Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4dd0c1d-0a5d-3b9c-96d8-f15454a8313b.roa
File:                     c4dd0c1d-0a5d-3b9c-96d8-f15454a8313b.roa (raw, json)
Hash identifier:          Byp5UH023AeHgqem3giA5yaUKr5iy2W/2T2iXB+XB1Y=
Subject key identifier:   FF:47:B4:58:9B:31:23:35:C1:C9:67:06:BB:5B:C3:42:DA:7F:EB:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA495CAB789E7F628501000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4dd0c1d-0a5d-3b9c-96d8-f15454a8313b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        73.121.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:95:ca:b7:89:e7:f6:28:50:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2c8f3e1a-b543-45de-9910-576255747abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:e3:0f:18:2b:c1:b5:41:9d:53:c1:7e:0e:
                    2e:58:7c:c5:6b:d3:dd:da:e6:0b:28:16:c3:01:e8:
                    c9:f9:90:75:20:3a:41:a2:83:30:20:06:36:23:98:
                    23:16:e5:66:99:a8:77:bb:4c:4f:ee:53:51:32:0d:
                    44:bd:76:31:46:ce:04:a1:5e:bc:c3:c2:80:4b:d4:
                    d6:91:86:6a:a4:95:45:35:c9:88:23:3f:fa:24:54:
                    c0:fd:93:f7:43:b9:cb:41:c6:8a:aa:50:8f:b1:74:
                    f0:aa:e4:1f:65:a5:b8:f3:2a:7f:b4:15:6c:7f:6f:
                    f0:e7:7b:59:57:95:e4:3c:0d:a4:f0:48:5f:a1:64:
                    0c:bb:2c:85:71:09:d6:c0:ad:4b:c6:a2:f9:d8:3b:
                    d5:63:fe:37:ce:86:95:a9:fc:58:0c:f4:fa:13:0e:
                    6e:c4:b6:7a:e1:c5:ac:df:6e:6a:61:8a:26:ff:2e:
                    c6:69:e9:9a:01:7b:d6:f9:58:87:f9:d7:bc:5d:bd:
                    dc:78:f5:36:7d:6c:c1:ce:a5:6b:ad:1a:c6:00:c8:
                    10:e3:94:4a:b8:7d:8c:6d:7b:92:66:8a:ab:a8:5f:
                    03:6d:fc:05:51:e6:46:89:47:b3:c8:b6:ea:87:8c:
                    ab:17:fc:14:c4:34:74:c6:c9:2a:1e:85:7e:32:16:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:B4:58:9B:31:23:35:C1:C9:67:06:BB:5B:C3:42:DA:7F:EB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4dd0c1d-0a5d-3b9c-96d8-f15454a8313b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.121.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:08:4f:5d:1a:d4:60:e3:a9:34:1c:c5:1a:0d:15:99:f3:
         53:95:21:49:f9:48:31:6a:99:28:d7:0c:a1:1d:c2:31:fc:90:
         cb:44:d2:d8:c4:af:d1:0b:ed:78:be:93:2b:ac:de:ac:90:b4:
         81:98:6c:f2:cc:4b:5c:a5:34:fe:51:f8:6e:70:b2:e4:e4:44:
         48:24:47:6a:57:55:e1:1c:3d:0a:51:a1:13:aa:f1:9d:45:2b:
         ba:74:08:f6:7c:5f:20:5d:f6:c0:c6:6c:a4:4d:22:4d:1f:c8:
         8b:5b:1d:a4:c4:03:70:1d:a7:63:41:61:8e:5f:35:37:79:27:
         2e:48:a0:e7:a5:9c:20:a1:b4:9b:e2:2e:22:b0:d8:74:36:2f:
         51:03:3a:02:69:41:cc:af:2b:88:de:2a:63:dd:2c:bc:86:ec:
         f4:d5:cb:7a:f2:60:76:d2:f1:95:95:5e:97:0c:d3:be:87:d3:
         b1:6e:21:31:90:87:4b:e3:c6:ec:62:77:36:f2:e5:fb:20:49:
         34:39:08:6f:09:87:8c:9a:a8:4d:dc:b7:af:68:ee:15:a9:87:
         0f:0b:bd:cf:1b:d2:de:ba:25:c8:4f:39:77:75:11:6d:6c:fa:
         b7:93:1f:ec:09:f3:c7:0e:04:63:05:92:f0:7b:b8:7e:d7:ae:
         c7:03:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:06 2025 by rpki-client