Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbf84159-2883-39cb-a647-5989b9e30f87.roa
File:                     cbf84159-2883-39cb-a647-5989b9e30f87.roa (raw, json)
Hash identifier:          Pnn4YSPgjKC0e1fNzmZv2w98TCHmmhI7iI7p24W7ERQ=
Subject key identifier:   C0:C3:68:FB:04:62:AF:DB:86:68:E4:37:B0:2E:E1:68:09:24:95:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C751F19FD06285B058100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbf84159-2883-39cb-a647-5989b9e30f87.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     33490
IP address blocks:        73.240.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:75:1f:19:fd:06:28:5b:05:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=6cdaa4b0-f54a-46fd-a3b3-9286f974c470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:93:02:54:3a:fd:2d:17:26:b2:61:24:d5:
                    ae:ba:b7:b2:d9:a3:e1:b5:3e:8a:31:5e:dc:6d:2d:
                    27:e4:e9:04:7b:61:c9:48:93:f2:00:ee:58:4a:c0:
                    a5:aa:9c:71:ae:42:54:16:de:37:38:e7:45:40:da:
                    10:ff:35:9c:14:ea:1f:3e:e2:7d:5d:0e:82:4c:97:
                    a0:63:49:75:04:b3:6c:5f:09:cc:0c:c6:ee:c1:cb:
                    4c:c5:5d:b6:67:1b:e8:9e:a3:66:e4:37:a7:e8:36:
                    80:11:e4:04:00:3f:c7:33:2f:7e:08:94:80:e5:ef:
                    85:c3:c2:f6:27:11:18:c8:6e:a1:d0:9b:fd:76:a2:
                    de:79:e6:63:e9:f8:83:72:d3:ce:3a:1d:6b:7b:77:
                    de:00:50:f6:cc:6f:f0:15:bc:e9:16:c9:cc:5f:a9:
                    ed:9c:b8:24:35:f4:19:1d:42:56:54:aa:86:25:3c:
                    c7:9c:2e:d4:88:bc:02:44:8c:47:25:69:dd:b3:31:
                    dc:2f:d4:e8:c0:6f:94:18:c6:be:ad:60:e2:b5:1c:
                    46:68:11:4c:af:4b:f3:87:a7:e6:6d:e5:46:ac:ae:
                    b1:90:be:56:4d:29:1f:19:63:26:2d:6d:68:da:16:
                    03:a0:e2:2d:5e:1a:7a:c4:44:b3:67:83:48:c5:7c:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:68:FB:04:62:AF:DB:86:68:E4:37:B0:2E:E1:68:09:24:95:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbf84159-2883-39cb-a647-5989b9e30f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:58:1e:21:70:10:26:49:78:3d:36:40:25:67:00:bc:b2:69:
         3a:de:64:e5:c0:b9:75:d6:22:03:ec:ce:d2:ca:1e:72:1f:f6:
         58:cf:d6:77:84:89:0e:91:6f:2a:2c:2c:29:30:b8:25:cf:56:
         60:f4:b0:f3:c8:46:39:fe:fc:94:29:f9:a6:d0:09:61:2b:88:
         0b:8c:97:ba:bc:59:9e:c0:d1:19:bb:c1:82:b0:5f:6a:1f:5e:
         c5:a4:30:79:4e:62:89:c8:ab:d3:e7:cc:2e:76:1e:33:44:02:
         f8:dc:36:fb:29:a6:cb:35:59:0b:21:40:fb:5b:81:49:21:29:
         f6:3d:90:ea:66:74:61:02:fb:e4:e7:a8:02:3e:cc:6b:ef:34:
         21:55:bd:e7:9d:70:a0:61:3f:b6:b9:39:af:bf:0b:b0:b5:50:
         db:9b:91:d3:8c:dc:bd:4a:45:67:fb:b7:35:92:fa:30:53:b7:
         7b:e3:bc:0d:32:b4:86:2f:44:5e:58:a3:e6:63:7c:51:33:3f:
         98:b1:a6:f3:cc:05:ad:7e:46:69:ad:ad:7c:85:63:5d:c1:45:
         46:4b:57:ea:62:ae:b3:3a:59:da:71:6e:8a:38:8f:0f:86:61:
         87:05:aa:b6:5f:66:6e:47:30:1f:1f:5b:b2:ee:c3:e7:cd:e7:
         7e:fc:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:39 2025 by rpki-client