Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1650efc-3bfe-371d-9830-6609f4624fa3.roa
File:                     d1650efc-3bfe-371d-9830-6609f4624fa3.roa (raw, json)
Hash identifier:          RDoiGhHSuzH4q5AEra9uIGWI7Ft2o4KyC+k/djdhMI8=
Subject key identifier:   9E:3E:6D:AF:E6:13:AA:AA:13:84:26:EB:4D:64:E0:E2:18:B6:D1:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05B0312183A87CECF03C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1650efc-3bfe-371d-9830-6609f4624fa3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.150.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:b0:31:21:83:a8:7c:ec:f0:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=57fd3c42-ca4c-4e01-8b03-b880a4f5e79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:03:32:c8:74:8f:b5:11:4c:bc:db:73:6e:
                    9a:60:9a:38:b1:58:e1:84:2e:a5:d3:a5:5c:96:6c:
                    6f:9e:68:21:89:8b:67:50:0c:ed:f7:e6:1d:fc:6d:
                    dc:35:38:93:8c:00:c3:bb:a9:8e:75:4d:56:d0:3b:
                    7c:a5:0b:47:d5:9a:3a:0e:20:2e:79:d5:78:4e:41:
                    1e:bd:e8:d8:da:30:d7:f2:ae:d7:01:65:a1:cb:e0:
                    b2:47:0a:44:ac:21:2d:fa:32:cf:d9:ba:a9:0d:eb:
                    11:de:49:cd:65:b6:30:dc:e4:ff:1e:b1:d4:4b:86:
                    78:cc:db:a6:c1:61:1c:b7:be:e4:29:4a:8b:fe:b6:
                    ef:e0:d3:cc:26:5d:9f:cf:d9:18:fc:5f:d5:cc:6c:
                    c3:42:34:4d:2f:c6:42:ef:a0:1f:22:24:10:3c:a5:
                    df:03:a4:cc:6f:54:0d:54:d4:12:50:7e:1f:c2:68:
                    5d:74:19:31:d3:dd:fd:59:67:e0:94:3a:a9:99:be:
                    01:bf:67:c2:57:ac:31:a6:21:15:01:0f:70:eb:eb:
                    42:10:c4:c4:ec:b4:8b:a5:eb:85:aa:35:73:43:94:
                    1e:b6:87:86:b2:a7:7f:18:26:9f:7b:77:6f:49:6b:
                    9a:ba:71:ce:98:01:31:54:2d:2c:cb:ae:d3:c8:61:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:6D:AF:E6:13:AA:AA:13:84:26:EB:4D:64:E0:E2:18:B6:D1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1650efc-3bfe-371d-9830-6609f4624fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:78:62:b0:1d:be:71:17:e2:44:a1:e8:1c:73:89:94:0a:30:
         a3:11:a9:0e:97:2b:ef:7d:72:8e:cf:0a:fc:02:a6:0f:e7:d7:
         30:f4:16:d0:db:54:ca:2d:a7:6f:db:2a:1a:0c:0b:86:bb:fa:
         6f:07:e7:23:1d:81:ff:a2:1e:7e:31:cb:bf:5b:6f:34:08:3b:
         e3:92:28:0a:fb:d0:8e:35:e7:63:5c:c9:f5:6f:42:e2:ac:02:
         bf:78:d5:4a:c0:30:6e:5f:71:6b:f9:69:7c:38:a3:b3:ad:b0:
         fe:02:8e:8e:25:90:1a:8b:f2:0e:e5:e5:3a:74:8b:96:af:d4:
         0d:80:98:46:6d:99:f1:ed:7c:b6:23:32:30:1a:e4:98:12:27:
         11:ca:e5:8f:71:0e:7a:51:14:32:8e:02:a6:63:f7:bd:f4:52:
         cc:40:98:88:6b:18:0d:c7:99:04:7e:0b:39:ee:1b:31:4c:e5:
         df:58:73:07:11:9e:49:3e:22:97:0a:46:a8:90:60:c3:7c:ba:
         3f:01:03:59:29:bb:6a:a4:72:e3:40:66:7d:43:28:5e:6b:cc:
         96:2e:d2:5b:0c:11:84:1e:4c:08:de:9a:84:14:ad:b5:30:3a:
         73:45:aa:5a:53:9f:ff:04:26:69:5c:c5:9e:60:4c:6d:6e:2d:
         37:d9:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:24:01 2025 by rpki-client