Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb56049a-de53-3d1c-bc18-697f1d9f7fc7.roa
File:                     bb56049a-de53-3d1c-bc18-697f1d9f7fc7.roa (raw, json)
Hash identifier:          yoT43zmpMlm3VFX7F5/Bixf9R4azbgJeLM+1JshqiHU=
Subject key identifier:   6C:97:B2:69:71:C5:B6:42:5B:D5:A1:94:3E:CA:11:1D:FE:9E:9D:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BE24071E2B3EDB8148D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb56049a-de53-3d1c-bc18-697f1d9f7fc7.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33489
IP address blocks:        73.88.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:e2:40:71:e2:b3:ed:b8:14:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=77f52a28-0637-456b-802d-6e6008de05f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:2c:a8:41:c6:e7:7f:f0:84:47:b6:d0:e3:
                    b1:a0:00:60:12:cf:c5:14:32:af:04:9f:99:fb:01:
                    31:4c:15:44:dd:cc:a7:70:86:51:b7:13:96:60:88:
                    c2:ac:2d:04:9c:96:a8:f1:66:4c:a9:a8:00:77:8c:
                    63:ae:46:1c:e3:6c:84:0e:b7:cc:c6:c1:4c:99:e5:
                    da:8b:a5:c0:cf:01:94:84:fe:ad:06:a4:d1:0c:9b:
                    87:59:8d:4a:0d:4f:75:2a:5a:d3:18:5e:95:05:7d:
                    fb:8d:10:78:9c:62:a7:16:34:54:81:ba:cf:b1:47:
                    71:15:c4:78:d3:74:1d:02:f1:99:75:d2:90:5c:ea:
                    9f:b3:82:83:ec:51:82:61:28:3c:e9:b7:70:06:fc:
                    b2:0e:64:8f:fe:83:ed:e9:f1:9a:a8:9b:fb:c4:9b:
                    23:b4:1a:3a:68:85:8d:d6:d2:8a:53:79:90:cd:ed:
                    29:46:2c:b0:25:df:83:f6:c6:cc:8f:84:4a:30:16:
                    3b:10:7b:a6:0e:44:0a:3c:81:31:91:31:b4:bd:5c:
                    73:ea:cd:18:64:72:c6:10:f6:ce:0d:f5:14:d7:dc:
                    a5:0d:24:94:d6:1a:10:93:97:3c:6d:e7:1c:11:44:
                    24:df:a6:c0:83:04:e2:20:7a:b7:1f:00:05:0b:ab:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:B2:69:71:C5:B6:42:5B:D5:A1:94:3E:CA:11:1D:FE:9E:9D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb56049a-de53-3d1c-bc18-697f1d9f7fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:7a:0a:c1:16:98:bd:c0:07:e1:1e:04:d6:24:97:07:3f:
         38:ee:a2:a1:7c:26:b8:98:78:dc:ba:fd:c2:7c:c4:ef:ff:df:
         5a:9f:b3:49:43:af:d4:09:25:79:e5:6c:4d:6f:ec:c4:39:65:
         ba:49:f9:cd:c4:f7:43:38:19:0d:71:9c:7b:30:1c:2e:f9:39:
         8c:83:bf:51:82:e8:39:c2:84:4a:a5:f0:98:63:c6:7f:b6:33:
         7c:20:21:94:f4:d3:54:53:d6:e4:23:0d:f5:2c:aa:8e:b7:cf:
         54:28:39:c8:a3:cd:87:88:54:7c:ce:6c:ee:81:ed:93:b3:2c:
         d0:65:1f:f4:5b:6c:14:74:6a:ea:22:8c:d6:cd:66:87:88:02:
         92:be:d2:bb:34:3c:49:b3:bf:13:54:6a:e1:a5:9f:d1:0e:b7:
         a0:4b:24:6d:91:55:e5:5d:3a:7e:31:83:1e:55:48:11:52:a0:
         37:ba:4d:49:70:05:3a:4e:fb:a4:66:d6:e9:10:0c:04:97:2e:
         89:94:f3:0e:10:ae:5d:de:cf:d2:c1:35:67:b0:73:dd:48:81:
         5d:7c:ca:c0:b5:8c:14:a8:11:40:d6:74:f8:79:1b:6c:ee:f0:
         b5:bc:80:c1:ec:80:74:6c:35:de:aa:97:98:9f:27:3d:07:dc:
         c2:89:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:50:57 2025 by rpki-client