Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f15aebcb-85d0-311a-b720-3718a30dec67.roa
File:                     f15aebcb-85d0-311a-b720-3718a30dec67.roa (raw, json)
Hash identifier:          lywfV8Qnduo32ch3eieT4VN5WIfs7OIYui1TU/9jQBI=
Subject key identifier:   A9:3C:4C:6B:CF:73:9F:F2:65:5A:D0:D3:BE:9B:0F:A5:A3:AD:7A:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431AF868B8C0B08624387C4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f15aebcb-85d0-311a-b720-3718a30dec67.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.238.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:af:86:8b:8c:0b:08:62:43:87:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=0cda52bd-06cd-4885-9db1-2241028bfdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:60:cf:91:27:b0:09:87:c1:1a:4a:e8:f8:
                    85:2c:64:9f:7a:a2:af:70:a9:1c:9c:88:75:2f:63:
                    3e:8c:73:58:c2:39:16:bf:a8:a8:eb:5c:fc:9b:c3:
                    e8:7c:b9:73:95:65:70:f0:0f:e7:36:a3:87:7b:01:
                    cd:d1:ff:77:cc:86:6a:5d:61:c7:77:69:cb:6f:06:
                    cc:53:7b:ac:17:33:40:6e:7a:af:04:69:49:be:3e:
                    df:94:fd:7a:1a:28:5b:bd:79:4f:7a:d2:57:79:04:
                    d6:c2:35:9d:ca:56:b8:2b:41:7a:2b:32:8d:7c:70:
                    15:de:3f:d0:58:c8:61:fe:2b:48:e3:d3:96:57:87:
                    84:18:5d:2e:0e:a2:6e:e6:c2:a6:ba:ab:8b:1e:43:
                    d1:d9:eb:7c:af:2a:e5:3d:0c:35:7b:20:ac:41:ed:
                    12:fa:cd:63:d8:93:e7:e6:6d:6f:d3:5b:a8:a9:76:
                    11:53:0b:a3:07:9e:cd:01:b0:c3:50:28:18:d6:e9:
                    76:22:18:0b:97:4c:ea:16:0e:38:c2:28:4d:b6:5c:
                    63:31:3a:61:16:4b:7d:d9:ff:db:2b:3d:e9:98:9b:
                    ca:a6:ae:b5:ee:82:dd:f4:13:46:93:a6:81:c2:a0:
                    3c:df:5d:9d:33:5a:8c:0b:41:fb:e2:1c:d3:25:a5:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:4C:6B:CF:73:9F:F2:65:5A:D0:D3:BE:9B:0F:A5:A3:AD:7A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f15aebcb-85d0-311a-b720-3718a30dec67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:59:a9:27:32:06:a5:55:75:3b:63:72:50:7b:84:b7:3f:88:
         50:48:ed:de:3e:5b:91:25:84:69:f1:03:7e:1a:f7:89:14:2a:
         e1:2b:93:59:5d:f3:f9:01:cd:5e:d4:46:6e:63:83:5b:86:3c:
         0b:52:3c:0d:66:8f:c8:ee:c8:22:c9:0f:9b:61:59:86:aa:e9:
         67:e0:70:34:b3:b3:7b:4d:65:b5:8c:2c:a0:b7:90:ae:52:c7:
         88:32:f7:8b:96:b9:bc:f5:3b:a2:d2:60:2c:5d:4a:9f:fb:3b:
         30:d4:f4:0f:7a:96:ce:29:eb:33:4e:18:2a:b7:9c:83:34:69:
         ed:e6:46:50:ae:bc:a4:82:a6:dd:71:7c:a5:d4:41:09:11:e7:
         ab:82:62:9d:7e:67:71:f9:48:0b:f8:a8:20:5a:b7:87:b2:ad:
         fa:94:21:81:e9:08:a8:ad:94:25:1c:1e:de:fc:d3:56:97:2a:
         b0:79:07:8a:dc:1c:d7:d5:1a:9c:e0:38:5c:95:52:07:e0:c2:
         72:a7:3a:94:53:33:c5:8d:b7:f8:b1:34:9e:2a:57:53:28:6e:
         fb:ab:e0:24:a1:2d:c8:68:b3:ac:b9:f8:da:65:35:3a:b0:16:
         9e:08:d3:59:83:cd:31:1c:10:7b:cd:5f:fa:fa:9a:fa:60:13:
         2c:9c:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:06:53 2025 by rpki-client