Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa43907-35fd-3701-989e-25b502b9ca30.roa
File:                     ffa43907-35fd-3701-989e-25b502b9ca30.roa (raw, json)
Hash identifier:          AwHrWtZZVNkCEIgUcd8KZg3HmBb3MrI9pRro6P8uOLc=
Subject key identifier:   5F:EF:52:A3:73:B6:F2:A4:E5:82:43:16:B5:AA:7C:5B:A6:DA:ED:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05A9812BFF9D8383DA6480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa43907-35fd-3701-989e-25b502b9ca30.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.33.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:a9:81:2b:ff:9d:83:83:da:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4985ed61-fd74-4b62-936e-b07041753ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:c3:56:ba:f0:01:ba:73:17:ea:4b:f3:6e:
                    06:a4:5d:41:ed:47:f7:2f:8f:60:fb:87:b2:e9:67:
                    57:f1:68:06:c3:3d:01:47:e9:70:50:63:a3:ed:a0:
                    2a:1d:fd:b2:85:2f:20:fa:be:b9:bd:9b:5a:96:ca:
                    03:f4:08:1a:d8:0d:c8:c1:69:93:ea:3a:2d:fb:3b:
                    85:48:3f:73:60:de:63:54:e5:f7:0d:e6:1f:f4:a6:
                    da:8b:34:9f:ba:67:cb:2d:5e:42:b7:10:bc:f2:55:
                    81:61:12:c5:12:c7:6b:d2:ca:88:69:cd:9c:31:da:
                    a0:64:01:db:a4:81:ce:6d:b4:25:68:c0:ac:c8:d1:
                    26:e9:70:8f:c3:e0:60:f6:2a:10:2d:e7:8f:b6:a8:
                    4c:e3:c8:8b:3d:2e:18:9b:20:c8:dd:7b:8b:ae:19:
                    64:9a:ae:23:28:44:7a:62:2f:a1:7e:7b:49:f5:a1:
                    8e:d5:42:a2:88:32:c2:73:1f:5e:77:1d:07:11:72:
                    1b:1b:85:d3:07:99:bb:ae:db:04:a7:19:9d:3d:d1:
                    b9:e7:83:79:0b:75:21:8f:6c:f1:13:2f:d3:a0:2d:
                    92:15:45:0c:c2:54:2a:86:64:d9:25:f1:8d:1a:51:
                    f9:ad:4d:ba:ae:e8:7b:2d:62:72:ee:5a:1f:50:58:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:52:A3:73:B6:F2:A4:E5:82:43:16:B5:AA:7C:5B:A6:DA:ED:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa43907-35fd-3701-989e-25b502b9ca30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.33.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:35:c6:f0:5a:10:5e:98:7f:44:ee:91:b0:75:e7:7b:fa:
         2b:50:cf:6d:80:20:0d:e8:23:0f:9a:6b:3e:3c:7a:bd:08:46:
         e8:c3:52:90:bd:3e:0b:4e:d1:09:97:cb:73:50:50:7d:f1:0d:
         31:1e:5a:84:95:ba:2b:68:49:51:e2:5f:b0:bd:78:e0:15:9b:
         83:ff:6d:a3:27:6e:18:3c:53:47:ca:78:07:61:47:de:a8:3a:
         e0:93:32:39:ff:1d:82:4a:1f:a8:ca:34:bb:c7:7d:e7:f2:67:
         ca:f8:3f:17:ae:52:75:9c:32:5d:a3:5d:ef:bc:fd:e2:99:cd:
         1c:a5:38:85:a7:76:3d:34:f0:47:50:f3:d6:0a:1e:18:5c:45:
         96:ec:34:5f:94:13:a8:36:95:e2:3d:da:39:79:ec:fd:dd:6a:
         e6:0b:9c:28:f1:68:dd:16:7e:bd:03:c6:b6:02:ed:a7:cd:d2:
         1c:30:3e:9a:c8:54:e0:fd:cb:60:0b:62:34:88:70:6f:be:ac:
         87:37:43:c0:9b:1a:f4:17:62:36:31:20:94:75:32:25:e8:1b:
         41:ac:e6:cd:eb:c2:9a:61:86:6d:a0:d9:46:88:2f:71:49:22:
         cc:95:6d:d3:c0:b2:ba:db:1f:0c:69:bb:df:9a:e7:ae:fb:58:
         f7:70:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:42:55 2025 by rpki-client