Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4aca941-c384-3b8e-86ce-3c0667cc2cbf.roa
File:                     b4aca941-c384-3b8e-86ce-3c0667cc2cbf.roa (raw, json)
Hash identifier:          uo8vc8e01rHVaFLX9eiZNbWfCpOzkiMTWxiPGuKlHYM=
Subject key identifier:   E3:66:1B:C9:00:4B:BA:AA:E9:7D:BB:40:E5:73:51:80:71:5C:87:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05EAF1B80225BDD09A3F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4aca941-c384-3b8e-86ce-3c0667cc2cbf.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        73.13.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:ea:f1:b8:02:25:bd:d0:9a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=78c435d7-ce64-4df4-9368-c860a6ce452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:75:19:72:87:11:a5:45:e1:80:71:b5:40:
                    c9:ad:e0:ea:7e:39:c1:87:24:ef:bb:a7:31:53:4d:
                    31:ba:3d:20:0a:11:a4:dc:eb:c8:99:a1:51:1f:86:
                    28:f2:79:cd:c4:de:0c:72:fd:ca:d4:34:5a:85:c0:
                    35:fe:4c:ec:96:bf:32:fd:6a:a5:d2:4c:cb:2d:d8:
                    cd:15:a9:36:8c:a0:05:49:d6:3d:e8:8a:7f:53:ce:
                    1f:e5:39:49:08:97:fa:66:25:c3:c3:e5:b8:6a:0b:
                    f2:b2:91:10:aa:57:95:3e:04:f5:89:a1:23:9c:4e:
                    ec:10:a0:62:40:40:7c:c2:68:35:53:d7:c8:a7:9c:
                    fc:ac:2c:c5:29:e3:51:37:88:22:e5:e7:65:76:cd:
                    ae:83:b2:75:52:e9:7d:f6:31:e9:06:ec:eb:5b:15:
                    9c:59:ef:d0:66:2e:61:41:fb:ab:0b:c4:36:cb:46:
                    fd:db:c4:0f:f7:63:65:07:67:f8:92:b5:19:4c:bb:
                    38:55:c2:55:dd:66:d0:08:53:d2:1e:97:f4:b5:d0:
                    9d:dc:8c:c5:53:95:b9:28:3d:f9:f3:4a:9a:2c:b3:
                    3c:be:85:f5:4f:79:44:8d:b7:6b:18:81:17:e5:19:
                    5f:4d:32:e8:09:fc:70:c4:26:d7:46:a5:13:49:b5:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:1B:C9:00:4B:BA:AA:E9:7D:BB:40:E5:73:51:80:71:5C:87:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4aca941-c384-3b8e-86ce-3c0667cc2cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.13.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:ec:92:57:8e:fa:8c:b0:fc:64:63:ea:06:5f:2f:1b:7a:
         98:31:cd:fd:e7:40:eb:2e:e5:66:e0:0e:f2:75:b5:e6:e5:73:
         1e:34:3f:b5:a9:0f:21:d5:f1:26:5c:4a:50:0c:04:dc:c6:b0:
         03:16:d3:d4:2f:9e:73:1d:02:af:c1:f8:11:23:b9:ca:9d:65:
         ef:da:0a:39:30:ae:ba:3c:7e:0c:cb:39:3e:00:83:8a:a0:88:
         85:f6:4e:9f:10:88:51:a1:d6:08:8c:dd:f6:29:40:7e:a7:30:
         fd:75:50:32:3c:de:a7:ea:10:e7:0a:f9:a5:76:fd:5e:d4:2c:
         0b:7d:f8:3f:3d:c9:a8:b2:f9:63:ce:91:3d:5a:6d:6d:a3:ed:
         1b:0f:e2:12:0b:e1:fd:af:47:54:05:0c:73:f4:58:d0:0f:d0:
         f7:bd:2d:d9:37:5b:16:f9:3f:f4:bb:f1:ee:60:c2:d4:ca:60:
         31:c0:68:5f:d4:4f:d2:2a:d5:b7:b3:4f:cb:8d:50:3a:03:d2:
         bd:20:5c:1f:1b:f4:e2:a5:4a:54:87:19:a5:f5:82:42:92:2b:
         15:8a:02:36:52:d4:c1:38:3b:7b:7f:7f:06:60:9a:cf:0f:49:
         aa:33:fd:aa:87:3d:f3:73:ba:48:f4:3e:25:da:cd:86:a5:5c:
         3f:21:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:41:56 2025 by rpki-client