Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
File:                     0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa (raw, json)
Hash identifier:          CG80wCPjaq0sMNkEbT3m7QqMosAWLWLYnaZxcC6AKMU=
Subject key identifier:   0A:25:EA:E1:DF:C4:C2:85:8E:21:ED:E4:7E:A1:D3:07:49:A0:E8:8D
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584949FE97B6385DA036F0C72D40
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     201917
IP address blocks:        47.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:97:b6:38:5d:a0:36:f0:c7:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=012a646d-1053-4df7-8bd3-68547b8ed6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:97:5c:57:01:b9:e9:20:27:1d:92:d1:22:
                    c4:fb:f4:d2:5a:75:24:a9:8c:e5:80:1c:52:d8:5d:
                    9f:69:e3:70:4f:7c:72:a0:e9:36:21:ad:db:68:23:
                    cd:09:bd:25:da:ae:03:53:c8:5b:16:f6:4d:29:4d:
                    0b:3e:94:08:1b:2c:2f:b7:0a:96:29:a2:06:ee:ab:
                    43:a6:fb:c7:75:fd:23:ec:7c:3d:42:8f:c3:76:42:
                    c3:6d:5c:ea:cc:c4:e3:1f:de:0c:a6:91:ee:62:b6:
                    93:0e:1d:df:c1:5b:4c:f1:8a:c4:30:1c:85:76:e0:
                    72:c3:c1:9f:2b:34:17:8f:73:7d:ff:c2:dd:2d:62:
                    ac:2a:00:59:bd:aa:68:ff:aa:1a:df:c5:d8:b4:80:
                    17:cf:6d:72:e7:15:e0:be:27:1d:1c:73:aa:74:10:
                    09:0c:97:2f:61:b7:bc:f0:6e:f5:aa:72:8b:68:cc:
                    0c:07:e3:a4:19:71:57:c3:e7:e0:32:f6:00:cf:32:
                    86:aa:77:db:8b:fb:b4:bc:20:e4:29:aa:9d:05:44:
                    ae:f1:a0:71:d5:2f:b3:d1:3b:6e:d7:6d:ba:92:67:
                    fa:3d:48:c1:c1:40:44:81:76:6f:ed:b5:a0:41:a1:
                    ea:26:68:b5:5d:47:4d:ed:c8:e1:28:69:b3:39:42:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:EA:E1:DF:C4:C2:85:8E:21:ED:E4:7E:A1:D3:07:49:A0:E8:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:d9:ee:98:7a:d4:c1:7d:ff:ce:4b:3f:94:65:ec:b2:fa:
         89:17:74:f8:fb:ab:52:66:b7:12:b2:15:f1:8f:e0:6c:13:5f:
         37:54:b1:c5:09:3b:cc:30:be:28:2e:8f:e2:5a:d1:d4:fd:7f:
         06:6e:e5:80:9f:ea:88:41:de:2f:30:0c:7e:ad:b8:1a:8c:20:
         38:e0:bd:82:6d:a1:54:1f:79:3a:98:eb:38:d1:82:74:b7:13:
         6f:22:c7:5f:fc:14:63:e4:79:38:0f:86:fe:f1:f7:46:6e:57:
         a5:2b:78:c1:62:8e:90:3d:24:1c:3e:ae:37:13:46:4d:87:db:
         58:03:fc:84:ae:77:c9:fa:74:fc:5c:0f:b3:0d:6f:54:0b:22:
         11:79:24:67:d6:cc:ff:5f:d2:c7:f4:04:6e:9a:ef:5c:c8:f8:
         69:ab:dd:10:cf:e3:d3:0e:35:ef:b6:07:17:52:ce:9c:fd:e3:
         04:4b:aa:22:81:dd:85:4b:02:b1:ae:bf:ba:d2:6a:0f:3f:a4:
         b6:81:fb:00:fc:f3:75:a6:c7:fd:ee:0c:be:3c:1c:b1:ff:42:
         86:e5:1c:5c:59:2a:b0:fd:16:0b:69:32:89:cf:a6:85:77:a1:
         dd:2a:3e:65:15:49:0d:6f:12:4a:ec:48:af:37:34:35:98:85:
         aa:a1:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:50 2025 by rpki-client