Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8b35d82-13cc-321f-9ef4-cbad3a7853a7.roa
File:                     c8b35d82-13cc-321f-9ef4-cbad3a7853a7.roa (raw, json)
Hash identifier:          68v7hW8ady9ciu83aCtV2+7mer9NhfzYsGBrSOAYPVI=
Subject key identifier:   46:62:8A:46:F0:15:05:CE:E6:ED:84:B9:60:C9:EE:7D:74:C1:50:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF755078D4968FC69B573DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8b35d82-13cc-321f-9ef4-cbad3a7853a7.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        73.207.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:50:78:d4:96:8f:c6:9b:57:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=ccc757d7-e9ab-4688-87d4-5da634350209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:99:60:fc:64:c7:71:e9:84:cd:1f:35:59:
                    58:51:20:93:b6:04:e7:ce:be:b9:33:27:ab:f4:0f:
                    9d:97:64:b2:82:70:54:96:91:96:dd:0e:28:a3:79:
                    63:28:9b:d0:79:47:85:8d:7e:9b:07:ce:79:ba:53:
                    6c:99:90:fd:05:7f:a0:d5:21:df:f9:cf:88:96:f2:
                    8f:a2:11:86:82:4e:2f:44:6e:5f:0e:8f:45:17:d2:
                    55:d0:6e:31:dc:9d:3b:0f:b7:6a:b6:57:74:b7:fb:
                    ff:84:3a:61:f0:0e:67:f1:60:5b:9a:ff:cb:95:a2:
                    dd:4a:f7:df:a6:21:36:ec:17:76:b7:a7:b6:0c:f1:
                    bb:41:7d:f5:01:f8:55:76:d5:08:60:aa:d2:f5:75:
                    86:f0:23:b7:33:3b:e1:bc:67:97:1c:93:66:7c:b5:
                    f4:c7:92:54:1c:7d:27:fd:28:b6:fd:90:34:3d:07:
                    35:f8:4e:48:79:37:fb:e4:ae:33:42:27:02:7d:35:
                    11:4e:db:e2:7c:61:59:c8:99:15:ea:27:eb:49:9c:
                    b3:0a:df:30:da:aa:66:7a:6a:eb:4c:6f:1e:30:fc:
                    40:76:f8:20:6f:94:27:ea:fa:25:c8:70:35:bf:ea:
                    9a:f4:83:f1:d5:49:c5:60:0e:6f:bf:48:b0:20:69:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:8A:46:F0:15:05:CE:E6:ED:84:B9:60:C9:EE:7D:74:C1:50:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8b35d82-13cc-321f-9ef4-cbad3a7853a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:7e:07:e1:c2:17:80:2a:e6:2d:fd:ff:55:1a:06:3a:1e:
         50:30:a8:10:eb:eb:7f:ff:f5:23:86:1a:0a:c1:8c:b6:b2:ff:
         05:3a:4c:51:39:05:80:33:41:db:28:06:71:26:e8:db:be:17:
         3b:4c:f4:e7:66:e1:b2:b7:95:20:18:90:c0:e8:92:e8:ec:7d:
         07:be:3e:b8:89:42:52:12:d6:ef:3d:5f:57:c6:c6:fd:3a:2c:
         30:9f:59:42:4c:fa:ec:7b:b6:bc:cd:09:2f:e2:bf:dd:b2:47:
         7d:39:e7:71:5a:25:18:e8:35:f7:f1:67:3e:94:04:4f:f7:5f:
         55:05:65:6f:2d:6c:c8:a3:c6:35:df:8e:cf:5b:75:c9:e9:7a:
         08:85:07:a9:c9:b7:7e:74:f5:d6:ba:20:d1:17:0a:2f:fb:65:
         41:02:1b:83:89:e1:a4:36:6c:46:dd:72:fd:44:88:c8:05:b0:
         3e:75:b5:69:f9:66:31:99:d2:b7:8a:f7:68:00:aa:fe:67:b2:
         1d:91:05:36:a0:34:c5:ed:ee:d2:df:8a:d1:3b:f9:4b:00:2c:
         fd:c2:79:df:20:3e:5e:f7:49:9e:2b:42:a2:89:20:b1:bc:f7:
         ab:b8:34:d9:b6:fa:f6:3a:24:96:91:8e:a4:86:bf:61:87:a6:
         18:20:81:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dVB41JaPxptXPeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
Y2NjNzU3ZDctZTlhYi00Njg4LTg3ZDQtNWRhNjM0MzUwMjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivyZYPxkx3HphM0fNVlYUSCTtgTnzr65Myer
9A+dl2SygnBUlpGW3Q4oo3ljKJvQeUeFjX6bB855ulNsmZD9BX+g1SHf+c+IlvKP
ohGGgk4vRG5fDo9FF9JV0G4x3J07D7dqtld0t/v/hDph8A5n8WBbmv/LlaLdSvff
piE27Bd2t6e2DPG7QX31AfhVdtUIYKrS9XWG8CO3MzvhvGeXHJNmfLX0x5JUHH0n
/Si2/ZA0PQc1+E5IeTf75K4zQicCfTURTtvifGFZyJkV6ifrSZyzCt8w2qpmemrr
TG8eMPxAdvggb5Qn6volyHA1v+qa9IPx1UnFYA5vv0iwIGlleQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZiikbwFQXO5u2EuWDJ7n10wVB+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhiMzVkODItMTNjYy0z
MjFmLTllZjQtY2JhZDNhNzg1M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc/+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERtfgfhwheAKuYt/f9VGgY6HlAwqBDr63//9SOGGgrBjLay/wU6TFE5
BYAzQdsoBnEm6Nu+FztM9Odm4bK3lSAYkMDokujsfQe+PriJQlIS1u89X1fGxv06
LDCfWUJM+ux7trzNCS/iv92yR30553FaJRjoNffxZz6UBE/3X1UFZW8tbMijxjXf
js9bdcnpegiFB6nJt3509da6INEXCi/7ZUECG4OJ4aQ2bEbdcv1EiMgFsD51tWn5
ZjGZ0reK92gAqv5nsh2RBTagNMXt7tLfitE7+UsALP3Ced8gPl73SZ4rQqKJILG8
96u4NNm2+vY6JJaRjqSGv2GHphggge8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:57 2025 by rpki-client