Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b873dc-98b3-3847-a52b-d33a4a893bb7.roa
File:                     48b873dc-98b3-3847-a52b-d33a4a893bb7.roa (raw, json)
Hash identifier:          LSwyWud+ksyHTj9OwP6qV9suwECqmsNdF6+mF6z7yd4=
Subject key identifier:   42:2B:E6:AE:4F:8D:6C:D7:3A:5D:A4:8E:FF:2E:D9:DF:D5:54:4F:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992947D50E67AB4CF33743C30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b873dc-98b3-3847-a52b-d33a4a893bb7.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        73.73.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:7d:50:e6:7a:b4:cf:33:74:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=af6d4f87-9429-44f1-affe-7d993e359191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:a5:ef:25:50:a7:be:e9:9e:e2:5b:0c:37:
                    68:4f:2e:56:60:2f:5f:f5:3d:b7:cf:04:5f:fa:4b:
                    b7:d8:a5:d6:34:dc:4f:11:3a:a2:78:17:5c:d6:c1:
                    73:9b:9a:3c:f7:74:d4:93:4d:52:b4:e6:bf:2f:93:
                    0f:e4:7f:e6:97:24:b7:e9:c9:92:08:c4:46:15:69:
                    ac:95:62:3e:2d:59:3b:10:46:96:70:10:df:10:9f:
                    2f:a9:e3:d6:5f:d6:75:24:d4:88:43:9e:a2:d7:b2:
                    ee:97:6a:0d:e2:92:56:fc:f0:df:6b:c3:7e:d0:bc:
                    09:b6:cc:7b:70:7c:d7:62:27:4e:82:c3:86:88:1e:
                    0a:0b:42:79:cf:23:d0:fb:ea:49:b6:70:7c:70:a7:
                    33:45:8b:c3:c9:9f:fc:e0:be:85:32:f5:9e:c5:c3:
                    ec:8b:42:af:66:39:c2:5c:ae:2a:d0:9d:c0:bd:c2:
                    cc:5c:e9:1f:77:4c:7e:82:f8:63:e1:89:9d:bf:71:
                    00:71:b1:19:bd:2d:53:5f:a9:35:48:1c:5d:cd:73:
                    fd:d8:7d:c6:d5:29:70:36:ca:4e:4d:02:35:e6:03:
                    3d:4a:ff:b2:c1:77:8c:0a:8c:64:39:b3:cb:7a:72:
                    86:83:36:ef:56:3d:ae:5d:ec:bd:aa:6d:88:a4:09:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2B:E6:AE:4F:8D:6C:D7:3A:5D:A4:8E:FF:2E:D9:DF:D5:54:4F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b873dc-98b3-3847-a52b-d33a4a893bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:53:74:bd:dc:1a:01:4a:7e:cb:e8:db:01:2d:96:63:b4:f6:
         ce:20:9a:ed:f3:09:5f:5d:b3:01:b2:66:bf:5d:52:58:8a:da:
         41:46:3c:1a:33:1c:d9:56:40:ca:bc:35:5a:14:b6:3c:09:a1:
         4d:1a:50:e1:68:41:b6:c0:df:b6:23:22:6f:e0:5a:3d:99:cb:
         db:5b:8d:88:f1:d3:01:65:5a:9b:07:b2:28:fd:ef:cb:5c:e1:
         89:63:97:43:5a:8c:7a:8c:87:4b:0f:65:54:94:c5:1f:46:54:
         49:ac:1b:8f:5e:0a:dd:30:20:fd:8c:72:06:0c:64:ca:2d:a6:
         47:bb:da:24:17:2d:21:88:e0:73:e0:6b:20:ee:79:1a:96:a0:
         c4:5a:dc:7a:37:43:77:1d:c4:f3:1e:84:c0:7c:16:19:a1:7d:
         75:dd:0f:c8:64:2b:1f:f8:a7:db:a5:7a:7a:8e:f1:13:6e:73:
         d5:8a:d5:5a:da:9c:04:04:4a:f3:64:e4:30:b7:bb:0d:15:21:
         0f:ee:d8:24:63:b9:38:60:86:68:6f:a6:13:a8:b2:bb:5a:d2:
         cf:fc:e6:12:8d:37:d4:20:e7:1c:63:d2:33:8e:b1:e2:9d:e9:
         44:ca:83:74:4b:49:d4:f9:09:9c:94:e6:91:99:c4:da:55:bc:
         08:fe:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:18 2025 by rpki-client