Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bdb98f-35ee-3590-aed6-fb1771a1fe1b.roa
File:                     e5bdb98f-35ee-3590-aed6-fb1771a1fe1b.roa (raw, json)
Hash identifier:          Q8OXY5whXX4Tyrolwol0ePdE4F+6mla3KPyTkghFREs=
Subject key identifier:   F8:68:DE:3D:A1:60:B3:36:93:3F:89:1E:D1:71:C7:86:1F:FF:54:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08A75A85FDD5FF3D67EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bdb98f-35ee-3590-aed6-fb1771a1fe1b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.231.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:a7:5a:85:fd:d5:ff:3d:67:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6156e5c1-609c-4884-9697-541a784792e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:5b:c0:cd:15:56:f6:a0:6d:8a:7f:67:81:
                    fa:c7:20:60:35:a7:3b:b2:fb:c7:06:5b:9f:2a:7f:
                    3c:00:d1:01:17:50:a1:90:6d:97:bc:f4:aa:76:70:
                    64:8e:07:15:15:96:e1:d8:5e:ee:13:c0:f4:07:36:
                    03:f4:5d:45:e2:a0:29:70:15:7b:60:44:01:a2:fe:
                    f4:d4:3d:a4:dc:87:b3:8e:7c:df:12:34:f0:41:41:
                    30:2e:8d:78:89:30:a1:41:a8:0c:a9:2a:21:b9:d5:
                    37:67:8a:25:07:e9:04:b1:52:b4:f6:b3:41:cf:5e:
                    82:ca:a6:a9:c5:13:69:04:79:c5:a5:43:75:29:a6:
                    3e:51:00:07:25:a8:44:fb:c5:cb:13:b4:b6:cc:b8:
                    a2:86:8e:99:a5:9d:0e:79:66:0f:94:1c:11:4c:ed:
                    9a:c1:a2:db:29:92:5d:c7:8d:ea:15:d7:40:ed:b5:
                    cf:94:ff:41:5c:3e:9f:bd:e5:17:f6:62:cb:b5:64:
                    2d:18:2d:0e:3c:4b:93:a7:ac:19:1e:48:a3:5e:a6:
                    3f:81:ae:2d:e6:62:4d:98:a0:6b:4b:fd:2b:f3:71:
                    b7:3d:e9:68:1b:0b:4a:c5:22:a6:cf:51:7b:ee:05:
                    01:20:38:3c:41:29:01:d1:5d:4a:61:3c:da:e0:be:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:68:DE:3D:A1:60:B3:36:93:3F:89:1E:D1:71:C7:86:1F:FF:54:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bdb98f-35ee-3590-aed6-fb1771a1fe1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:4c:e3:4b:05:a3:df:a2:60:2e:93:d3:6e:0b:1c:8d:5b:
         f5:67:c4:48:4f:5c:92:3d:32:ac:d4:11:37:b7:3b:88:b0:c7:
         70:86:f6:d2:21:36:0b:7f:f6:cc:0d:ae:4b:92:7b:6a:ba:1c:
         a9:1b:21:5c:6f:39:eb:0a:9c:d3:30:98:7b:2f:ae:16:4d:16:
         ca:4f:53:5b:58:8f:0d:5d:ad:d5:47:39:64:63:e8:b0:3d:66:
         8c:c4:4a:fc:55:9a:a4:b9:bb:a5:ba:bd:b2:6d:cd:b8:d5:ed:
         37:50:32:43:82:c1:47:c5:4f:2c:7b:c8:d9:a3:e1:42:fd:77:
         39:9c:64:6d:ab:20:8d:e3:b0:d6:19:5a:0d:db:34:04:3a:61:
         2c:64:45:72:f8:0e:6a:61:3f:d5:28:38:60:ac:25:31:d4:dd:
         8a:a1:81:cd:f6:a1:39:99:a2:b1:86:0a:39:78:73:da:a2:ae:
         a9:35:93:36:2e:9e:e9:7f:e6:9e:72:88:6c:88:d0:22:78:54:
         35:8f:10:e1:e5:33:12:1d:e0:47:05:0e:19:4c:a9:74:19:4f:
         84:e4:b8:90:0f:80:c8:cb:8f:9c:56:f5:1b:0c:27:ae:e2:9b:
         a0:32:bb:93:99:e3:53:51:e2:89:ef:bd:47:d3:47:5c:03:ad:
         a1:d5:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:54:35 2025 by rpki-client