Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16406d1-9f44-32e1-81f6-8f25cf30c55e.roa
File:                     e16406d1-9f44-32e1-81f6-8f25cf30c55e.roa (raw, json)
Hash identifier:          lyFoUA/XErUR+DQCk6W6guADesv7LBlRi+IdU/3d13o=
Subject key identifier:   16:B0:E3:51:29:53:9B:0C:B0:6A:45:2C:CA:20:89:2C:3D:5C:36:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C072E21B44DF466F6155A20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16406d1-9f44-32e1-81f6-8f25cf30c55e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        73.98.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:2e:21:b4:4d:f4:66:f6:15:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ec443179-0f5b-4742-9ba7-307cb2ea934f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:68:cf:91:67:6b:c6:42:c7:5c:bd:93:db:
                    4a:15:0c:f0:42:6f:32:4f:50:d5:cb:1f:88:63:db:
                    a1:c5:2c:24:f5:fe:c6:70:98:25:4c:f9:a0:01:b1:
                    34:85:e4:8e:db:32:a8:eb:cd:be:59:6b:18:d5:11:
                    0b:f0:05:6b:58:9a:32:a8:0f:9e:a2:08:cd:b6:5b:
                    b0:8e:2e:16:af:f9:9c:fb:95:62:38:28:c7:38:97:
                    a6:76:9c:ce:4a:55:42:4e:e7:b6:8d:c9:61:4f:7a:
                    52:83:60:6c:ae:98:2e:ae:30:7c:3d:81:55:23:dc:
                    f8:8a:08:4e:9b:51:81:d1:c3:7d:9b:45:c1:85:52:
                    df:08:05:c8:a8:b2:49:51:78:86:a0:66:bf:ce:30:
                    a1:3a:c3:fb:8b:82:d4:dd:be:4f:62:cc:93:71:38:
                    9d:e4:d0:a9:35:08:f0:54:d6:df:bc:47:f0:c8:ec:
                    c2:76:5b:f4:05:17:d1:35:15:8d:d8:f5:16:c4:9d:
                    1b:78:73:ad:20:cf:8a:25:e8:15:da:f0:59:9a:25:
                    c1:e2:4e:48:a5:ce:b5:9e:9a:ec:f2:b6:d4:ea:c3:
                    dd:0c:09:d4:19:69:31:46:57:7b:58:20:25:49:27:
                    45:39:4a:a2:80:ea:67:93:06:c1:eb:b7:35:5e:aa:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B0:E3:51:29:53:9B:0C:B0:6A:45:2C:CA:20:89:2C:3D:5C:36:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e16406d1-9f44-32e1-81f6-8f25cf30c55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.98.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:e9:1a:d7:0d:d9:52:11:a3:8a:3f:fa:3c:d0:0c:75:43:
         43:b4:3a:d5:a5:0b:80:77:8d:43:34:8d:5c:ec:76:9d:c4:2c:
         80:6f:c2:af:54:d9:36:54:4b:63:9e:93:2c:57:03:58:9e:25:
         91:45:94:4e:a5:c8:38:ce:d2:74:27:83:ab:7a:ca:22:2d:ad:
         c5:0d:88:b9:79:8a:e0:1b:6c:46:f8:0c:f6:d7:70:cb:cb:9d:
         bd:9f:ea:e1:e2:3c:88:12:c5:18:4e:bf:9d:a4:37:09:52:4c:
         49:ef:79:1f:d7:3e:07:16:3c:a3:36:44:5c:15:fd:a4:48:d3:
         fc:2a:c4:87:52:22:35:72:a0:89:8b:51:e5:94:7c:3a:02:08:
         cf:2f:da:e4:dd:77:e8:f4:33:2e:ba:5e:80:97:28:17:b3:3f:
         09:6e:3c:b2:18:13:b8:a4:f7:5b:0f:84:43:b4:fb:6f:b6:fc:
         0f:99:77:a4:2e:30:2a:82:cc:17:83:88:35:3a:82:dd:2e:0f:
         d1:88:d5:5f:b2:07:af:b8:35:25:45:f4:84:4e:c0:6f:56:5c:
         c0:8a:85:18:0f:e5:d7:c6:69:36:9a:86:66:66:24:30:91:4f:
         29:d8:be:8c:3f:9c:a2:7f:a8:65:87:55:cd:0b:d9:38:b2:05:
         e8:85:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:05:36 2025 by rpki-client