Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd54f498-1899-3201-9833-754f18781053.roa
File:                     fd54f498-1899-3201-9833-754f18781053.roa (raw, json)
Hash identifier:          nK6GNpl+eIxoi7uoTCmmmj+DFK6fwDrQBjYg3l+fysc=
Subject key identifier:   4B:BE:27:53:CF:D5:D7:10:3B:26:7D:DF:C8:C2:3D:DE:8F:0B:6D:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06EB7F74B261FB7DB8AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd54f498-1899-3201-9833-754f18781053.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.189.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:eb:7f:74:b2:61:fb:7d:b8:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3c2f7f14-86d7-4c2b-8a9c-488af37036ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:7d:34:a9:76:56:98:64:5b:44:dc:c9:25:
                    15:de:0d:af:2a:f0:ac:a4:ab:4b:8f:25:fb:44:c8:
                    a8:83:35:ac:75:dc:e4:ad:85:ec:56:a8:8f:15:9a:
                    1e:ba:0e:ba:7c:eb:e1:be:13:8f:1d:b1:b0:f7:b2:
                    5f:08:91:7c:19:ee:ea:e5:85:b8:1c:17:ba:08:e2:
                    fe:bd:05:63:59:8a:37:e0:c6:36:e5:b9:2f:66:bb:
                    2d:21:e1:88:8a:67:c3:47:a0:1c:46:56:3f:f2:ad:
                    59:a5:5a:39:a7:56:1f:8f:0f:35:47:cd:f1:ce:e3:
                    02:5c:64:6c:a4:8b:10:8d:d9:81:89:c8:02:b9:8c:
                    cd:1d:45:71:26:7b:58:a7:42:19:a8:3f:72:3e:69:
                    2f:ac:9c:4a:63:69:51:c0:87:a7:21:ac:8a:1a:76:
                    65:90:5c:e6:45:bf:ca:94:9e:d2:ac:58:99:7d:ae:
                    81:20:48:3b:12:d2:5c:bd:7a:a2:d7:ee:05:e3:21:
                    ce:e3:0a:bf:75:c3:7c:12:c9:5e:5b:be:69:e7:fa:
                    74:a7:a0:fa:19:f6:7c:3d:ee:ea:13:1e:12:df:10:
                    24:59:80:87:8b:24:09:5f:c6:23:ba:b8:18:2e:af:
                    aa:0e:0d:44:8d:6f:b8:1a:98:9e:35:9a:c4:33:fd:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BE:27:53:CF:D5:D7:10:3B:26:7D:DF:C8:C2:3D:DE:8F:0B:6D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd54f498-1899-3201-9833-754f18781053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:97:16:07:db:9b:64:77:4f:53:ed:19:7f:eb:a4:48:b2:05:
         e9:c4:f2:6c:9c:66:8f:0f:26:a7:d7:21:5a:32:3f:99:19:4a:
         82:b1:f2:52:9b:cf:75:ce:1a:75:82:56:a9:44:bf:1d:73:ab:
         0d:3a:6a:a2:c3:4e:41:f3:23:07:a0:14:bb:55:3f:d5:f8:7b:
         a4:ec:66:6a:22:2a:3d:e9:e8:6d:fa:48:78:1e:7d:6d:ac:23:
         dc:0f:77:05:29:39:33:92:cc:16:d5:b0:c4:a8:ab:6a:8a:90:
         03:47:1c:63:71:66:3d:c6:b8:97:b7:a3:c6:cb:c2:85:38:58:
         54:b6:fc:53:59:fa:ef:5d:0c:8d:5f:ba:70:34:f6:7f:26:10:
         8f:d4:95:5e:2e:5e:dc:62:46:57:61:05:fc:17:2c:04:9a:d1:
         9e:21:4f:a2:91:37:01:60:bd:b1:1e:a2:79:19:fe:ae:a5:fd:
         35:4f:5e:fd:47:84:56:32:95:77:91:73:61:33:e5:6b:fc:bf:
         18:e3:a2:ce:92:2b:96:a0:0a:1b:e5:e2:69:66:bd:1a:d9:c3:
         78:c4:76:de:44:5d:a5:68:f3:67:dc:de:20:89:e2:aa:db:a2:
         8b:72:a5:70:94:12:a5:ca:37:aa:de:08:7e:13:73:da:31:48:
         ba:6d:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:51:09 2025 by rpki-client