:10:4a:70:8e:32:c2:11:d0:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:88:F8:4B:C8:7D:D4:94:30:6F:65:FA:5D:66:63:B7:04:F8:FF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7f793c-2c3e-3a4d-b20b-b66ccac7b124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:80:a7:85:ce:52:53:47:15:d8:1d:93:57:8f:32:6b:9b:83:
         88:07:62:f5:8b:f6:7a:41:30:35:e6:8d:b4:c0:db:80:94:e9:
         cf:66:f4:39:42:2f:61:4d:15:9a:6d:e7:3b:e3:1b:c1:a6:fd:
         2e:1d:c3:f0:06:e2:3e:a9:65:e8:f4:dc:76:0f:33:fc:8c:ca:
         84:64:6b:76:2b:d0:7d:d0:09:56:11:09:86:52:e4:7f:1b:c7:
         c0:5e:db:7f:7f:f6:85:d4:fc:72:bf:21:a5:b6:b7:b9:e3:3e:
         dd:ff:96:83:43:79:08:93:32:f6:83:3e:f1:88:24:c8:51:ee:
         24:df:0d:00:f6:b2:2b:97:a7:22:27:3d:64:ae:5d:aa:fa:ac:
         c1:bb:95:6b:c2:47:fa:ce:f7:7b:ec:77:28:68:09:fc:fc:9a:
         63:c2:d7:19:72:c4:fb:c8:6e:b6:d3:5c:fe:fb:45:f1:93:3a:
         9c:3d:4e:80:46:de:3b:b1:e3:f8:39:2b:26:4e:41:40:a4:fa:
         89:e6:65:18:bc:22:e0:f7:f0:be:fd:6a:7a:c2:39:b8:0b:f6:
         1a:6c:a7:37:6b:08:93:39:2b:d2:60:5c:f4:8c:57:69:9e:3d:
         26:53:34:02:b2:93:f2:e1:e2:97:e1:83:26:26:08:4a:fe:bc:
         cf:c3:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:11 2025 by rpki-client