Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11944bc9-a098-30fd-80d8-acd1560a7b3a.roa
File:                     11944bc9-a098-30fd-80d8-acd1560a7b3a.roa (raw, json)
Hash identifier:          uhJKeCIpbFt6iHGtUZZ8RQVmylbsFKuvZiY3dDpg7MM=
Subject key identifier:   38:D6:09:F9:3D:41:E8:78:AA:22:BB:E4:5D:3A:BA:FF:A8:89:33:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5FC5966E55DA92FA07390
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11944bc9-a098-30fd-80d8-acd1560a7b3a.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        73.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:fc:59:66:e5:5d:a9:2f:a0:73:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c67ecad5-0512-4147-9a4a-d500cd73ab9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:3d:b8:89:19:ad:5c:f8:c7:e5:84:1c:43:
                    44:f0:03:63:16:57:cc:e9:73:06:57:1e:c8:eb:2c:
                    c1:e7:2e:5f:11:63:88:a8:0e:0a:07:8c:6f:78:ae:
                    d9:4a:4c:c0:dd:02:ed:29:3f:3b:c8:28:c2:7a:cd:
                    54:4d:33:f4:a3:3c:99:87:e8:87:83:f1:b1:15:85:
                    8b:c2:af:df:d5:1f:e4:3a:eb:6c:b2:7e:a1:5d:be:
                    91:88:47:dc:15:dc:86:c9:70:f8:4b:34:70:5f:8c:
                    61:58:85:ac:68:65:b7:7c:16:40:03:94:57:37:ca:
                    f5:58:12:44:61:23:0e:e5:99:d4:8c:a1:b8:8a:fc:
                    56:26:b2:e6:8b:87:d0:5d:de:07:e8:e5:38:88:a9:
                    0d:f8:a9:e7:f8:2a:44:c4:01:54:aa:12:13:4d:d4:
                    2b:d9:d3:96:0b:9c:81:e4:28:14:5f:03:13:bb:7a:
                    f6:8b:d5:70:44:92:ab:54:86:bf:13:85:a9:dc:da:
                    56:52:ee:a7:c9:53:86:86:c0:b8:aa:09:52:f2:96:
                    d7:8a:d0:ef:cb:05:79:d0:91:d8:37:74:e6:d9:8c:
                    bf:ea:55:e3:24:bf:c4:06:be:f4:ec:e4:5a:11:e0:
                    81:a8:00:8e:ba:4b:e2:c8:63:ab:a5:7c:ab:73:ff:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:09:F9:3D:41:E8:78:AA:22:BB:E4:5D:3A:BA:FF:A8:89:33:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11944bc9-a098-30fd-80d8-acd1560a7b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f3:0a:c2:8f:f5:dd:1a:28:59:f7:42:08:b2:b9:d0:d9:20:
         60:3b:12:bf:f1:e4:d4:6a:0a:94:37:d7:4c:d9:a3:24:ce:4b:
         0f:20:c7:b8:46:92:c8:4d:d4:c7:bd:99:f3:04:ad:59:97:38:
         f0:3e:d4:3e:19:ad:e6:02:f0:96:06:ca:7e:da:c2:1c:4a:b0:
         23:a3:d4:ee:3a:5f:12:30:e2:af:46:14:e0:f3:34:b3:22:7d:
         0c:7c:c6:80:cd:75:0f:a5:2c:ea:0b:b6:43:54:34:20:d8:23:
         53:47:16:65:81:8f:11:06:37:c3:0f:15:c6:3c:73:0b:79:7d:
         38:c6:96:e4:ab:85:13:bc:ce:7d:ff:57:41:91:72:5c:9b:35:
         ab:06:05:ac:87:3e:6c:88:9b:f1:f6:0e:fc:e9:6e:2e:70:d3:
         2e:1d:3f:22:72:e2:e0:7a:47:fc:81:f3:89:65:a9:4a:fe:4e:
         21:96:5a:a1:9b:bb:80:8d:0f:46:e9:4a:52:c1:ce:67:15:56:
         ce:43:d2:f7:71:4c:f5:08:9a:eb:20:61:7a:08:69:09:98:f0:
         62:1a:f3:1d:0c:71:f0:c8:82:0f:c8:cf:46:5c:a5:51:ba:da:
         22:f6:da:55:d0:29:31:cf:6a:41:f1:98:08:de:93:2d:82:af:
         66:78:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:34:39 2025 by rpki-client