Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf239c87-b620-3d0d-8185-2095763c0bd6.roa
File:                     bf239c87-b620-3d0d-8185-2095763c0bd6.roa (raw, json)
Hash identifier:          LSxOKrmISZA0qngjK5JZqlMwbp7t3CZCNfM5+IU/CO8=
Subject key identifier:   5A:94:08:EE:51:77:CD:D7:48:29:6B:66:16:74:50:0C:6D:5E:7B:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C079B613BEE8C5632F42689
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf239c87-b620-3d0d-8185-2095763c0bd6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        73.141.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:9b:61:3b:ee:8c:56:32:f4:26:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=cfbe1b06-dafa-44bf-b4a8-56325eeca8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:b5:c1:82:62:32:2c:ae:4f:2d:cf:33:b4:
                    ab:20:d2:b6:9b:18:98:34:11:6c:c9:1b:9d:7e:42:
                    71:98:02:fb:62:f8:a4:88:bc:02:4e:87:19:62:54:
                    e1:34:85:8b:01:fa:51:7c:83:3a:70:23:1c:b3:b8:
                    63:35:1f:37:f4:ef:13:3e:99:19:73:ed:c5:73:14:
                    f8:eb:23:ed:8c:af:8a:ff:ea:a0:a6:6d:4c:bb:c5:
                    d7:00:d9:67:ad:d7:16:a6:1a:eb:70:ce:c3:97:4f:
                    6d:8c:1d:cf:a3:21:90:de:f0:2f:7d:52:f6:4a:b6:
                    d2:53:d2:c1:7e:12:ab:a9:fe:ad:ef:07:9e:05:08:
                    18:8d:01:75:be:c3:0d:e8:2d:07:14:0e:6a:35:11:
                    e2:e3:a7:b6:e6:56:cc:54:63:9d:dd:4d:f0:a2:e0:
                    ab:a9:7c:0a:bf:0a:f2:2f:7d:df:a7:0c:09:14:3b:
                    ff:8c:ab:2d:4e:5a:d9:9f:ba:92:17:a0:58:44:5e:
                    39:ec:26:e8:d0:bc:7c:65:98:90:54:d7:5d:6e:31:
                    b2:f5:a6:29:1e:af:1b:eb:62:59:40:17:42:39:bc:
                    19:03:03:36:0f:3e:fd:fa:d0:f9:5e:b2:95:22:f9:
                    b5:7a:15:40:cc:30:79:83:18:e4:f4:f8:e4:13:09:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:08:EE:51:77:CD:D7:48:29:6B:66:16:74:50:0C:6D:5E:7B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf239c87-b620-3d0d-8185-2095763c0bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.141.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:96:73:90:4f:a5:a5:74:98:a0:6c:c8:33:b4:83:78:d2:03:
         5e:28:63:28:4c:24:14:d0:79:0f:7c:49:cd:ac:29:84:1b:ce:
         a9:53:d9:95:f8:aa:7c:16:9e:e5:00:45:be:fe:8d:ee:4f:0e:
         39:62:8f:51:7a:f4:eb:6a:78:e7:98:4a:df:dc:0b:af:b0:82:
         7d:54:b2:a0:b9:fb:ad:98:f5:93:05:dc:c9:db:30:11:ca:c0:
         64:bb:26:98:21:77:71:9a:ab:1e:16:13:2d:29:fa:2a:8b:11:
         47:df:fd:7d:ed:3a:48:09:47:92:ad:5f:ae:b9:2e:30:fe:29:
         6a:dc:d8:79:da:35:0f:c1:ca:d8:11:cb:97:31:dc:3b:8f:d1:
         b2:9f:9c:00:aa:5b:4b:3f:d1:f7:71:9b:c9:49:75:c7:22:55:
         28:0d:ec:b5:12:8d:77:6b:41:b6:b3:ab:6a:c6:9c:e2:33:3c:
         7f:01:de:f2:fd:ec:01:8d:1b:13:1f:11:ce:07:c3:ad:4f:19:
         c7:53:42:59:22:c7:b2:0c:65:2e:ef:c6:b4:54:52:59:7b:e7:
         a3:21:2c:b4:ab:b7:6a:2a:54:06:b6:f5:5d:06:67:3b:06:53:
         67:7f:cd:35:13:a8:bb:84:49:d1:49:36:97:4b:0d:d5:06:c6:
         8f:2f:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:12:50 2025 by rpki-client