Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef865676-536d-34bf-a4a2-87365cdd8347.roa
File:                     ef865676-536d-34bf-a4a2-87365cdd8347.roa (raw, json)
Hash identifier:          fslwRkD1RVikwtm20H2z7Q+wM+7hD7uiMOiquRjQW2w=
Subject key identifier:   9C:76:56:F5:BF:2F:8A:F6:D7:E3:DA:54:06:63:4D:B2:F3:F8:7A:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7E32D66A64CD9204A5300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef865676-536d-34bf-a4a2-87365cdd8347.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.155.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:e3:2d:66:a6:4c:d9:20:4a:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=865b903d-e77e-4d4f-a45c-c394f2ac7254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:66:da:ca:98:c5:71:20:4a:ae:31:7e:cb:
                    0b:9a:76:38:26:6c:31:47:7d:dd:1a:2f:3e:bc:52:
                    16:0b:12:9d:41:45:25:44:84:56:77:b1:98:7d:8d:
                    61:d2:67:1e:4c:fa:e7:aa:06:06:b8:83:51:f4:c9:
                    3d:23:48:fa:74:21:7f:73:da:91:b5:64:7f:a9:6e:
                    96:cc:5f:9f:1f:90:24:9e:6a:a2:4e:75:55:77:b7:
                    4b:09:6a:9a:25:c7:16:8e:0a:7d:ed:92:2b:06:f7:
                    94:ba:14:81:ac:44:77:d7:64:12:1f:8b:81:d9:9b:
                    61:81:eb:1c:dc:dc:15:22:31:97:32:ee:e1:d8:16:
                    3e:91:bf:69:4d:06:0b:c9:67:a9:9c:7f:c6:83:28:
                    03:a9:4b:63:d8:c1:e8:dc:6a:fd:76:48:11:e6:e3:
                    db:b0:cc:ba:62:89:c0:9b:07:3c:85:49:81:09:c8:
                    d8:c0:05:04:3b:1e:00:24:7f:3b:24:42:6a:c7:57:
                    c4:bb:8b:af:8a:5e:ff:78:0a:9c:5e:a8:41:4f:3f:
                    22:04:d1:dc:6c:c7:43:39:1b:fd:87:da:03:9f:73:
                    c1:7f:41:39:ba:b9:77:a1:43:cd:39:23:a8:1b:2d:
                    c5:96:53:a1:37:e2:cd:86:76:c9:58:ed:03:07:8b:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:56:F5:BF:2F:8A:F6:D7:E3:DA:54:06:63:4D:B2:F3:F8:7A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef865676-536d-34bf-a4a2-87365cdd8347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bb:23:cc:89:10:04:60:4e:fd:0b:d6:32:7a:8c:28:2d:9b:
         1b:c7:45:0f:be:d5:10:42:7b:7c:fe:98:32:a8:ae:7b:58:e7:
         91:80:ae:91:8e:d0:57:af:05:b4:84:ae:4d:ae:07:dc:5a:de:
         a0:69:61:05:d3:97:b2:25:a0:c4:15:46:00:91:c9:d2:05:9c:
         5d:e1:7c:d1:b0:7c:5d:cd:40:98:55:b0:d3:a2:a8:94:ee:55:
         56:c8:77:42:11:86:4e:60:d4:a0:be:2d:59:04:2d:8b:f2:1a:
         83:f6:e5:80:3a:0c:d9:4e:66:8c:a6:21:84:84:3c:30:69:e9:
         06:bc:2f:22:e8:11:9d:3a:f0:9b:a0:7f:b6:6a:d5:df:6f:2c:
         93:c5:dd:ed:68:f7:c5:f6:7a:3d:0c:1c:f0:6b:10:68:9d:ef:
         4b:85:c9:00:7e:33:eb:5d:cd:40:02:d7:47:ae:27:15:fa:09:
         f5:50:3b:bc:40:7a:a7:20:c3:f4:29:ee:0f:6b:5e:e8:ab:70:
         89:13:77:dd:03:7c:c9:35:4c:ab:01:df:dd:23:79:88:ea:04:
         6d:13:22:34:d9:ab:ac:d7:3a:f1:91:e8:32:1e:af:fc:e4:a5:
         53:48:1d:54:26:e2:59:35:68:0a:cd:14:83:72:8d:05:6f:13:
         ec:22:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:17 2025 by rpki-client