Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a3eed4-b369-347a-a172-1774c78b9169.roa
File:                     e9a3eed4-b369-347a-a172-1774c78b9169.roa (raw, json)
Hash identifier:          JBzJlJ298uF/+wYzS78CJNmhDzQKoRJX0v3zD2v8tFs=
Subject key identifier:   DD:6D:37:D2:02:EE:FB:7D:E2:FD:81:2B:B4:FA:E8:F6:03:90:2F:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF78407E480005217CC080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a3eed4-b369-347a-a172-1774c78b9169.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.22.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:78:40:7e:48:00:05:21:7c:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e0ec8ce0-4dd1-4975-bd96-5d8d0f0aa4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:be:6d:1a:41:4e:e6:2e:39:94:67:ea:3f:
                    27:6d:1d:c5:8a:9d:14:b1:c2:63:df:d4:17:75:08:
                    fe:e5:b0:97:b9:58:ad:de:03:cf:ce:3f:23:83:82:
                    5a:07:8f:74:c2:1d:f9:ff:4c:78:b5:f7:c8:69:e8:
                    05:f0:29:44:94:ec:c2:f3:0a:f5:5c:d7:a9:85:99:
                    86:64:25:87:56:d4:d4:7b:74:dd:89:68:54:75:43:
                    89:30:d2:d3:0c:97:52:44:0e:1b:7a:86:90:ed:ad:
                    d4:45:93:f5:8b:39:0d:fe:6a:98:a2:62:d0:4a:21:
                    ff:1b:06:fe:bb:0a:be:fe:b7:04:41:38:b1:2b:66:
                    6d:1f:72:bb:77:2f:cd:4a:00:74:60:5b:fd:4a:c1:
                    c2:10:23:d2:c8:b9:8c:30:4f:2a:10:0d:4a:b0:f7:
                    cc:af:4e:6f:4a:de:b4:9c:ad:c4:37:92:2d:8f:69:
                    cc:d8:b3:af:24:c0:bc:27:38:56:b3:ea:16:e0:ed:
                    11:a0:53:a1:e9:80:95:7f:42:dc:e5:d0:57:fa:fc:
                    73:7a:1c:02:31:78:de:45:50:b5:f3:eb:40:52:4b:
                    44:a2:b3:aa:fc:7c:37:07:7a:e6:08:10:cb:dd:75:
                    79:63:6c:a6:2d:d6:0a:98:c0:fd:f0:ed:01:63:61:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:37:D2:02:EE:FB:7D:E2:FD:81:2B:B4:FA:E8:F6:03:90:2F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a3eed4-b369-347a-a172-1774c78b9169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:f5:8a:ce:57:ac:fc:56:32:3a:1a:94:90:f7:8e:5f:46:
         da:b5:a3:25:27:bc:6c:73:02:05:63:c3:10:89:87:d8:58:96:
         42:d9:0c:ae:16:f5:83:14:53:fa:fe:40:a9:9c:dd:ee:18:45:
         c6:73:c8:1a:a1:3d:ef:da:51:c9:9e:1d:dc:5c:f4:4f:e0:e2:
         20:4f:23:50:1d:9d:bb:cb:36:c5:ab:21:78:5b:8b:1c:f3:39:
         e7:0f:65:a5:d8:7d:44:9e:b7:45:26:28:77:a3:c0:38:53:09:
         b4:8f:aa:74:b6:35:3e:9e:46:73:67:df:77:31:5d:13:a2:88:
         da:a6:e0:01:6b:dc:5c:c9:e7:6c:ce:d4:06:4d:09:a7:b4:7b:
         e9:4a:fd:4e:cb:03:04:09:6b:07:d1:24:86:db:d9:c7:be:c2:
         ee:3d:0e:9c:5f:80:97:2e:9e:a4:ed:9b:c4:3e:6d:9d:ab:7b:
         71:01:e6:e7:fd:c3:72:d4:50:f8:1c:00:cd:c9:a1:41:d4:76:
         a3:4f:c2:af:16:72:e2:c3:92:f3:d6:db:b0:24:6f:f4:e9:4d:
         4c:13:51:dd:de:6c:38:49:e9:4e:fd:71:a9:df:61:56:49:c7:
         6b:28:bf:8b:5a:e8:c4:de:a7:34:09:5c:e4:92:2a:2a:d0:32:
         45:20:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:30:22 2025 by rpki-client