Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3513acf-11bb-318c-8310-7cf8110f1260.roa
File:                     e3513acf-11bb-318c-8310-7cf8110f1260.roa (raw, json)
Hash identifier:          MZNi+53+B/FuiLsc5WlQ+93fK1heSs45m4VwYhpCxfU=
Subject key identifier:   DB:F4:A6:70:47:DE:00:F4:F9:65:5A:2C:D0:6F:C4:A4:FA:41:85:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165392325361ED359D5CDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3513acf-11bb-318c-8310-7cf8110f1260.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        73.91.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:39:23:25:36:1e:d3:59:d5:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b80338a3-1c84-40a6-b226-76e29cce50f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:02:13:ac:2c:31:7e:26:71:45:6d:c0:5d:
                    dd:3a:f2:fd:4c:e2:79:62:30:0e:0f:e4:84:db:2a:
                    99:b4:7e:b2:c0:23:b9:c4:cf:8a:1b:0c:d2:fa:97:
                    df:44:80:2a:3d:a4:75:e4:40:7d:63:a2:41:61:e3:
                    f3:3b:aa:fb:32:de:94:9d:ae:46:ee:cd:05:b2:de:
                    45:07:5b:53:02:c2:73:15:10:c7:16:d1:7a:17:d4:
                    39:54:b5:28:ad:ad:27:cf:5a:d4:c3:b9:8f:fc:b0:
                    7f:2c:4a:56:73:39:22:9b:b8:d9:e7:7a:c2:fd:9a:
                    35:25:87:66:37:2e:11:aa:d5:26:34:c5:48:33:c2:
                    5f:89:72:4f:ba:3b:76:29:bd:1c:07:91:02:0f:30:
                    6a:8f:e4:7c:9d:e5:18:d3:c5:14:ab:be:b1:9e:52:
                    9c:d3:e5:0b:14:1c:0d:f3:c5:b3:66:11:bf:e3:4a:
                    87:bc:d9:ea:3b:1e:7b:8f:18:1a:1b:39:c3:2d:95:
                    48:1b:a0:a5:e8:99:90:a6:15:80:2e:57:8a:3b:4d:
                    05:71:c5:2c:96:05:7c:52:01:db:56:13:61:d9:0e:
                    7c:20:6e:b3:c9:55:d9:86:dd:63:f5:ad:fb:5b:c7:
                    a2:32:76:02:90:33:24:8f:3b:f2:3e:da:ac:31:2b:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:A6:70:47:DE:00:F4:F9:65:5A:2C:D0:6F:C4:A4:FA:41:85:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3513acf-11bb-318c-8310-7cf8110f1260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.91.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:66:ab:72:d9:ae:fc:7c:c3:73:c8:e1:63:b9:1b:54:df:
         81:91:74:08:00:b8:f4:6c:96:cc:ad:8c:bf:5e:3a:6e:9e:1e:
         ab:e5:a5:38:65:30:84:c2:dc:9d:c7:f4:7e:e8:84:67:8a:f3:
         02:5a:2b:cd:58:25:7f:2b:cf:4d:e4:96:33:03:67:0e:49:77:
         fa:54:ce:db:18:53:9a:6e:b0:6b:55:6e:ec:9f:bf:3d:50:47:
         af:d8:95:aa:f5:a6:56:47:0e:31:a3:32:bc:10:34:a5:79:6a:
         d1:64:dd:0c:05:e3:79:db:7d:a8:a6:be:54:1e:a6:e1:01:26:
         e9:f0:aa:1e:bd:fe:06:11:4f:0c:28:a6:4f:aa:ab:e6:45:91:
         f3:50:95:a6:41:2f:cc:f4:06:bd:44:cd:c5:1e:9e:2f:77:43:
         91:be:36:e6:e4:77:bd:9b:06:60:79:ac:a5:15:bb:1a:1e:82:
         56:92:ea:0b:57:b0:36:be:9b:15:ce:56:26:15:b1:ca:f6:7d:
         86:72:eb:a6:d0:58:dc:3a:d6:0d:09:ef:76:c8:7c:f6:f8:b3:
         4e:c8:43:d8:f5:29:25:7f:fc:5e:66:93:87:b4:ea:95:dd:fb:
         d0:97:51:3f:22:00:e8:45:f5:f9:33:ac:38:d0:fd:ab:c1:ab:
         05:3f:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:28:10 2025 by rpki-client