Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5809d1-abeb-3a1b-98e5-235752fbafef.roa
File:                     da5809d1-abeb-3a1b-98e5-235752fbafef.roa (raw, json)
Hash identifier:          tSS2lUDYf6iCJFH+VBEVV42IDIIURzdHoIK0W3K91sc=
Subject key identifier:   D8:F9:E0:00:08:F2:C0:D0:F8:98:A3:4F:5A:89:A2:EE:40:B5:88:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C083415D2DC3972B9896D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5809d1-abeb-3a1b-98e5-235752fbafef.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.72.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:34:15:d2:dc:39:72:b9:89:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=306b8a8b-49e8-4d93-95d7-b5eda3c6dfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:6b:5c:21:8c:32:16:fa:94:5c:67:d2:04:
                    27:2e:19:07:56:96:57:0b:21:64:3f:b8:91:29:64:
                    0c:8b:4e:73:6d:89:f0:bc:14:85:c4:ab:b7:8e:55:
                    3c:1d:c3:81:0f:5f:53:01:a4:15:48:f9:1f:5e:72:
                    14:59:79:48:62:60:46:75:02:bd:1d:51:3d:02:04:
                    b0:6e:40:a4:73:d1:c5:71:47:a9:58:31:b2:45:62:
                    62:77:55:03:f6:d9:22:0e:29:b8:39:c9:f0:34:8e:
                    32:08:b8:25:7d:1f:2e:0a:ec:db:48:bc:a3:47:b9:
                    f3:8e:13:89:94:aa:42:6e:ae:6e:de:e6:15:d7:60:
                    04:b3:e5:d9:5f:a4:a1:24:49:7c:24:21:69:af:08:
                    88:23:bc:fc:a4:56:98:9a:b6:3f:63:93:d8:16:cb:
                    82:6b:ae:e0:c4:fc:2b:3d:2f:6e:6d:07:0f:2d:1a:
                    2d:b4:20:47:9d:0f:fc:a8:a4:54:68:26:ce:c8:8b:
                    c8:d5:4a:5b:32:c0:bc:17:9d:7d:03:ea:a3:14:e4:
                    00:c6:51:9a:45:e0:76:0a:c1:ad:16:50:8c:cf:3b:
                    5f:b1:fb:e0:0c:c4:bf:9e:cc:96:6f:58:7f:a1:ba:
                    7d:d0:78:8d:bc:8c:cc:19:8a:02:ce:34:30:5d:07:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:E0:00:08:F2:C0:D0:F8:98:A3:4F:5A:89:A2:EE:40:B5:88:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5809d1-abeb-3a1b-98e5-235752fbafef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.72.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:19:e3:3d:55:d3:7f:1e:79:6f:29:ca:b6:b2:8c:40:30:7b:
         e0:bb:09:43:b5:cd:ad:08:0e:74:92:b5:88:09:a1:63:ed:06:
         73:8c:b2:36:f9:1f:70:d4:99:6d:e5:07:a8:a1:47:93:31:9f:
         d3:3d:63:1b:69:b5:e3:06:db:42:47:47:65:49:cc:20:df:a3:
         5d:19:51:0f:05:1f:42:6a:f7:10:ce:52:aa:f8:ae:05:ba:af:
         63:fa:f2:41:80:86:2c:4e:16:29:2d:1d:1c:f9:65:f6:53:b6:
         46:d9:06:d0:3e:4c:a0:19:bf:5c:46:7a:32:a8:9c:d8:59:a7:
         89:ea:7a:ac:b3:45:4c:5f:54:e3:a3:e7:28:77:0e:91:71:6b:
         be:6f:9d:d4:70:f6:7b:b2:4d:a6:05:23:c2:1d:a1:40:6f:e1:
         51:04:a5:58:2e:94:2d:a0:3f:b7:5a:b9:6f:00:d9:84:24:bf:
         ba:a4:86:cc:f3:6a:5f:84:90:d2:b7:63:92:59:39:a8:20:b6:
         aa:eb:93:4f:4d:d1:ff:ed:4f:95:b5:3c:a9:b4:f3:19:6e:41:
         a0:c8:73:1d:3a:35:8f:30:48:7b:ae:7b:c2:c3:f6:52:8c:9b:
         92:be:2b:b4:1b:a7:b9:33:3f:60:75:c8:14:b7:1d:7f:60:11:
         f8:f0:9a:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCDQV0tw5crmJbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MzA2YjhhOGItNDllOC00ZDkzLTk1ZDctYjVlZGEzYzZkZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqulrXCGMMhb6lFxn0gQnLhkHVpZXCyFkP7iR
KWQMi05zbYnwvBSFxKu3jlU8HcOBD19TAaQVSPkfXnIUWXlIYmBGdQK9HVE9AgSw
bkCkc9HFcUepWDGyRWJid1UD9tkiDim4OcnwNI4yCLglfR8uCuzbSLyjR7nzjhOJ
lKpCbq5u3uYV12AEs+XZX6ShJEl8JCFprwiII7z8pFaYmrY/Y5PYFsuCa67gxPwr
PS9ubQcPLRottCBHnQ/8qKRUaCbOyIvI1UpbMsC8F519A+qjFOQAxlGaReB2CsGt
FlCMzztfsfvgDMS/nsyWb1h/obp90HiNvIzMGYoCzjQwXQc9eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNj54AAI8sDQ+JijT1qJou5AtYgKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE1ODA5ZDEtYWJlYi0z
YTFiLTk4ZTUtMjM1NzUyZmJhZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANQZ4z1V038eeW8pyrayjEAwe+C7CUO1za0IDnSStYgJoWPtBnOMsjb5
H3DUmW3lB6ihR5Mxn9M9YxtpteMG20JHR2VJzCDfo10ZUQ8FH0Jq9xDOUqr4rgW6
r2P68kGAhixOFiktHRz5ZfZTtkbZBtA+TKAZv1xGejKonNhZp4nqeqyzRUxfVOOj
5yh3DpFxa75vndRw9nuyTaYFI8IdoUBv4VEEpVgulC2gP7dauW8A2YQkv7qkhszz
al+EkNK3Y5JZOaggtqrrk09N0f/tT5W1PKm08xluQaDIcx06NY8wSHuue8LD9lKM
m5K+K7Qbp7kzP2B1yBS3HX9gEfjwmmc=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:46 2025 by rpki-client