Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d976998a-091b-3a7f-b42d-707f7dbd483c.roa
File:                     d976998a-091b-3a7f-b42d-707f7dbd483c.roa (raw, json)
Hash identifier:          U8zta//4QpXq0s8RuvrOVjm3xPwTI/TqjR10Q2RhZpg=
Subject key identifier:   24:46:36:35:5E:96:86:B2:49:AD:91:9F:F6:9B:1F:BD:B5:76:C1:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FDE74B93BCD6AEF4C7080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d976998a-091b-3a7f-b42d-707f7dbd483c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.25.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:de:74:b9:3b:cd:6a:ef:4c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=cdbc2b5a-3a69-4abe-a780-37e5c29371b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:f0:fc:ad:1a:c9:8d:29:00:cb:88:ab:83:
                    ab:12:ef:24:70:65:12:68:7c:f8:44:69:8e:c5:c7:
                    86:01:c2:44:4e:7b:60:23:8b:23:c4:07:31:44:a4:
                    d8:81:1f:79:c6:2b:c5:3b:db:59:91:e7:f4:02:da:
                    87:34:9d:d0:a0:1a:dc:07:d1:7a:c1:42:f9:79:7d:
                    17:49:d8:41:af:4b:f0:f1:ba:0e:b9:04:09:fc:bb:
                    37:56:89:4e:37:5f:4c:30:52:c7:7e:10:db:ee:8d:
                    93:6c:79:b7:1d:8d:47:e9:20:5b:90:5f:d3:e2:e5:
                    2e:04:fa:9d:06:37:fe:47:e0:de:5f:1f:de:03:dc:
                    3a:0b:95:84:1d:97:67:4a:c1:a1:6a:64:27:e0:aa:
                    b6:26:51:11:1d:39:c9:65:f3:da:d2:7c:a8:43:fd:
                    e1:87:a7:ab:2b:6d:67:3f:86:72:6e:b3:5d:d0:bc:
                    d8:98:8b:d8:3e:14:7e:ee:34:e3:c9:60:08:5c:2d:
                    6f:fc:e3:e1:49:4f:a0:8c:70:6b:f7:29:8d:7f:96:
                    31:38:8e:24:24:a7:7b:81:a5:ef:99:fc:b0:a7:9d:
                    6a:a9:92:af:d7:e8:77:31:b0:d2:3a:6c:ee:42:84:
                    47:05:68:ba:ba:a6:a6:65:0b:3d:d3:44:18:22:f7:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:36:35:5E:96:86:B2:49:AD:91:9F:F6:9B:1F:BD:B5:76:C1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d976998a-091b-3a7f-b42d-707f7dbd483c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:2d:38:d6:64:35:b8:4f:2e:97:be:fd:fc:c0:7c:6c:f7:53:
         0d:94:04:9e:e1:c3:e3:cb:88:cc:38:08:ce:62:d9:26:62:ce:
         72:87:79:25:04:36:f8:fc:a8:b2:21:01:82:fb:60:5d:36:0a:
         fd:40:07:30:b4:55:c7:f1:b8:1d:d6:d9:8f:c3:4e:fe:a2:17:
         98:6a:5b:2d:e0:6c:25:fe:75:44:9a:20:86:2a:2b:b4:99:41:
         b9:7f:96:3b:af:84:af:4f:02:2a:13:b7:d5:99:76:50:82:6d:
         8e:1e:49:22:4d:52:9e:28:b3:43:34:a2:85:14:06:f0:f2:31:
         5e:77:18:5e:f7:c3:54:0a:ca:83:9a:30:80:73:10:6d:c0:03:
         db:f6:29:06:ac:6e:b1:ee:30:ad:a1:16:2e:9d:35:d5:81:08:
         1e:b3:44:4e:6f:d8:3a:fd:4e:1a:40:4f:a0:4c:58:4d:24:c9:
         d8:6a:4d:33:98:c0:5f:f9:a9:c7:56:41:b7:3f:85:cb:b4:64:
         19:be:01:90:b2:d0:92:ba:9f:66:e2:6e:94:c5:3a:84:49:e4:
         b5:18:5f:ce:e7:26:5c:2d:75:84:52:3f:55:f0:42:6d:37:df:
         c0:9f:a7:79:82:2e:ff:a5:67:d4:2d:dc:59:89:15:09:3e:ee:
         0a:c3:10:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL950uTvNau9McIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2RiYzJiNWEtM2E2OS00YWJlLWE3ODAtMzdlNWMyOTM3MWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDbw/K0ayY0pAMuIq4OrEu8kcGUSaHz4RGmO
xceGAcJETntgI4sjxAcxRKTYgR95xivFO9tZkef0AtqHNJ3QoBrcB9F6wUL5eX0X
SdhBr0vw8boOuQQJ/Ls3VolON19MMFLHfhDb7o2TbHm3HY1H6SBbkF/T4uUuBPqd
Bjf+R+DeXx/eA9w6C5WEHZdnSsGhamQn4Kq2JlERHTnJZfPa0nyoQ/3hh6erK21n
P4ZybrNd0LzYmIvYPhR+7jTjyWAIXC1v/OPhSU+gjHBr9ymNf5YxOI4kJKd7gaXv
mfywp51qqZKv1+h3MbDSOmzuQoRHBWi6uqamZQs900QYIvcU9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRGNjVeloaySa2Rn/abH721dsGaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk3Njk5OGEtMDkxYi0z
YTdmLWI0MmQtNzA3ZjdkYmQ0ODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRmGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANAtONZkNbhPLpe+/fzAfGz3Uw2UBJ7hw+PLiMw4CM5i2SZiznKHeSUE
Nvj8qLIhAYL7YF02Cv1ABzC0VcfxuB3W2Y/DTv6iF5hqWy3gbCX+dUSaIIYqK7SZ
Qbl/ljuvhK9PAioTt9WZdlCCbY4eSSJNUp4os0M0ooUUBvDyMV53GF73w1QKyoOa
MIBzEG3AA9v2KQasbrHuMK2hFi6dNdWBCB6zRE5v2Dr9ThpAT6BMWE0kydhqTTOY
wF/5qcdWQbc/hcu0ZBm+AZCy0JK6n2bibpTFOoRJ5LUYX87nJlwtdYRSP1XwQm03
38Cfp3mCLv+lZ9Qt3FmJFQk+7grDEEA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:40:24 2025 by rpki-client