Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a4144c-a2bf-3c50-8aae-4554e4b19814.roa
File:                     c7a4144c-a2bf-3c50-8aae-4554e4b19814.roa (raw, json)
Hash identifier:          hLsHIIgdDw/OQsvUvIZP03xraIsEphZ5k5ETK2GlhJ8=
Subject key identifier:   BB:12:E8:F4:C9:74:2C:8B:3C:97:DA:3F:92:EC:D3:79:C6:66:84:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0A7E798BB2B3B3BD4C100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a4144c-a2bf-3c50-8aae-4554e4b19814.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.188.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:a7:e7:98:bb:2b:3b:3b:d4:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=4ae34088-7013-4196-849d-0b1fe06d3a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:e9:c6:25:be:32:65:16:be:07:13:8a:c4:
                    9b:2c:0c:dc:82:a5:d1:3b:20:3b:29:89:4d:28:eb:
                    c2:b3:b4:69:f1:77:5d:3c:b1:16:b1:20:dc:1c:73:
                    10:c5:4e:79:48:e8:45:31:d3:b2:99:01:1d:f7:03:
                    7f:ff:78:a1:9e:f4:46:60:54:63:bd:f1:1a:fd:c3:
                    a6:16:8c:4e:4e:e7:05:82:36:57:8d:9f:85:c7:46:
                    6a:ad:48:91:24:73:d6:82:be:10:b8:a0:6f:f8:99:
                    55:29:2f:16:dc:9e:01:4e:0b:01:6c:f5:b8:b8:ca:
                    2a:d4:da:8b:7c:e3:f8:9a:a8:6a:42:8b:2f:78:55:
                    1d:80:46:eb:c1:47:ee:c3:56:12:23:ef:34:f6:23:
                    38:a6:e2:d7:e3:fc:3b:b1:f8:c3:00:03:1a:f3:f5:
                    92:4c:23:7a:eb:0b:7c:a9:ee:e8:7d:f2:59:b1:c8:
                    79:9d:d2:83:83:4f:c1:99:20:b7:b4:cb:50:99:c4:
                    6d:61:9d:b2:12:bb:f2:ce:1a:ec:15:33:5e:f8:25:
                    20:74:ce:a7:83:5d:41:3f:4c:6d:d1:af:26:10:40:
                    11:a5:4f:f6:9f:c7:59:83:02:d0:db:68:a0:c7:e0:
                    2e:1a:c8:27:c6:6f:32:14:4e:b3:44:4c:4e:cd:60:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:12:E8:F4:C9:74:2C:8B:3C:97:DA:3F:92:EC:D3:79:C6:66:84:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7a4144c-a2bf-3c50-8aae-4554e4b19814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:1f:10:21:4a:55:5d:b1:1e:dd:7e:34:1b:1a:72:1f:1f:
         f6:24:5c:ad:d9:e2:50:3e:5b:ba:ec:da:2e:21:22:90:8e:a8:
         0c:e2:3e:5f:8d:40:6c:9c:19:de:f4:91:63:d5:78:33:0d:27:
         f8:97:6f:30:fb:2a:5c:06:28:dd:42:4a:9c:9d:43:fd:7c:e8:
         79:bb:6c:3f:e1:24:6e:96:2c:79:ca:11:b0:72:a3:14:72:37:
         4d:bd:22:97:39:f1:fd:70:a1:e9:df:02:15:42:49:3f:be:ee:
         f1:da:24:cb:01:40:62:88:36:a5:08:99:e5:8b:7d:0f:e2:11:
         8f:4b:5e:f8:49:c3:97:b5:86:3a:09:55:43:4c:db:5b:03:1f:
         d5:67:f8:36:10:38:ea:df:71:e6:fb:e4:8c:57:d1:ef:be:1d:
         9c:0e:9b:9e:13:b4:e0:2d:00:50:ec:86:b8:ce:4a:88:d1:83:
         47:50:63:79:53:51:30:75:8a:10:53:44:93:ac:49:70:8d:0f:
         40:09:37:1f:2a:74:82:37:12:35:96:0a:69:f6:f4:8d:d5:c4:
         9a:d9:f7:5d:82:3e:15:07:5e:a3:ba:3d:3a:15:39:54:41:fc:
         24:30:da:73:ca:9b:41:38:cb:28:3a:3a:45:32:89:37:31:a9:
         e7:e7:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:22:15 2025 by rpki-client