Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcb1a8b0-250e-349c-a22d-facdc7ff4f99.roa
File:                     bcb1a8b0-250e-349c-a22d-facdc7ff4f99.roa (raw, json)
Hash identifier:          y08pJFPbfYXI6ASCb9ObLbbueI0PFfOcj70IT5Rpbhw=
Subject key identifier:   C4:94:9C:5A:EE:9E:4F:8F:6C:87:81:24:14:A8:30:76:92:E6:5E:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C088D645EF6161EFEFEB600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcb1a8b0-250e-349c-a22d-facdc7ff4f99.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.15.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:8d:64:5e:f6:16:1e:fe:fe:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=25bc84fc-e636-4a0d-8c00-6e0c10dab44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:64:bd:25:08:9b:3f:17:05:71:07:0f:24:
                    e5:a9:5e:d8:db:6d:30:ff:dd:ee:ea:c1:71:68:b2:
                    dd:80:94:73:38:9a:89:07:26:dc:83:b9:96:9c:e6:
                    bf:ce:89:c6:cb:5f:b3:6a:71:95:16:e5:be:d5:f7:
                    ee:a6:53:e5:10:c5:08:0c:98:1f:52:e3:28:59:93:
                    69:f1:35:4a:5c:ff:f9:94:31:62:4b:0a:0b:62:af:
                    0f:0b:74:1d:6c:60:70:99:19:b3:02:24:91:d6:37:
                    bd:78:cf:aa:fb:25:e1:1e:8b:bc:1c:eb:a9:2c:84:
                    d3:0c:64:ca:0c:a6:f5:cf:2f:4a:bc:5b:b2:c7:88:
                    7e:c6:27:5d:28:c1:49:80:59:dd:8b:86:73:5a:17:
                    29:33:38:54:96:3c:da:3a:a6:6c:26:2d:37:f3:7b:
                    66:8d:7e:13:dc:59:49:3a:7c:46:29:ec:0f:76:40:
                    b9:16:db:0f:bc:b6:f9:86:d6:b9:34:01:85:a1:c9:
                    d3:d0:e5:0b:ca:f3:01:a4:b3:dc:48:84:de:c6:26:
                    25:91:26:ea:ca:a4:4d:e1:f7:c2:30:36:fd:2f:cc:
                    58:93:db:83:91:0f:5d:91:8f:3e:09:cf:a5:d5:54:
                    77:d4:af:12:6d:da:d8:bd:ea:8e:e8:8b:bc:4d:de:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:9C:5A:EE:9E:4F:8F:6C:87:81:24:14:A8:30:76:92:E6:5E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcb1a8b0-250e-349c-a22d-facdc7ff4f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:41:26:77:ad:17:e3:9f:0d:b2:20:45:b2:73:35:ed:2a:
         52:39:fd:b5:5b:32:0d:dd:95:47:c5:43:84:97:7a:e6:27:74:
         d2:b5:96:84:c6:a4:85:9e:dc:6f:3c:a6:72:24:ee:2f:d1:64:
         31:db:2c:0d:b1:a0:7c:ef:36:aa:eb:91:2c:7e:25:d6:f7:a0:
         aa:3c:bf:f0:48:6b:de:9f:bf:96:d8:74:dd:be:f6:13:c9:50:
         59:d4:13:cc:17:1b:87:fa:6c:8d:1c:c8:fe:36:66:1b:03:ca:
         7c:ff:69:42:b9:be:2b:ae:10:bb:be:1e:53:c1:ad:f3:e5:f1:
         15:cc:3e:74:53:2c:e3:d4:08:33:db:12:9e:07:9f:65:5b:88:
         7e:9e:c1:c7:ac:6e:0f:d1:2e:c1:8d:38:e2:a6:59:18:9d:44:
         b8:c8:8e:0b:af:b1:86:22:2a:e9:9c:08:d7:be:be:cf:07:dc:
         ea:2b:49:a6:e9:1a:56:b6:5a:7b:e7:49:f9:ae:54:80:9c:fe:
         8d:de:91:e8:05:71:ef:fb:2a:0f:d2:c2:5e:04:b5:63:cb:d0:
         01:b9:8e:39:d7:c9:7b:71:e1:ae:c7:27:b0:1b:95:8e:48:88:
         d3:6d:bf:04:a8:27:4a:51:74:d4:37:d4:8b:d3:4f:24:08:e7:
         67:f9:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:08:53 2025 by rpki-client