Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be671015-4c57-3b94-8a3d-a644100cb843.roa
File:                     be671015-4c57-3b94-8a3d-a644100cb843.roa (raw, json)
Hash identifier:          0Doj88chWbIJBNI7WE74s6MelODxRct3QqTJ2uEYaFg=
Subject key identifier:   78:56:A9:9D:CE:0C:CE:12:04:1D:69:5B:0A:75:F1:B3:3C:9E:7C:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4314576611E5C5BC03B9A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be671015-4c57-3b94-8a3d-a644100cb843.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.240.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:45:76:61:1e:5c:5b:c0:3b:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=728028f1-26c3-44fb-9456-8dc4ab66c044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:fa:99:97:c6:85:2c:47:15:68:92:07:ef:
                    12:9f:50:5a:a7:e0:b6:41:5e:ec:a6:0e:d9:ca:9f:
                    86:43:ae:df:19:6c:14:e9:23:9c:8c:33:61:a8:7f:
                    f5:a4:bd:76:53:d2:65:bd:56:2c:85:6d:65:fe:2b:
                    26:82:34:e3:a3:c7:55:48:92:30:d8:8b:32:50:6e:
                    c7:ee:00:51:ad:93:4c:b2:91:7f:30:c8:cb:fa:b5:
                    69:60:ab:59:ba:1f:4d:02:10:b3:34:df:ac:8a:31:
                    b8:26:8a:94:ae:ff:bf:24:84:af:ba:4d:11:b9:87:
                    06:92:b7:90:33:80:ae:a4:40:a0:91:8b:25:0f:96:
                    c7:4b:1e:01:1a:76:96:07:99:4c:86:3a:4d:c8:44:
                    4e:1f:9d:e3:62:2d:95:f2:67:a9:60:97:5d:66:0a:
                    6e:7a:df:39:e1:31:b9:41:c9:fd:ee:c0:39:ca:69:
                    a2:06:c3:80:67:84:f5:f1:94:da:6b:e3:db:fe:21:
                    1f:a9:44:9b:aa:92:be:f6:c3:b8:70:e6:cf:76:68:
                    cb:55:76:f6:2d:82:77:67:6a:2d:7d:8f:df:b2:02:
                    19:e5:ba:8c:dd:fd:2b:6c:20:db:4f:ab:b5:e5:b4:
                    67:5c:1f:08:7e:db:e0:af:96:f1:f3:7b:3a:bb:02:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:A9:9D:CE:0C:CE:12:04:1D:69:5B:0A:75:F1:B3:3C:9E:7C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be671015-4c57-3b94-8a3d-a644100cb843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:63:df:37:47:40:77:27:1b:73:45:1c:22:c6:ed:29:0a:30:
         bd:15:e4:c5:76:12:17:3b:f2:0a:63:c2:8b:19:f2:b1:6b:d9:
         d9:36:83:97:76:0b:4b:e3:49:77:0b:f9:ff:89:ab:85:38:14:
         62:4d:08:b7:c1:ff:ed:a7:e8:a3:78:36:e8:ea:61:31:bc:94:
         36:b9:3d:1d:f6:57:01:7a:ed:f3:e4:5b:f6:f0:f6:7d:57:b3:
         df:3f:32:b6:a7:ad:ec:52:ec:83:0f:4c:ff:4e:dc:69:d7:bc:
         e8:53:c2:ca:21:2c:4c:f8:b8:e1:51:c5:5b:a5:1d:9b:3c:9f:
         74:4c:7e:11:a7:bd:02:93:52:f7:f7:57:fa:a3:ce:13:cb:7e:
         ed:ec:d2:6b:fb:af:8d:8e:30:42:1a:f7:eb:4d:75:a2:fb:ef:
         9f:13:91:96:8e:48:65:cf:1d:f3:f6:f1:f8:3e:1c:cf:6e:36:
         1d:bc:e3:a1:9f:cf:1e:5d:4a:70:a6:10:73:60:a1:46:09:eb:
         9b:a8:19:10:20:61:87:92:5c:b2:d0:ec:e1:49:f4:f6:6f:56:
         dd:fe:d9:3f:ec:40:1d:65:c6:38:ae:22:dd:70:c5:2f:b7:0a:
         72:b6:ab:52:2d:d2:29:a5:41:18:98:bc:9d:1d:b8:2e:24:99:
         15:8a:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:44:29 2025 by rpki-client