Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6da137f-68c5-3e1b-aada-a5ee51208bb0.roa
File:                     d6da137f-68c5-3e1b-aada-a5ee51208bb0.roa (raw, json)
Hash identifier:          1ajUU9pjShqxnTU0Sx3emd83ZyPQ24TnQP6pYnswhx0=
Subject key identifier:   25:3F:BA:0B:CD:C2:5A:62:17:8F:A7:23:93:34:19:5F:90:CF:71:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F873B08593EEE49B970E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6da137f-68c5-3e1b-aada-a5ee51208bb0.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.119.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:73:b0:85:93:ee:e4:9b:97:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=524e2c0a-032e-41fc-b554-0a62a6f859bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:fd:e3:8f:9f:32:80:4a:72:82:23:29:75:
                    7d:2d:20:73:23:aa:56:eb:c2:87:c1:8d:0f:b5:55:
                    03:dc:df:60:cb:e5:9a:7e:08:08:2b:a6:05:c3:17:
                    79:46:ea:1e:ee:9c:40:ca:f8:79:b2:1d:e2:a9:3b:
                    24:b2:70:28:88:55:17:9c:bf:33:57:e2:78:0b:72:
                    86:57:e7:01:aa:01:89:8e:94:af:25:61:d2:98:11:
                    b0:1c:d5:28:c0:fd:c6:63:51:e6:22:67:e8:8c:ea:
                    42:41:d9:85:a0:43:d5:e6:63:b3:a1:91:26:be:a8:
                    db:91:5e:3f:7d:ec:9f:f7:05:22:30:02:da:dc:91:
                    65:d7:9e:a1:fa:f5:45:90:fd:32:ed:b3:7c:07:c8:
                    ba:d1:86:b5:ac:50:58:2a:14:df:d7:f2:2b:b5:b3:
                    d7:4a:2f:3e:ba:9c:da:5e:39:55:0e:67:92:8b:cc:
                    4f:30:29:3d:52:8a:16:f2:dd:54:59:97:85:cd:be:
                    f9:27:b7:eb:05:aa:0e:62:2e:95:e7:ed:80:0c:cb:
                    5a:c1:29:e4:2e:d4:8a:4b:81:14:09:04:36:4c:6f:
                    47:bf:fb:6b:45:7b:c7:56:70:57:3e:21:73:57:69:
                    0f:b6:3c:2d:65:a7:69:02:85:39:8b:b2:e5:fd:62:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:BA:0B:CD:C2:5A:62:17:8F:A7:23:93:34:19:5F:90:CF:71:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6da137f-68c5-3e1b-aada-a5ee51208bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.119.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:19:51:de:75:24:12:03:ae:ba:16:f1:fb:8f:49:6f:dc:
         6c:97:81:41:ef:df:9e:62:a7:75:aa:9a:91:a8:b4:31:ae:0b:
         29:dd:8e:61:0b:5e:3e:0f:72:24:f8:7d:4e:7e:0d:e9:88:e7:
         96:1d:2d:58:8f:17:86:20:7a:ca:45:5f:f8:5b:bf:5e:18:a3:
         ec:09:8a:7a:99:62:d1:dd:86:00:e8:47:10:e3:89:e2:aa:0f:
         cb:0d:49:62:fb:85:7e:de:6b:23:f3:1a:cc:c5:03:17:b4:47:
         9d:a1:e9:95:0b:81:30:f4:a8:6e:80:cb:d4:b4:7b:98:c7:25:
         09:26:59:8c:10:5a:83:46:0c:e3:35:bc:6a:2c:61:f5:4d:e1:
         15:49:20:69:e6:9e:ea:25:58:6c:d4:c9:1c:7c:d7:db:78:de:
         a7:20:ea:0e:56:d1:83:1a:19:19:88:3b:e8:53:40:27:7d:06:
         dd:38:54:97:4b:89:7e:e9:6e:42:f7:0f:2e:dd:cc:70:3a:df:
         5e:88:2e:0e:fe:bb:b4:87:36:1a:a5:a4:5f:b1:3f:0d:0a:3e:
         3f:1d:11:ee:61:35:a2:38:4e:ea:bb:51:19:87:d3:26:23:34:
         bf:66:58:7f:81:2c:a3:d0:74:14:98:d2:28:da:f9:89:04:7e:
         30:84:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:33:42 2025 by rpki-client