Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0000a98-184c-30c8-a08f-d0f02ee65925.roa
File:                     e0000a98-184c-30c8-a08f-d0f02ee65925.roa (raw, json)
Hash identifier:          u8Ee9ctNazf24WCQ4LYgQzcBq+ZgwY/VRJ3+qKBRcP4=
Subject key identifier:   5B:BA:D6:D6:F6:56:13:75:3B:73:CE:B8:9D:6B:1C:6F:08:F8:1F:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DC466E7C8FB2C8DBF6B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0000a98-184c-30c8-a08f-d0f02ee65925.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        73.62.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:c4:66:e7:c8:fb:2c:8d:bf:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=12a42574-7f54-401c-a15a-5c19bc8fea84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:a3:5d:23:a6:9c:8a:db:84:57:3f:c2:77:
                    f7:01:25:18:4d:81:40:64:51:7b:2d:d5:f0:39:54:
                    8d:c3:22:a4:91:7d:03:19:c4:cb:94:3c:47:ac:a3:
                    63:7f:39:4d:51:4c:df:84:c6:48:a9:9d:af:65:3b:
                    bb:88:9b:45:b3:1a:93:c5:58:cb:b9:ea:ea:83:4e:
                    7b:f7:6c:23:a5:3e:28:35:0c:d5:9d:da:89:95:34:
                    38:9c:ec:3b:5a:76:fc:0d:de:76:b2:55:6c:85:70:
                    14:06:c9:80:2d:a9:64:e9:8e:c2:ed:ac:a8:a7:4a:
                    ab:4c:8e:e5:22:95:2a:ea:6d:99:ae:9f:15:dd:82:
                    be:37:a8:f4:ea:5b:95:6a:32:aa:ce:9d:c2:a5:36:
                    5c:a2:42:e0:34:86:33:ea:ba:25:30:6d:93:90:ba:
                    26:3f:93:31:a9:0b:60:73:95:a3:d2:9a:45:64:ec:
                    d7:de:46:d7:a0:cd:69:a9:6e:c3:dd:9d:31:69:20:
                    03:31:fe:ab:36:79:99:79:89:63:50:f0:c2:37:e6:
                    46:7a:a1:d9:30:b1:ca:6e:73:23:2b:00:ae:5a:bf:
                    fb:0f:b7:f0:66:22:09:20:34:65:95:cb:d0:4d:4f:
                    50:82:dd:c0:dd:e3:8a:01:a9:1d:90:7a:c2:93:35:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:D6:D6:F6:56:13:75:3B:73:CE:B8:9D:6B:1C:6F:08:F8:1F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0000a98-184c-30c8-a08f-d0f02ee65925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.62.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:91:8d:92:47:7c:dc:f9:fa:8c:6b:95:fd:0e:b7:46:e8:48:
         20:39:43:53:3c:89:dc:bd:1c:aa:01:68:02:3c:8a:07:66:71:
         97:50:e6:0d:d6:9e:31:44:60:f3:ac:8e:93:44:c9:78:0e:cb:
         4c:70:8d:9c:c9:b8:2d:cb:04:8b:6c:5b:2f:34:48:0a:6c:a1:
         d3:cd:7f:02:13:76:06:bf:7e:93:fb:8c:32:8a:52:88:82:c9:
         4d:2e:46:6a:24:c0:60:26:e6:a1:ae:21:ef:ca:79:a3:2e:b3:
         5d:b1:36:ed:4c:ba:5f:ba:01:0d:22:5c:bd:30:e7:7e:54:e4:
         94:58:83:06:38:61:40:3e:a3:b0:bc:24:17:46:7f:dd:b1:68:
         67:8f:be:d3:63:56:0d:2a:a3:e0:32:11:8d:bd:ef:8a:c8:b8:
         e6:06:23:b4:b0:f6:c4:16:a9:97:53:df:81:72:dc:19:8f:4a:
         4f:b6:ce:ae:c5:58:7b:29:23:73:7f:7b:82:ef:fe:b4:70:22:
         44:9c:75:02:de:ab:dc:06:93:3e:2d:a1:fe:da:81:64:ca:d6:
         32:4c:30:74:df:3d:fd:7c:e6:57:0f:7e:bb:8e:15:0a:5d:e6:
         73:ec:e8:78:59:3a:0f:5e:27:5e:c8:ae:c9:aa:1a:49:ff:6f:
         b1:bf:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:27 2025 by rpki-client