Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0952385-91da-3a28-9e57-75dfc13479f7.roa
File:                     e0952385-91da-3a28-9e57-75dfc13479f7.roa (raw, json)
Hash identifier:          qK6746l8p++9ztEO2TUc/di97j/RtyWI/HtYJP619Qo=
Subject key identifier:   1D:8D:09:C2:EF:A9:05:88:E8:F4:A0:B0:3F:1F:F6:9B:E3:BA:2E:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB09EBBBD4CE7669B346D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0952385-91da-3a28-9e57-75dfc13479f7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.112.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:9e:bb:bd:4c:e7:66:9b:34:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f0cae1d1-7f09-4fe1-9ea8-08e27fbea6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:a8:28:87:27:7f:3b:d8:be:f1:af:98:17:
                    da:8f:64:93:c4:a5:77:4f:0c:b3:7c:d1:64:24:ef:
                    97:0c:d3:20:23:dd:50:49:05:f2:96:6b:16:1e:b5:
                    dc:62:15:56:d1:92:e8:33:97:61:f4:92:dd:54:1b:
                    16:12:89:ca:34:d1:be:5c:e8:c6:ee:2b:ab:58:1e:
                    a5:84:29:11:e9:5a:48:de:90:34:6e:19:58:79:9e:
                    ad:f4:74:5e:2b:57:ad:ec:cb:71:1b:fb:f9:9f:8e:
                    11:d3:c0:3a:e3:78:1e:6c:35:6f:00:57:29:a1:d6:
                    c9:f8:76:04:41:e2:e1:15:db:90:06:f0:32:84:29:
                    8d:6d:1f:6f:b7:4b:4b:98:2f:17:37:b8:de:ef:c4:
                    e8:10:bd:40:f1:6c:8b:fe:23:cb:c2:e9:79:25:ca:
                    14:19:8e:ef:8f:4d:d0:07:19:3f:fb:da:16:e4:5c:
                    01:10:f9:58:de:60:02:b5:70:1f:e2:e3:a9:6d:6e:
                    3b:23:36:4c:21:74:7c:0e:97:97:6d:1b:80:b3:4e:
                    99:64:66:54:ae:d3:7f:53:51:0e:32:a9:3b:f1:89:
                    45:49:e4:01:6e:f9:4f:3f:42:79:69:43:49:a3:dd:
                    c4:31:11:24:44:d6:29:ee:63:ca:f5:4a:15:18:b6:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:09:C2:EF:A9:05:88:E8:F4:A0:B0:3F:1F:F6:9B:E3:BA:2E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0952385-91da-3a28-9e57-75dfc13479f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:0d:75:f5:ad:76:95:ea:b8:24:39:08:68:75:ff:3f:5d:e7:
         aa:e4:74:ab:5e:fb:93:eb:d3:67:99:c1:9d:4e:a2:bc:df:f0:
         c9:6d:d6:52:66:8d:ef:98:17:0b:3c:55:b9:da:55:49:3a:08:
         e8:7b:0e:f3:f9:6e:5f:e9:38:b6:19:cb:76:10:00:1b:b5:ab:
         f8:ae:fc:de:ac:54:a9:c9:8e:ab:75:6f:60:47:89:89:46:ea:
         4f:b9:8d:d1:36:18:da:22:f1:26:99:b5:f1:60:82:21:da:5f:
         d6:05:a9:e4:00:5b:43:64:2f:52:db:c4:f7:be:41:94:8f:87:
         4a:9e:26:2f:9c:33:54:c9:0c:af:e7:25:eb:35:65:a1:be:5d:
         e1:66:40:9a:30:c3:71:f0:43:af:64:cf:fd:d9:73:08:96:2d:
         c1:e0:54:4d:4d:f2:6d:46:36:d5:0a:a8:a4:a3:37:e2:da:7d:
         12:76:9d:21:8a:9d:c7:ae:f8:98:7a:6a:b6:11:f4:75:2f:45:
         8b:65:0e:3e:00:5b:c9:c2:4d:92:ff:f2:bc:5f:81:69:38:bc:
         c0:15:2e:f9:ef:a5:ef:42:90:37:83:3a:9d:61:61:8d:0e:60:
         04:3a:26:a2:0a:92:ef:f1:e3:c8:77:0f:c4:3d:51:24:fd:3c:
         2b:ae:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:53 2025 by rpki-client