Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f77e9c-0204-3908-ac46-84a43fc28414.roa
File:                     d3f77e9c-0204-3908-ac46-84a43fc28414.roa (raw, json)
Hash identifier:          7p5/4EFKHSu7XuqfyvJjbMoNLlcKYV3O7Vit50wJbo8=
Subject key identifier:   46:6C:10:86:1D:52:70:3C:74:1B:1F:85:88:59:5C:36:4F:0C:C5:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05A4DE84CCCD29DD7F1980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f77e9c-0204-3908-ac46-84a43fc28414.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        73.10.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:a4:de:84:cc:cd:29:dd:7f:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=592e7ddd-c3c3-4408-8a5e-8d4166ae6e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:0d:d3:9f:49:d5:c4:9c:65:57:96:3f:0e:
                    93:83:d7:5f:03:e1:92:4a:51:5f:28:bb:25:96:aa:
                    12:9d:c8:ca:92:02:28:68:51:ef:22:bd:90:85:c3:
                    87:34:32:ec:3d:cf:eb:6a:00:32:e6:3c:b8:64:01:
                    bc:45:af:96:40:7e:4c:96:85:4a:44:b9:23:55:f1:
                    f9:cb:0a:a9:4e:b1:9d:ac:38:2f:fe:15:12:f7:6b:
                    e5:10:9a:e8:18:68:46:7f:69:ed:76:75:0d:9c:e9:
                    8b:c3:d0:3e:87:c1:be:7f:e1:be:e8:13:43:1f:f4:
                    cf:43:fc:91:ea:52:81:44:99:57:c1:1f:21:4c:f5:
                    b7:05:3b:8a:99:2d:a6:bf:31:89:e0:fa:e5:5f:a9:
                    92:c6:94:10:18:ba:a6:0c:68:9a:65:83:de:68:cf:
                    83:6b:b0:48:c2:59:ce:99:4a:b7:4b:26:37:f3:b1:
                    13:32:8c:37:ab:00:7f:4d:8b:64:1a:4b:44:84:9d:
                    04:8e:3b:fb:8d:b5:3a:16:e0:2c:96:b7:ee:1a:fe:
                    c4:66:2d:40:01:fa:51:d4:87:44:df:5e:a1:9c:ba:
                    bd:f8:0c:cd:6a:8a:50:e1:fe:99:1c:9b:61:73:2e:
                    e6:98:4a:71:f2:18:c3:94:e7:e0:b7:73:50:17:3e:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:10:86:1D:52:70:3C:74:1B:1F:85:88:59:5C:36:4F:0C:C5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3f77e9c-0204-3908-ac46-84a43fc28414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:fd:52:56:3d:82:d4:36:49:a6:df:8c:8a:32:a8:1b:6e:
         8d:41:80:c8:37:62:c4:3c:a5:40:84:8a:45:f5:f5:e0:4c:d0:
         fb:71:f5:33:5c:d5:3b:2d:09:5e:c8:44:7c:48:a9:42:f1:7a:
         91:ec:d5:a2:ff:fd:31:8e:36:d6:f9:09:be:fb:13:86:d9:37:
         ec:ad:82:ae:41:ae:a0:46:2a:e2:36:c5:4e:9f:70:7f:55:0a:
         02:9c:e9:9c:42:98:a1:c5:36:75:eb:aa:db:51:6a:c3:78:7f:
         4b:fa:b5:56:25:d2:c7:03:5c:da:21:99:f2:0a:54:75:6d:1c:
         f8:32:c4:08:45:8f:12:0d:ec:0a:59:f8:90:23:06:b1:44:12:
         79:f0:60:9b:9e:dc:97:5d:ee:86:00:11:7d:72:b4:17:9c:75:
         06:ba:3d:d2:21:a9:7e:c7:5b:f9:c0:85:b7:1c:58:bb:b3:8d:
         c5:65:c8:d4:77:fd:da:f5:9f:cd:6f:7f:89:f6:6f:70:1a:36:
         ea:e1:10:3d:40:57:52:d2:92:b4:10:b9:46:99:5d:25:08:b2:
         df:cb:04:ab:03:ef:71:75:5d:03:cf:aa:1c:9f:ae:f1:bf:e5:
         74:e3:4e:1a:72:b4:74:cc:bf:ce:ba:d0:ea:ee:44:e7:42:71:
         6c:3b:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:35:17 2025 by rpki-client