Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd890d7-cafc-306a-bd8d-df42a26a1fc0.roa
File:                     fcd890d7-cafc-306a-bd8d-df42a26a1fc0.roa (raw, json)
Hash identifier:          Xr1dPgzJ09Nzb6lpRt4VD327vKB8eulu/gxRLUzm8zw=
Subject key identifier:   B9:6B:09:12:5F:F6:B9:0B:B3:5F:B4:BC:0B:8A:52:07:6C:04:8A:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0F39BB11B381456F998D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd890d7-cafc-306a-bd8d-df42a26a1fc0.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.168.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:f3:9b:b1:1b:38:14:56:f9:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=fbcbc5d6-9b80-4730-ae0e-28f83246059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:c6:64:f6:e0:91:1a:c5:ff:c8:eb:6b:ae:
                    29:0e:9d:27:36:6d:1d:7f:41:30:b0:9f:77:b1:dc:
                    c9:37:e4:9a:53:4d:ca:ed:2b:41:a7:45:05:3a:fa:
                    e1:2e:0a:64:4d:ee:38:7b:08:b7:1c:43:47:39:ab:
                    7c:ca:30:86:cf:bf:66:34:47:7c:27:fa:8e:fe:66:
                    17:fa:d5:d3:a8:f9:75:43:62:e5:7a:17:e0:ac:6a:
                    b8:f5:49:b7:8a:5c:64:46:3f:90:85:8d:ec:80:e8:
                    da:af:42:3c:5d:5e:2a:78:e0:59:9d:d0:33:8a:c0:
                    d4:75:bd:b5:42:83:6c:3d:98:5b:a7:85:61:06:cc:
                    8d:98:4f:95:c9:72:b6:65:2f:2d:fc:b7:98:6d:40:
                    5e:49:0a:69:45:fb:a8:26:70:52:eb:64:7c:b1:c6:
                    a5:ab:97:fc:f7:26:8a:a8:6d:46:f7:dd:25:f8:77:
                    6c:db:b4:11:70:1c:30:1e:15:66:59:e9:a1:3a:0f:
                    b8:0d:02:43:68:03:3d:da:a0:ae:8a:f1:e1:04:e7:
                    66:69:df:07:ad:b7:18:b7:1b:65:00:3f:75:f9:1a:
                    75:d8:fb:e4:3b:bd:a0:d6:ea:e8:bd:59:cc:17:04:
                    68:c8:16:dc:1b:03:7a:b0:84:a6:02:cd:74:57:36:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:09:12:5F:F6:B9:0B:B3:5F:B4:BC:0B:8A:52:07:6C:04:8A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd890d7-cafc-306a-bd8d-df42a26a1fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:26:67:d4:2f:21:2c:a6:47:b9:4a:38:84:5c:96:2e:6b:
         6b:3a:00:49:24:a1:fe:9a:99:e5:a0:96:04:36:99:dc:7f:8e:
         ba:f4:c0:ff:b0:8c:24:5b:d6:fd:af:7a:bf:96:94:d3:58:01:
         43:0f:cd:09:2f:b2:bf:ad:7b:48:9b:0b:1d:2e:54:2a:3c:ed:
         61:e2:94:6d:83:ca:57:5a:20:fb:53:5c:71:6a:27:77:fa:de:
         f5:98:3b:23:f6:da:a8:87:05:95:31:d1:ff:ba:cd:58:da:9a:
         80:58:1b:1f:c6:88:be:72:d6:82:00:7f:b9:09:aa:91:7f:bd:
         bf:1b:ee:0e:0a:6f:69:fd:70:0d:ea:ae:07:fc:72:fc:f9:4b:
         bf:95:bb:15:47:08:87:50:18:e2:5d:1c:1f:47:e9:79:96:08:
         71:0f:e2:37:c2:75:05:62:46:5d:43:23:ea:e5:f9:a9:76:d7:
         3c:30:78:2d:0f:19:3b:a1:64:87:1c:20:db:de:81:11:73:be:
         3a:4e:21:75:a4:e8:64:68:c2:24:c9:d3:9c:3b:77:45:76:74:
         23:94:3b:1d:ae:85:f6:91:0d:6a:67:2e:b7:22:69:11:53:11:
         02:77:bc:a5:a7:d2:81:08:46:3e:c2:96:21:f5:56:7b:4e:bd:
         b0:f3:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:09 2025 by rpki-client