Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5a50da-d15b-39a7-90a3-eb1ad28e61df.roa
File:                     8c5a50da-d15b-39a7-90a3-eb1ad28e61df.roa (raw, json)
Hash identifier:          1UVGoXHlZQmnbcJceKL9l18pRV06sbVJbntbQm1ndmw=
Subject key identifier:   02:CB:22:7E:69:6F:42:D7:9E:52:33:48:6A:93:D0:85:C6:DF:F4:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75E7FC332B644E7552FA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5a50da-d15b-39a7-90a3-eb1ad28e61df.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     33659
IP address blocks:        73.33.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:e7:fc:33:2b:64:4e:75:52:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=e991ef7a-c84e-4080-b73b-81a394806b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:65:e7:c5:aa:5b:76:cc:32:0c:46:c6:12:
                    2a:7e:77:45:9b:e1:9e:8c:19:db:98:5f:75:25:35:
                    4e:3d:a2:6f:32:9c:9f:ba:fc:12:65:bd:c6:1b:66:
                    46:bc:6a:5d:dc:10:a5:d0:59:38:bd:2d:55:50:6f:
                    ab:58:dc:51:76:f1:2b:c2:37:81:03:0a:84:cb:ee:
                    3f:eb:6d:c3:bd:b9:46:13:fe:c3:1d:b7:fe:63:4a:
                    13:fd:7e:48:92:1e:fe:75:e0:d9:f9:8b:68:fd:91:
                    cf:60:40:a7:9e:2d:6e:18:b9:41:95:ea:d2:f1:1d:
                    1d:e6:9a:1d:d9:bb:24:67:50:0f:89:e8:e0:4e:6f:
                    84:63:c7:05:8e:db:a3:6b:ad:cb:d4:d6:fb:61:30:
                    d9:7b:f6:49:70:f9:7d:1e:f0:59:d0:ee:f5:71:26:
                    b5:49:01:0c:2f:d2:85:bb:f1:e6:33:e7:ba:b8:3c:
                    fd:4c:21:64:56:bf:c3:4f:2c:07:95:08:f0:7e:db:
                    2f:f3:93:5b:30:3b:ba:81:3f:eb:87:71:63:b4:b7:
                    44:88:52:b4:06:a9:5b:22:68:5d:35:02:64:64:38:
                    6a:71:2b:fa:85:81:bc:95:80:bf:3e:77:67:2e:56:
                    de:1b:32:f2:fd:00:9c:07:e6:2b:30:c7:4f:b3:86:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:22:7E:69:6F:42:D7:9E:52:33:48:6A:93:D0:85:C6:DF:F4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5a50da-d15b-39a7-90a3-eb1ad28e61df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.33.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:c6:c4:6d:3f:47:d6:52:d1:77:5b:99:2a:8e:b9:86:a4:
         a6:03:ee:fd:4b:5f:1a:d7:3e:93:58:1d:e2:a2:92:07:af:bb:
         4a:02:e9:13:93:2b:49:fb:2e:ba:96:90:de:22:dd:fb:2f:cb:
         ea:61:ea:c9:16:15:cc:5a:93:a2:a3:75:0e:19:dc:f6:0b:f3:
         c9:18:34:87:52:4d:56:d9:f5:70:6f:72:8f:77:df:60:66:8a:
         1c:3b:3e:ec:aa:32:03:5e:46:0e:01:32:d5:99:bc:14:db:81:
         f4:31:e8:73:64:46:28:7d:59:35:9c:63:3f:e1:54:e5:13:54:
         1f:2e:ea:55:81:84:b4:b6:18:ac:00:fb:f6:c8:45:2f:f8:1d:
         88:d7:fe:ec:98:39:c5:6b:f1:9b:86:e8:5b:f5:e7:e1:22:7b:
         89:a0:6c:c4:08:fd:24:aa:bb:43:a6:f7:a1:e8:15:90:c1:41:
         50:ae:d3:1a:d9:2b:91:9f:81:f9:29:73:ec:9c:5f:7e:09:fa:
         f7:b8:98:b4:d5:32:5f:82:f8:34:d2:b8:a5:bf:ec:57:67:48:
         95:cf:d9:f0:be:f7:5d:7e:1a:cb:b0:21:2e:a9:b8:80:75:7a:
         87:b8:55:c5:b2:13:95:55:0b:25:9b:bc:11:cf:66:f2:12:69:
         1d:d9:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:35:28 2025 by rpki-client