Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4b8937e-2802-3475-8369-365175d08db8.roa
File:                     c4b8937e-2802-3475-8369-365175d08db8.roa (raw, json)
Hash identifier:          uR2agBLryAW5b3X9YgehZahrQG4BGOVKRIeoTmvHBuc=
Subject key identifier:   30:43:6D:DF:0F:63:C1:09:E5:B4:51:95:D4:97:33:68:BF:4E:73:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06FEBE0EB27766F1398300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4b8937e-2802-3475-8369-365175d08db8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.70.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:fe:be:0e:b2:77:66:f1:39:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=683ddd0c-ed2c-41ed-897b-e80fc45952ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:a4:67:54:c7:4f:04:7b:50:d2:e2:48:7e:
                    ce:92:71:68:31:94:2a:75:e3:2d:15:0d:24:91:ea:
                    0a:35:1b:f2:ad:5a:50:9d:1e:91:52:7f:fe:47:2d:
                    0a:05:fe:30:96:38:27:98:e3:6d:93:ca:a2:46:b3:
                    5a:90:92:93:00:49:1f:86:90:22:d8:09:ce:c2:11:
                    d1:87:e7:fc:9e:33:71:31:df:29:23:84:9a:90:82:
                    23:98:0e:41:d5:25:f3:c2:e5:1d:ba:35:1f:91:1d:
                    9d:e3:cb:6c:a2:65:aa:25:81:f2:ec:47:8a:5b:c8:
                    80:ee:fc:3f:d7:88:e4:65:06:fc:bd:3c:6b:fe:f5:
                    75:70:20:ae:11:4c:50:7e:c5:eb:f3:4d:ce:b9:79:
                    a8:57:05:69:8f:95:01:44:c2:01:4f:ab:de:4e:02:
                    8c:ce:98:8f:80:e8:c0:93:d5:a2:7f:d0:11:8f:e4:
                    3a:a2:8f:76:85:17:90:4d:23:d6:a3:fa:46:b6:6d:
                    e4:d6:0f:03:a4:13:a1:6a:23:ee:67:39:97:eb:11:
                    43:5d:a2:ac:5d:52:c1:77:54:d5:60:63:fb:10:99:
                    e9:2e:6b:51:d1:72:75:6d:c1:16:c2:26:cc:36:ea:
                    4f:24:53:7c:0d:1e:6d:b8:ba:2c:f9:da:bf:29:8b:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:6D:DF:0F:63:C1:09:E5:B4:51:95:D4:97:33:68:BF:4E:73:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4b8937e-2802-3475-8369-365175d08db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:bf:36:38:76:49:01:11:42:d4:40:69:77:a9:69:9a:b3:50:
         37:13:75:af:20:c5:1d:b2:b7:56:7e:a8:9b:a3:27:33:b6:38:
         72:c3:13:ef:dd:f3:e8:fa:b7:be:94:d8:bf:f8:35:de:d4:75:
         25:00:29:bb:48:4f:ed:26:59:de:32:a8:89:ce:10:d0:d6:19:
         d7:47:04:d9:df:37:a6:1a:f7:fc:90:b5:5b:ba:d1:03:80:57:
         db:9d:54:95:ea:8a:b2:9f:d3:a8:2a:2a:dd:1f:ec:1b:4a:7c:
         65:e1:97:f3:08:c5:d6:ad:10:ca:58:47:6e:e6:87:68:31:db:
         46:6a:ef:3c:f0:03:53:4f:ba:d9:bc:4d:8f:b6:c1:e7:34:4b:
         c8:6f:2f:1b:19:0b:41:59:e2:d2:7a:3e:3b:d1:67:2b:0d:b0:
         93:a7:32:3f:b8:32:99:bb:c2:2d:54:40:b3:48:47:9c:7d:e8:
         d4:5d:38:16:13:35:08:f1:43:ff:2c:c8:1b:60:14:39:21:7a:
         af:67:7a:ee:74:7b:cc:dd:c3:b2:07:f1:94:a7:ee:e9:a7:43:
         5d:31:69:75:15:89:3b:ea:32:a6:b3:aa:8a:0e:a4:e9:c0:0c:
         5c:a3:85:aa:3f:c2:db:6c:98:e2:d5:52:f8:9f:ba:f0:61:f1:
         7f:6c:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:54:12 2025 by rpki-client