Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651657b1-6376-3457-8836-09a70e7ccf44.roa
File:                     651657b1-6376-3457-8836-09a70e7ccf44.roa (raw, json)
Hash identifier:          qz06iI5sdIhLtv9rYZ9Gr5xptqVArUdC9IaOYEDM0+E=
Subject key identifier:   D2:6C:CF:A4:BB:AB:17:52:E7:53:8D:3D:66:0C:BC:6A:72:8A:A4:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08907550A5B7E5DA7C0DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651657b1-6376-3457-8836-09a70e7ccf44.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        73.158.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:90:75:50:a5:b7:e5:da:7c:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a49375e5-9c27-4d6c-add1-bb5a2d62605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:cd:a7:c2:ce:10:15:48:26:66:f9:c3:de:
                    43:18:c6:49:6c:69:2e:76:91:a9:68:3d:c8:9b:04:
                    01:09:89:a3:3c:82:7c:6a:db:4c:03:e2:9b:bf:5b:
                    86:82:66:21:13:b4:2b:ea:30:39:80:64:ab:75:fd:
                    ed:a9:78:5a:c7:53:fb:a9:9c:28:1e:3a:f0:e3:89:
                    22:99:ed:44:eb:20:d6:a4:20:bb:86:ed:5f:48:32:
                    25:53:87:4b:46:b2:bb:b3:95:cd:94:29:3c:18:84:
                    8e:36:da:bf:bc:ec:66:3a:10:c1:e8:3c:5e:59:be:
                    63:7a:ce:6b:86:ba:64:1f:56:2e:c2:ba:b5:e1:a8:
                    8d:99:c8:cd:1e:c0:55:99:e0:22:b2:98:92:fb:2b:
                    47:13:4d:c5:47:15:92:b8:da:a4:f7:71:b0:7e:c3:
                    fd:d1:b4:aa:2d:25:a6:c7:77:22:6d:30:d1:cc:d5:
                    99:d3:a7:b6:d1:f2:d5:28:55:f3:87:ca:92:c7:8c:
                    c1:00:35:82:66:68:2b:d7:7a:c5:cf:71:b5:cd:72:
                    8c:c0:c0:4c:92:84:58:c0:8a:d3:1c:e1:a3:11:50:
                    f3:2d:fd:5d:45:38:5b:a3:7a:87:bb:48:49:7e:95:
                    f1:a7:f9:0c:f3:3d:dc:f0:38:e2:49:0d:53:94:d5:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:CF:A4:BB:AB:17:52:E7:53:8D:3D:66:0C:BC:6A:72:8A:A4:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651657b1-6376-3457-8836-09a70e7ccf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:03:6c:07:bc:3e:69:36:ad:56:d5:25:77:eb:06:c4:33:
         c8:75:c0:8d:f8:4f:53:15:9f:92:90:74:e0:6f:c9:57:8d:25:
         3a:ab:a4:cc:c7:f8:71:f4:91:e9:a7:3a:1e:31:b8:25:c5:a5:
         08:34:b8:53:b1:69:2d:cd:1c:69:1b:27:07:54:1f:6e:3c:ad:
         4e:3a:4f:34:af:2e:9e:d7:d8:1a:e9:16:83:e6:67:a0:bc:fa:
         f4:98:f2:43:e6:83:d5:ca:50:7a:e0:f6:2a:d7:0d:2f:99:fb:
         7d:45:7a:5b:43:7b:cc:2e:70:8b:e0:56:b8:dc:65:b4:22:ee:
         e3:b9:42:c1:0e:d9:0c:58:27:09:e5:1e:04:42:b7:ba:45:13:
         12:b4:af:55:d2:49:48:4b:42:e0:62:dc:c7:78:64:41:02:48:
         7c:8c:d3:fd:0d:97:ec:0f:f5:9e:56:93:33:ec:c0:59:92:6e:
         f7:c7:79:12:63:30:18:71:47:8a:55:df:43:48:d8:09:e4:e9:
         c6:67:29:04:a0:1d:2b:22:a4:97:cb:70:c3:4b:bd:34:fc:2a:
         0e:7d:9b:15:77:23:b7:54:3a:16:c4:1a:b4:13:2f:72:b9:83:
         07:c2:c2:b1:51:d3:dc:37:99:7e:a9:5e:a7:17:b4:51:20:d6:
         fb:2c:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:05:32 2025 by rpki-client