Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa
File:                     f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa (raw, json)
Hash identifier:          qYSwfYf5twgqpzi1ABzXbHrTCvGI4UtHLr9q7OmlxgM=
Subject key identifier:   5A:89:17:2D:5D:8B:FD:7B:7A:21:D7:A4:10:AF:52:F4:3B:30:6B:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08112C2FAF4B1BC08CBC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.208.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:11:2c:2f:af:4b:1b:c0:8c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b82b3b86-89b8-4182-96bd-d65f0bec7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:71:59:31:df:72:17:b8:e8:5f:11:df:44:
                    de:93:f8:b4:26:44:36:05:f3:5e:3e:34:3e:19:de:
                    e5:15:48:f9:63:50:c2:7d:d9:7e:ee:ba:f4:ba:e7:
                    a9:bc:71:17:9c:c1:98:b2:2e:a4:a0:ae:a8:f7:3b:
                    77:39:20:7c:70:37:60:d4:e2:d8:0f:c1:2b:fe:d3:
                    f5:1f:46:b8:53:d7:02:ff:b5:60:ad:9f:35:7e:21:
                    2c:04:e5:ef:63:bb:e4:b2:a7:7a:e8:ca:32:44:99:
                    78:3f:91:55:36:45:c1:31:0e:9d:2c:43:e5:f2:15:
                    a1:3c:88:72:0c:1f:4e:f4:2f:16:95:e5:d7:81:8d:
                    39:d7:90:b0:dd:9d:71:44:d3:68:f8:0a:fd:41:8d:
                    53:2f:55:53:98:d1:0b:3b:6d:76:42:09:b9:9e:87:
                    3c:cf:75:74:30:a4:f7:38:0c:4a:e2:1d:2c:4d:d5:
                    90:80:25:41:74:fb:6f:9e:7c:88:bf:54:7f:61:f6:
                    65:19:59:80:55:e1:51:9e:a3:75:8e:24:3a:56:07:
                    32:bd:41:c6:d7:75:16:ad:15:59:a8:c7:65:be:34:
                    62:d8:16:e5:18:08:04:0e:cf:fe:1d:be:41:01:52:
                    17:92:8f:4c:40:bd:cb:db:24:d1:f8:d9:49:70:88:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:89:17:2D:5D:8B:FD:7B:7A:21:D7:A4:10:AF:52:F4:3B:30:6B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f38ddd18-1f0c-348d-8da1-8d27fc37cd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.208.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:e7:09:95:34:25:f7:a9:6c:f4:07:05:ab:d9:89:2a:09:
         9a:aa:7c:64:bd:d7:10:74:6f:48:22:f7:c9:72:fa:76:e4:b9:
         be:06:29:4d:eb:1c:51:00:29:e7:3c:56:43:ef:f6:28:c6:a1:
         4b:b0:82:ac:a8:00:3d:b7:71:bb:bc:b1:0b:fd:1e:87:8d:02:
         5c:ec:6d:b3:32:af:b9:69:19:3d:7e:74:44:31:fe:3b:c6:6e:
         03:38:fe:6d:5a:92:04:d0:79:4e:67:a8:62:9d:2d:a8:8c:8a:
         73:37:34:83:48:11:c0:a7:a2:40:d3:ab:89:ad:97:79:07:79:
         26:ac:b3:b2:e5:96:c7:49:50:c4:ef:3a:f3:b1:11:1b:8b:54:
         34:0a:fa:26:19:f4:8d:f7:32:07:c1:73:20:b9:76:39:8b:ca:
         74:8b:a2:5b:fd:ed:9f:a2:b0:ef:52:5d:4e:8c:cc:ce:a3:91:
         a7:61:58:64:ae:eb:cd:93:58:15:16:19:aa:39:63:4e:57:0f:
         18:d9:0c:4e:fe:04:02:33:fd:a8:08:0a:7b:d2:70:bf:ea:07:
         05:a3:5c:c3:b5:73:ce:4e:07:3d:c8:88:90:e9:68:fc:57:6d:
         2d:7f:07:91:72:52:99:40:ba:25:1a:c3:1f:8d:51:fe:6f:7d:
         e7:78:8e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCBEsL69LG8CMvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
YjgyYjNiODYtODliOC00MTgyLTk2YmQtZDY1ZjBiZWM3OTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZxWTHfche46F8R30Tek/i0JkQ2BfNePjQ+
Gd7lFUj5Y1DCfdl+7rr0uuepvHEXnMGYsi6koK6o9zt3OSB8cDdg1OLYD8Er/tP1
H0a4U9cC/7VgrZ81fiEsBOXvY7vksqd66MoyRJl4P5FVNkXBMQ6dLEPl8hWhPIhy
DB9O9C8WleXXgY0515Cw3Z1xRNNo+Ar9QY1TL1VTmNELO212Qgm5noc8z3V0MKT3
OAxK4h0sTdWQgCVBdPtvnnyIv1R/YfZlGVmAVeFRnqN1jiQ6VgcyvUHG13UWrRVZ
qMdlvjRi2BblGAgEDs/+Hb5BAVIXko9MQL3L2yTR+NlJcIj7JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqJFy1di/17eiHXpBCvUvQ7MGsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM4ZGRkMTgtMWYwYy0z
NDhkLThkYTEtOGQyN2ZjMzdjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdDcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETN5wmVNCX3qWz0BwWr2YkqCZqqfGS91xB0b0gi98ly+nbkub4GKU3r
HFEAKec8VkPv9ijGoUuwgqyoAD23cbu8sQv9HoeNAlzsbbMyr7lpGT1+dEQx/jvG
bgM4/m1akgTQeU5nqGKdLaiMinM3NINIEcCnokDTq4mtl3kHeSass7LllsdJUMTv
OvOxERuLVDQK+iYZ9I33MgfBcyC5djmLynSLolv97Z+isO9SXU6MzM6jkadhWGSu
682TWBUWGao5Y05XDxjZDE7+BAIz/agICnvScL/qBwWjXMO1c85OBz3IiJDpaPxX
bS1/B5FyUplAuiUawx+NUf5vfed4jgU=
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:10:29 2025 by rpki-client