Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa6bf5c-9b93-3642-921c-1269634f6bd1.roa
File:                     aaa6bf5c-9b93-3642-921c-1269634f6bd1.roa (raw, json)
Hash identifier:          wKoQsNB0Gx1N03w1oLfoPh6Zr2zWFH0UTQ3pcDJfMbQ=
Subject key identifier:   CC:04:EF:C5:A6:00:76:00:51:F0:79:2A:AA:0D:FA:91:62:EC:2C:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43260BE7515CBE59D54F1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa6bf5c-9b93-3642-921c-1269634f6bd1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        73.77.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:60:be:75:15:cb:e5:9d:54:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d131edf4-c16a-4a20-9900-ac25e962bc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:ce:d9:0f:38:9c:43:0e:b7:8d:20:7b:44:
                    b3:bb:cc:58:f7:70:ff:af:24:92:bc:18:ab:29:14:
                    6a:d0:cd:52:9b:67:58:cd:43:1b:3e:90:63:fa:f2:
                    47:c9:8c:7e:55:55:03:81:eb:ae:8f:52:88:2b:3e:
                    e2:99:49:04:83:d4:03:9b:27:68:b0:23:b0:99:9b:
                    0e:f5:72:10:50:80:89:19:61:b8:b1:c7:9d:d0:41:
                    0a:1c:10:1a:3b:ed:26:6d:f3:e1:5e:b4:ff:90:b2:
                    7c:61:65:b5:89:6f:84:4e:2f:46:98:e8:83:8a:c7:
                    c8:3e:e2:98:ba:d4:97:ff:2b:9c:55:e5:08:e5:c5:
                    8c:a4:f3:16:35:79:c5:40:79:b2:2f:64:7b:8a:a6:
                    73:31:e6:10:d0:79:7d:8b:c4:04:c9:52:d3:18:57:
                    46:fa:3c:3b:2d:25:bb:be:90:6f:65:4e:b4:a5:e9:
                    a9:70:89:c6:c3:48:f8:ea:4d:5b:79:70:eb:fa:ed:
                    f7:f9:c2:b8:63:21:2e:4d:1b:62:ff:ae:a3:24:b5:
                    3b:89:8a:18:b4:49:f4:1d:e8:47:9e:74:70:c1:41:
                    f0:0d:4a:7b:91:ba:5c:e5:e2:a8:b8:25:b9:70:e6:
                    b4:b0:b4:0e:16:af:92:7f:29:4f:6a:26:d2:5c:bd:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:04:EF:C5:A6:00:76:00:51:F0:79:2A:AA:0D:FA:91:62:EC:2C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa6bf5c-9b93-3642-921c-1269634f6bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:73:f5:6c:a6:7e:2c:3e:e1:1b:ce:d3:0c:ee:c7:cd:71:
         b7:04:6f:23:b1:ae:99:64:d0:d8:e6:04:37:10:e3:e8:60:4e:
         c7:30:2b:fe:22:0e:b2:a6:82:dd:ba:a2:92:43:0f:bc:01:06:
         82:aa:53:b4:ed:2b:7a:d4:15:76:dc:28:cd:d6:5c:d8:20:cc:
         98:0a:e7:7c:11:e9:2f:51:d8:04:d5:7b:89:c9:76:2d:b9:67:
         87:f7:3a:88:13:54:f2:91:0e:0f:a5:e1:cc:43:95:09:09:da:
         30:6a:f9:eb:e7:f3:4e:51:89:1a:24:7b:ec:13:a1:bb:8f:cb:
         26:a0:52:c9:1a:d7:29:a0:4b:0f:5f:93:a7:34:c6:bc:70:b2:
         76:0d:8b:ef:7a:d1:20:7a:98:42:86:d8:97:8b:0e:ce:be:70:
         56:8b:25:ee:ed:3e:9d:60:ea:c4:81:55:70:09:b9:bd:8d:9d:
         ad:47:e4:9b:f5:27:55:a5:4e:ea:a9:c6:28:67:8b:10:6a:0f:
         9a:0d:d2:a7:c6:51:45:1b:fb:16:32:06:b3:a7:6f:03:6d:a7:
         a3:31:d9:4d:a3:bd:ef:0d:36:fe:41:d2:c9:68:93:e6:9d:24:
         13:65:78:07:77:ea:14:ec:92:1e:4d:50:8b:44:36:4b:e4:38:
         31:9f:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:34:18 2025 by rpki-client