Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e196ff-ea8d-399f-9350-27349c7ad946.roa
File:                     c6e196ff-ea8d-399f-9350-27349c7ad946.roa (raw, json)
Hash identifier:          XGfIGWVhu4ZlOO9zc0HOV48h2EEq3gpVjvEHrgJYMH8=
Subject key identifier:   48:F7:93:E4:DD:FA:19:16:EE:B1:FC:80:BD:ED:87:77:17:7F:6A:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08075B8A1B2E5514EC67C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e196ff-ea8d-399f-9350-27349c7ad946.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.146.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:07:5b:8a:1b:2e:55:14:ec:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=97afe538-9a2b-4859-b7f6-6cc13a76b8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:c4:fb:bb:80:d2:33:4d:42:89:41:4c:fd:
                    74:46:df:ae:c7:66:e1:a5:72:ed:f5:e7:d5:52:25:
                    2e:96:44:57:38:dc:73:6c:2a:92:0f:a4:4c:66:7c:
                    97:7e:fa:37:8b:30:a3:ea:7e:3c:19:39:cb:5a:95:
                    51:f9:55:4b:4b:48:8a:f1:78:94:7a:19:8e:8f:e9:
                    5d:1d:ad:b5:84:33:8a:90:5f:93:d6:a6:c6:f8:f4:
                    84:bd:80:a1:12:b6:5c:3c:de:e9:62:3b:75:6c:f2:
                    cf:cc:3b:2f:a0:3c:b8:e3:cf:7a:e9:29:5c:95:15:
                    ed:43:b7:d6:7c:e3:a1:92:1d:a8:39:b2:a0:de:65:
                    03:0c:24:11:66:17:dd:83:94:05:38:89:df:70:7f:
                    7f:db:82:a5:a7:9c:b7:b4:7d:30:a8:24:d0:49:63:
                    36:cc:f5:63:60:ee:42:3a:cf:cc:15:a0:0f:2f:53:
                    78:77:7e:47:fe:62:a0:b9:8f:a0:00:77:03:aa:37:
                    df:41:a6:e6:01:c5:2f:0a:21:d3:5c:85:d1:ab:0f:
                    3e:f2:b5:f3:7f:b0:33:6f:05:46:ed:29:6e:45:19:
                    34:25:2d:c4:e0:eb:04:63:b1:1c:cd:11:fe:ab:37:
                    22:ef:96:ad:e1:f6:a4:f7:dd:c5:b5:0c:7e:38:b5:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:93:E4:DD:FA:19:16:EE:B1:FC:80:BD:ED:87:77:17:7F:6A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e196ff-ea8d-399f-9350-27349c7ad946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:c2:7d:71:c2:be:17:99:33:da:68:4c:63:29:3d:62:f0:
         9c:c1:6f:fc:a2:47:29:52:41:4f:d9:b0:4b:56:7f:2e:39:ae:
         29:9f:e7:d9:91:b5:92:d7:42:9c:87:cc:23:c5:cf:29:f8:f7:
         3e:42:a2:60:9a:b8:71:69:e5:fc:ef:a6:42:c9:a1:d9:2b:05:
         a7:e0:73:73:a3:07:9b:22:ec:ed:47:5d:2b:c2:f8:85:60:ce:
         26:71:dd:ae:5b:71:09:b8:98:36:d3:71:1e:8f:3f:a7:31:91:
         53:a0:58:ce:f8:ff:4f:8a:c8:01:e7:a5:1f:a6:5c:b2:da:0b:
         58:d8:26:fe:ca:72:35:3b:5a:02:36:ef:21:b2:8e:90:fc:30:
         a5:5b:e2:fb:00:fd:a7:52:96:63:d8:b8:4f:19:2a:2e:49:0c:
         a4:0e:06:ed:8f:65:21:68:55:c5:4a:5f:59:f3:34:91:04:1b:
         ac:fb:53:7f:81:41:3a:70:f5:c4:b4:8a:55:fd:f1:d5:1d:3b:
         81:80:10:86:c5:07:bf:2b:dc:f3:40:0c:a0:95:b7:7d:13:fa:
         38:ad:58:3d:6f:7d:01:c0:b8:fd:83:c6:b5:41:00:87:ad:78:
         f0:c1:7b:c1:9e:23:5d:3e:35:64:45:c4:c2:8c:08:4c:bc:dd:
         7d:d6:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:08:51 2025 by rpki-client