Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d37346bc-72a0-3775-a2fe-1947a7368c3d.roa
File:                     d37346bc-72a0-3775-a2fe-1947a7368c3d.roa (raw, json)
Hash identifier:          Q9QtCvzNbR+Iq5+xbpSdOCxQ/3bHGMMP4wF8mKEStfM=
Subject key identifier:   DE:B1:8C:3F:75:75:B4:13:21:6F:AB:56:CA:52:AA:F3:33:3F:13:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07FDA2BCB5B637DE8D1BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d37346bc-72a0-3775-a2fe-1947a7368c3d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        71.57.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:fd:a2:bc:b5:b6:37:de:8d:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3a0f7d70-8c0f-48c6-afa2-3a348f408e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:01:5d:16:6b:f1:82:15:eb:66:01:5b:94:
                    a3:37:3b:28:a1:8f:61:bc:85:32:49:2f:e7:46:e1:
                    76:d5:dc:ce:20:39:47:7a:15:4e:c4:8c:2e:b6:a8:
                    09:78:9e:0e:b8:8e:6c:49:e9:95:50:be:aa:79:2c:
                    16:7a:f6:1b:48:cf:92:31:b8:74:41:26:d1:ec:4f:
                    e9:2f:5f:50:84:3b:a7:37:83:35:3c:9e:56:4e:9f:
                    01:34:4f:b2:31:c1:cf:00:1a:d1:1a:da:85:6c:08:
                    c4:44:0f:5c:2c:ab:f0:ed:98:4e:04:09:60:b1:1f:
                    0b:17:a3:4e:0e:0c:88:ce:d2:d6:82:ba:2e:84:43:
                    ac:64:be:4f:9b:37:75:7c:dd:38:53:10:a2:6f:18:
                    b7:47:c5:44:86:8d:f4:d4:1b:28:db:e8:2b:f9:42:
                    9a:42:7b:78:5b:99:8f:77:45:62:ec:66:c0:c5:af:
                    16:51:e1:70:45:67:e8:0a:60:81:9c:5b:0c:8e:e8:
                    09:21:59:7b:e0:b6:d0:05:53:d7:fa:ae:b4:9a:c8:
                    d5:64:00:9f:92:66:b7:c8:1d:21:2d:63:e1:1f:7d:
                    79:6f:37:73:9c:1b:ab:36:1a:63:fa:c8:d7:bf:68:
                    0d:91:12:cd:33:04:0b:f1:ec:f7:95:16:b6:76:2b:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:8C:3F:75:75:B4:13:21:6F:AB:56:CA:52:AA:F3:33:3F:13:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d37346bc-72a0-3775-a2fe-1947a7368c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:d2:32:ae:07:03:ec:d1:58:2f:dd:ee:f2:55:dd:69:bc:
         35:e9:da:d7:8b:8c:c9:cb:a5:e0:a4:16:86:57:9c:50:1d:c6:
         d2:1a:6b:04:86:23:06:9c:f2:38:58:82:0c:69:2e:8b:e2:e9:
         a8:91:0e:42:88:e7:b7:e7:1b:57:c1:af:e1:ef:6c:b7:5e:5c:
         0e:83:23:1b:2a:64:d1:01:71:9a:f4:23:f6:25:86:e0:63:71:
         6c:3e:ce:ef:7c:3c:77:68:c6:3e:f8:26:9c:06:8d:7d:6e:c1:
         cf:ea:49:6d:bb:28:7c:c6:92:e3:33:81:b3:c5:44:a7:5d:88:
         9b:9a:a4:25:b6:db:df:04:a5:19:fd:35:1c:70:4c:89:d9:b6:
         13:3a:0e:06:69:09:a7:59:8a:11:2e:70:e0:6f:7f:01:07:cd:
         3a:1c:03:08:1f:51:2d:9d:a1:59:cc:e3:b8:38:6c:e3:2f:04:
         7f:66:11:06:22:18:45:f0:5f:f1:fe:5d:be:f3:0b:90:fa:85:
         d7:27:55:54:ab:e9:29:20:27:3c:41:00:3d:4f:ba:06:11:17:
         a9:b8:a3:e7:22:d2:eb:30:95:3a:1c:87:a4:63:6a:da:33:5c:
         05:8f:a3:e3:8b:dd:b3:7d:92:1e:9b:c7:9f:d7:b2:f2:3b:3a:
         04:62:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:06:40 2025 by rpki-client