Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa
File:                     c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa (raw, json)
Hash identifier:          830yZJS75YOtyKPxgm/bB0OHg3K64XqOHnJS621un7o=
Subject key identifier:   DF:5F:EE:2E:A9:24:8D:7A:66:56:4B:78:AE:3C:B9:31:25:2F:15:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430540B8F3E12F46162CAE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.249.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:54:0b:8f:3e:12:f4:61:62:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ccddd48e-b640-4ee3-b520-b9b9c7441094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:bc:88:dd:94:db:f4:21:4e:4f:d7:a4:24:
                    be:26:99:db:aa:b1:13:e1:9e:68:10:6c:a7:37:af:
                    ac:79:29:56:58:ac:79:31:69:bb:22:c8:48:66:70:
                    b2:6e:1b:98:f3:54:67:9a:4a:db:27:81:13:48:1d:
                    55:a2:26:4e:6f:71:57:eb:11:33:48:7d:4c:b2:e2:
                    10:3a:ed:7c:b2:d8:cb:ae:5a:e6:36:c0:2d:39:ba:
                    08:28:fc:aa:77:af:45:de:1c:50:78:00:83:7c:4c:
                    5c:a4:59:94:36:ae:b8:cb:e2:53:bd:ea:23:08:66:
                    90:cf:55:5d:e6:ff:dc:a0:ac:1d:d3:24:96:1c:5a:
                    27:00:12:d2:96:36:43:e8:cc:c9:85:10:4c:a5:76:
                    39:16:ae:b2:18:0f:41:c4:df:7e:3b:01:1b:2a:14:
                    30:3d:3a:34:87:ba:3d:83:74:1d:5e:fc:14:3d:24:
                    66:ad:3e:10:1b:a4:e8:7f:0a:e8:fb:13:88:1b:8e:
                    e5:58:13:ee:a8:93:8e:f9:fd:25:1c:45:44:fc:dd:
                    8b:33:63:ec:49:2e:37:0a:de:98:89:7f:47:ac:a0:
                    10:63:57:ad:40:01:2a:a4:a3:99:3b:eb:cf:23:56:
                    9f:a4:18:8d:f4:49:0e:99:26:62:6a:65:74:ed:a2:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:EE:2E:A9:24:8D:7A:66:56:4B:78:AE:3C:B9:31:25:2F:15:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.249.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:7c:be:4d:36:23:da:09:a9:6a:75:3c:a1:b3:74:7e:83:
         e5:50:48:d5:55:a4:2c:95:04:bd:25:d2:92:75:dd:64:d6:22:
         50:3c:13:7f:ff:ca:da:51:d2:e2:5e:c3:0f:11:cd:84:a0:60:
         61:0c:cb:e7:8b:3d:38:29:49:e5:af:52:10:30:d5:6a:bd:99:
         3c:12:bb:25:b6:64:d0:02:e7:12:e4:97:43:2d:8f:2a:05:bd:
         20:85:1c:2c:22:72:48:b7:e5:23:bc:3f:66:ac:c0:96:a8:59:
         13:c8:db:81:29:35:6f:9a:05:49:6d:e7:20:fc:95:66:c1:31:
         7c:ac:a5:5d:83:39:27:ee:88:38:8c:51:2e:f8:7a:e2:1c:a7:
         a7:76:da:e0:0a:25:5b:58:e5:37:1b:8c:16:88:d3:cd:90:22:
         3a:57:91:a9:1e:bd:10:34:9b:ed:f7:db:6c:eb:76:63:0d:f1:
         76:59:b5:89:bd:40:4f:5b:6f:53:71:86:0e:94:09:4b:d4:2f:
         0f:38:b3:34:2e:fd:a4:43:18:9f:77:51:25:3a:a7:cd:1a:22:
         e2:93:3a:f8:2a:63:7f:8f:90:4f:55:03:b8:a2:83:53:cf:f5:
         9c:8a:24:3c:44:67:33:6b:c7:fe:90:56:34:4a:e9:f7:03:5c:
         6e:1c:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:55:00 2025 by rpki-client