Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cb486b-a561-35c9-acc4-845bb075b8d1.roa
File:                     e7cb486b-a561-35c9-acc4-845bb075b8d1.roa (raw, json)
Hash identifier:          n0ycSg/Y2jzSfaYlSUuouPduQSU6GTXbt6MyjqWFZm8=
Subject key identifier:   D4:03:5B:F2:52:74:9C:0E:7A:97:1C:C5:3D:E6:4C:5A:15:07:C7:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF7D4AAD1AEE2CCAB25F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cb486b-a561-35c9-acc4-845bb075b8d1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.247.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:7d:4a:ad:1a:ee:2c:ca:b2:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=557d8744-35a9-422d-b651-b17094eae4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:67:65:33:fe:90:f0:34:3c:8d:c7:f8:45:9f:
                    e0:ff:db:18:50:9b:a5:af:cb:2c:47:99:1b:a2:ce:
                    04:b4:df:ce:80:8b:4b:df:78:a5:c3:f5:ee:04:48:
                    e4:6d:4a:cb:8d:88:17:6d:0b:56:8a:c4:2f:e9:f2:
                    b3:24:3e:65:37:0b:81:ac:8b:74:fa:71:23:da:4d:
                    16:61:f7:ff:89:e5:9b:a6:d1:9d:5b:22:f3:77:18:
                    e9:a3:79:ea:d8:27:8e:fb:b5:9f:68:38:fd:8c:a8:
                    d9:82:73:12:8c:45:81:2a:a4:2c:2f:e3:b1:b1:bb:
                    88:f0:a8:dc:84:24:a1:bf:93:89:e1:ec:b8:82:47:
                    e0:4b:d2:6b:dc:1b:66:1a:1e:bf:80:c1:f0:23:80:
                    a6:52:c6:d9:aa:72:52:d6:01:a4:39:06:e7:22:5e:
                    b7:ed:69:15:01:cd:47:88:5f:6e:30:1a:bd:83:78:
                    d0:0a:fb:68:7c:52:1d:1b:17:7e:49:cf:90:cd:c1:
                    bc:7e:40:48:79:c0:f9:a2:fd:fa:c7:4e:a7:ef:7e:
                    26:0a:38:74:a5:cc:5b:e0:60:c2:6d:34:12:55:43:
                    3a:e3:12:3e:bf:9f:fb:7f:b7:86:39:06:d2:04:2f:
                    e8:f2:8e:c5:ce:d1:db:a6:e3:10:ed:e2:d7:4b:b2:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:03:5B:F2:52:74:9C:0E:7A:97:1C:C5:3D:E6:4C:5A:15:07:C7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cb486b-a561-35c9-acc4-845bb075b8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:d9:69:ed:1d:52:e6:0d:23:54:f5:a3:86:f2:51:ed:ee:
         23:c8:c6:b0:3d:7e:b4:df:cc:f2:62:9a:72:a8:5d:6f:da:25:
         0b:9b:2f:33:90:51:2d:13:94:44:b8:f5:60:4d:c3:b8:38:30:
         ed:7d:46:a1:5b:32:d3:7d:d4:b2:ad:9d:c8:16:be:0c:be:6d:
         77:05:99:a4:75:57:a8:2b:65:14:8e:71:01:7d:4f:38:af:bc:
         a0:f5:a5:bd:92:61:9b:f4:4b:bf:72:bd:8b:6f:42:70:70:dc:
         bc:7f:29:4d:53:1e:f4:d8:b6:b2:cc:bc:c1:18:69:54:0f:2b:
         da:fe:20:55:d5:8a:8e:97:12:e1:ba:10:0c:14:cb:1a:10:27:
         c2:fe:c5:b3:e1:cf:a5:e7:de:e6:bd:10:0b:c4:c6:ff:a9:e5:
         92:2d:32:90:0e:e7:e7:4d:2c:70:00:ce:86:6b:a3:e4:2b:74:
         c9:cd:96:3f:ad:78:5a:7d:88:dc:7b:d1:1b:03:84:c2:4d:9c:
         30:1c:26:35:d8:6c:5a:db:d8:e4:18:c6:f8:8b:f6:e8:18:39:
         90:6d:4e:0b:f8:5d:fc:ec:00:48:ec:fe:44:d0:98:d6:0d:df:
         de:87:3e:b9:5a:a5:ec:91:de:8c:52:c2:e2:ea:d4:6c:a6:fc:
         30:7e:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:34 2025 by rpki-client