Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ece1e6-edc5-3721-b078-275b09b1b927.roa
File:                     d8ece1e6-edc5-3721-b078-275b09b1b927.roa (raw, json)
Hash identifier:          pH9ikR53hQKaId0RAIR+vMeSGFXqbE/MZqbNYlPEIs8=
Subject key identifier:   21:0D:27:82:83:A3:98:D1:A5:21:A4:5A:AA:96:AD:09:DB:92:00:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C069620A5B95391138BDD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ece1e6-edc5-3721-b078-275b09b1b927.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.75.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:96:20:a5:b9:53:91:13:8b:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=740aa2cf-a8ec-4fc8-a6b6-175f27973089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:05:b5:e5:34:5e:e1:a2:4a:89:8e:f0:10:
                    fa:91:e7:aa:3a:af:01:1e:27:a7:b7:c3:0f:cb:76:
                    4c:44:f8:25:9d:8d:39:4c:07:5e:bc:5e:bf:92:2f:
                    ed:c4:7e:80:c3:70:3f:f1:d3:25:79:1e:74:c1:f1:
                    36:9d:d0:d2:f8:31:4c:4d:61:cc:e0:73:2b:56:b8:
                    92:39:ae:90:a1:46:ca:c2:9b:b1:ca:cd:bb:ac:89:
                    e6:34:9c:20:00:62:39:fa:01:4b:a1:f0:5a:63:06:
                    dc:51:f6:af:53:75:27:dc:63:fa:98:9c:03:8e:5e:
                    8f:f8:0d:55:a8:b6:42:c5:fd:c4:63:d7:31:99:7b:
                    46:13:12:41:d4:18:2e:e7:51:01:54:a9:13:71:17:
                    e4:f2:b8:eb:a1:95:3a:d0:43:6f:38:2c:c3:5e:7a:
                    6d:aa:b9:11:fc:f9:35:a7:ea:e9:8a:57:92:cf:65:
                    fe:47:24:df:07:16:58:0d:35:7c:09:42:f7:bd:ad:
                    1d:84:35:10:fc:be:c5:64:31:31:c9:a5:11:47:c4:
                    7b:c7:3c:82:80:af:3b:6b:5a:86:6a:f4:79:af:61:
                    9b:43:27:91:70:a1:30:15:08:60:04:8f:9f:49:bb:
                    3b:84:78:b8:ff:e3:5d:c9:5c:12:61:6d:b1:d4:68:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:27:82:83:A3:98:D1:A5:21:A4:5A:AA:96:AD:09:DB:92:00:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ece1e6-edc5-3721-b078-275b09b1b927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.75.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:87:a9:1a:e4:49:f3:72:23:b7:93:cd:b5:77:a2:49:99:
         2b:97:e9:f0:92:7e:b3:e7:25:e3:bd:b4:83:52:e2:9e:8f:1b:
         e0:cd:18:9c:27:f0:5c:aa:d4:dd:9f:17:6c:9d:f2:c8:6e:d7:
         ec:e4:29:a1:3c:e3:72:e1:58:51:58:22:a5:aa:09:32:24:76:
         51:8c:19:cb:0e:fc:ad:5b:c7:6e:56:03:74:7f:cc:30:a8:a8:
         82:dd:ec:ed:4c:0a:f9:87:59:32:ad:cb:24:59:f8:b4:96:15:
         3a:97:bd:5d:78:f8:94:1f:eb:b7:b3:d2:29:6c:20:f1:09:43:
         4e:cb:29:94:d9:5b:ce:16:eb:cb:a1:9f:aa:5f:65:39:a1:f1:
         c8:a1:7b:26:3c:c3:ac:5b:85:ac:1d:03:c2:65:59:c6:89:86:
         2d:27:ef:90:53:15:7b:7c:7f:2d:23:60:49:d7:fa:63:41:ca:
         43:1b:17:71:d0:fb:12:97:8e:cb:6a:18:b8:f9:55:12:62:49:
         88:42:d4:65:68:f8:24:46:76:68:f5:6d:6a:fc:58:68:76:8b:
         00:06:2e:4b:72:d1:91:db:c1:99:86:ea:86:1b:51:35:86:c5:
         cb:89:61:29:eb:71:9b:d0:ed:88:d7:08:eb:1d:e1:ea:c5:88:
         0c:96:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:20 2025 by rpki-client