Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f848b4ae-cd1d-31ff-817c-2e307bf8ce8a.roa
File:                     f848b4ae-cd1d-31ff-817c-2e307bf8ce8a.roa (raw, json)
Hash identifier:          +619LZejkoMZbJBx7mubdEwmRVh/gYhfZ8F1bq0knAo=
Subject key identifier:   40:EC:67:D1:2A:E7:35:70:47:9F:90:E5:CC:4F:F0:69:29:6E:4F:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430E9009DA2E9AC6B2F5080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f848b4ae-cd1d-31ff-817c-2e307bf8ce8a.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.136.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:e9:00:9d:a2:e9:ac:6b:2f:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d4d9ff51-9270-45c8-ab12-fad016c76f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:82:ad:74:0b:17:29:74:5d:f0:ab:9c:07:
                    07:66:eb:88:bf:e9:e2:f3:b6:48:9a:19:0d:13:f0:
                    8a:2f:d3:9b:b8:ac:e4:df:95:a4:c7:1a:78:cf:52:
                    62:42:43:3a:98:f8:bc:26:18:1e:8b:ed:8e:7b:02:
                    12:89:51:3d:e7:56:5e:66:e9:e8:01:94:70:da:22:
                    84:6e:49:c2:99:04:6e:f4:94:8d:a1:02:25:06:eb:
                    48:06:6c:66:3e:24:9f:e1:85:66:b0:96:7b:03:bc:
                    76:e3:42:ad:0b:c7:57:cb:98:b2:44:38:8c:bd:6e:
                    1e:ab:b9:d3:cc:55:1e:ff:26:0e:cb:a3:ef:29:2b:
                    55:44:8f:6b:82:ba:76:8c:ee:dc:41:47:95:63:4d:
                    aa:77:46:56:17:e0:a7:94:a0:75:77:72:62:4e:07:
                    ac:ab:f3:84:e3:96:c8:67:46:1f:22:f1:1f:fd:f2:
                    e4:f8:9b:65:bf:ca:3b:66:dd:5d:04:7e:4b:fa:91:
                    ff:8d:e3:2d:fe:de:e4:00:01:bf:9f:bd:4f:4c:03:
                    7a:7c:09:05:cc:ec:d9:2b:83:e8:67:07:69:e3:bc:
                    78:53:88:13:4d:73:a5:8b:8f:aa:c9:59:c6:b6:ca:
                    a9:ae:17:6e:b8:0d:ec:e7:6b:15:9b:14:1d:3d:75:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EC:67:D1:2A:E7:35:70:47:9F:90:E5:CC:4F:F0:69:29:6E:4F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f848b4ae-cd1d-31ff-817c-2e307bf8ce8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:89:4e:31:c8:a8:59:1f:99:1e:94:84:e7:04:fe:23:74:
         79:f4:6c:99:b8:dc:76:6a:80:9d:3b:84:5b:84:4f:9b:cc:79:
         cd:35:f0:dd:1b:bc:fa:29:99:57:bc:bc:33:ae:e7:b4:c7:06:
         01:4d:3c:e2:9f:56:bf:9b:d8:81:c5:8b:7e:7f:24:0e:0c:5f:
         8a:61:2c:e5:77:a9:0d:c3:ef:d0:01:34:d8:72:bb:9d:bd:25:
         ad:38:06:30:cc:09:ac:43:05:c2:c8:39:02:8d:3a:ca:ed:5f:
         01:b4:12:fb:40:21:6f:31:8a:4a:1a:01:f0:bf:5a:82:07:e1:
         ff:b4:67:0d:5c:90:75:ee:65:ac:7e:49:07:ac:dd:64:87:57:
         b0:c7:28:42:47:64:15:a1:7a:a0:ae:61:c6:2a:35:a5:b0:40:
         ee:5b:2f:27:17:94:da:02:ce:9d:14:4d:35:7c:e8:ed:e9:39:
         a5:9f:77:1e:0c:86:ca:e6:3c:1f:d7:56:d6:d2:36:06:0f:e5:
         f2:54:a1:92:62:dd:1f:5b:9a:c0:3d:64:5d:7a:fa:ad:60:47:
         b4:cc:ab:84:f9:24:c4:3d:fd:79:b4:80:88:e4:46:3e:b8:a2:
         e9:ee:fd:cc:f7:eb:28:ae:f5:90:02:86:70:74:79:f2:d2:1e:
         18:8e:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:20:44 2025 by rpki-client