Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa
File:                     cae28396-f162-31b1-90ba-f46cb0ee85cd.roa (raw, json)
Hash identifier:          AGTB0ZSJQrF/AAj5nv/sbj9rURBF+BSqi5Fahm6Py6g=
Subject key identifier:   19:7A:01:6B:16:F0:7D:D3:C7:6F:25:56:9C:BE:F8:86:3C:59:69:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB100634595FCA6F7B111E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.210.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:00:63:45:95:fc:a6:f7:b1:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cf0558b9-608b-4e17-ae65-3707db95df38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:8d:51:3c:4b:00:d3:30:6c:eb:fd:20:a6:
                    1f:9f:3c:5e:fd:6b:f0:aa:36:b4:d5:48:88:83:31:
                    b6:b8:b3:3e:5f:6a:86:b8:f1:3f:78:e8:5e:c2:db:
                    7f:7b:fa:eb:1a:18:84:a2:38:df:87:92:e0:0f:63:
                    f2:7b:6a:4c:47:86:21:f8:b1:f7:31:40:72:b3:e5:
                    0f:bd:b3:3c:d7:45:25:40:9b:32:c3:4c:23:d1:53:
                    e2:c4:7f:59:dd:64:e2:8f:06:d4:b9:ec:c8:0b:b1:
                    f7:91:2b:91:bc:55:2b:1f:4f:d0:81:ba:07:bd:bf:
                    8e:cc:31:b6:fa:66:d0:57:bd:42:c3:c9:6d:81:ca:
                    aa:f7:e0:90:3f:c4:f8:02:1e:f3:d2:dc:b8:e8:4e:
                    03:8d:e8:9e:70:29:11:e5:5b:0f:f0:63:08:21:07:
                    b2:10:50:39:f5:5e:a4:79:32:8e:e8:14:4e:b1:af:
                    8c:69:ca:61:48:e7:34:41:a5:ca:90:a6:59:f7:e4:
                    d8:0e:b8:5e:09:fe:04:5f:2b:24:13:2a:70:78:dd:
                    50:11:75:54:70:4a:e3:38:9a:4b:d2:48:a4:35:eb:
                    ce:6e:fb:d3:e6:8a:bf:77:5a:ae:c4:83:c1:d2:c4:
                    4e:56:50:29:0a:f0:bb:c0:cb:29:de:83:ea:13:37:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:01:6B:16:F0:7D:D3:C7:6F:25:56:9C:BE:F8:86:3C:59:69:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:c7:12:53:ea:da:81:48:fc:f6:a6:ad:92:c5:61:ae:fe:a7:
         bb:9e:88:e9:05:9b:7a:94:8c:c0:3b:05:58:4b:ca:aa:42:f9:
         25:24:34:94:26:8f:22:98:90:ff:60:f8:c2:8c:49:69:61:4c:
         7b:b9:01:f5:b3:ac:24:b7:88:e7:9f:f9:fc:32:f5:2d:45:4f:
         5e:8d:23:cb:53:2c:53:ab:ba:9b:12:b4:c9:bf:1b:4d:b5:1d:
         aa:54:74:62:00:25:ed:c6:5c:9e:d2:34:81:f7:b6:de:ae:61:
         be:ce:dc:fc:45:88:59:23:19:79:b3:81:22:f7:73:a7:8c:e9:
         ab:06:2f:1e:5a:3e:83:6f:1b:ee:87:e2:df:da:2d:d0:78:74:
         96:7d:d0:b1:59:91:0c:0a:43:f2:40:54:a3:63:fc:ca:e5:21:
         7f:3d:2d:3f:91:09:74:4e:35:33:6c:ce:20:13:d4:fb:77:21:
         12:9b:ce:9c:6d:b8:8e:76:30:8b:2d:87:7f:48:46:d5:98:da:
         eb:04:19:84:2c:f4:2f:de:e9:a6:88:dd:45:68:8e:67:e4:34:
         9d:8c:2c:11:7b:7a:ff:88:ba:67:ea:8e:55:20:c8:95:48:89:
         87:a7:73:45:84:bd:80:98:4a:cf:da:dd:56:e8:b7:d2:83:a5:
         01:c3:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:09 2025 by rpki-client