Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9328dea-d6ee-3f7a-8e07-271a4aad2032.roa
File:                     f9328dea-d6ee-3f7a-8e07-271a4aad2032.roa (raw, json)
Hash identifier:          YMRiMXNoviAcTbRGJgQRMtDOweTtuGF6MZGM/kgjjgI=
Subject key identifier:   5F:43:7D:BB:59:05:63:78:4B:F9:C5:8E:F3:83:A7:D1:43:0C:C4:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FE4F8BDA8C6F294588880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9328dea-d6ee-3f7a-8e07-271a4aad2032.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        73.67.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:e4:f8:bd:a8:c6:f2:94:58:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=63920f87-7d88-4517-939c-51721490d757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:5a:b2:04:fb:82:65:c1:a7:23:df:ec:28:
                    2d:df:c3:1c:f3:29:a3:91:97:bb:0b:48:ac:de:bb:
                    d3:ab:4a:8c:89:6d:1f:08:e4:4d:a5:d1:40:9d:d6:
                    fc:ab:25:c1:2b:f7:0f:d4:10:c0:29:9f:e1:fe:bf:
                    de:3a:02:f4:86:78:cf:44:9f:4e:65:41:6f:6b:90:
                    dc:2f:bf:d9:72:d7:19:87:3f:1a:d9:c1:4b:73:1f:
                    81:03:68:89:d0:59:ac:33:65:37:e1:f1:22:22:aa:
                    60:ab:11:76:06:2c:00:52:26:4d:10:eb:cc:90:b9:
                    0d:34:95:24:4d:fe:6d:d0:a5:f4:5c:27:20:85:01:
                    a7:a7:8c:10:c2:58:fe:c8:4a:50:d6:f3:1b:38:b4:
                    16:ca:01:ba:ee:03:99:1d:4b:f6:06:48:93:8f:aa:
                    b7:25:ed:d6:c2:9a:fe:55:ee:72:96:03:25:51:95:
                    82:12:8b:27:e6:9a:23:2e:ce:a4:9e:a9:b5:f0:67:
                    c2:b5:89:0e:14:9b:36:e6:a6:24:96:fd:70:d6:5c:
                    08:92:a1:06:20:dc:e7:2c:96:a6:11:4d:e8:2b:ab:
                    c9:7a:77:75:42:ca:04:0a:07:3f:f3:33:3b:f0:e5:
                    29:b6:89:a3:e4:d8:f1:31:c4:73:94:25:df:4c:47:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:7D:BB:59:05:63:78:4B:F9:C5:8E:F3:83:A7:D1:43:0C:C4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9328dea-d6ee-3f7a-8e07-271a4aad2032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:90:55:ec:b7:98:dd:a9:ae:9a:12:0f:5e:67:ac:78:23:e9:
         48:8a:32:96:f0:ee:f7:ff:09:dc:08:f6:b3:bc:20:7e:82:1c:
         95:a2:59:2c:05:60:36:76:5b:f3:07:8e:d0:0c:2e:b9:e1:f0:
         e8:1f:ca:fb:a4:9c:38:a8:58:26:cb:2b:45:71:a4:bb:07:89:
         01:ae:60:69:6f:cc:12:23:52:e5:1d:51:48:18:8b:c8:73:f5:
         1a:36:0b:22:fa:b3:72:cb:e9:da:d0:87:86:5f:83:e2:65:a0:
         04:8b:43:98:4b:9e:68:d8:f2:0d:8e:6e:50:c4:e7:6b:a8:fd:
         e5:9d:1e:de:56:f4:0a:2b:f5:d4:63:83:20:c2:c0:0d:f5:44:
         e3:a9:41:55:3f:7d:fb:4d:c9:20:1d:d0:7c:23:93:ab:b8:37:
         3a:e1:e8:4d:3d:66:8b:38:76:6a:d3:39:95:c8:e0:33:e3:f5:
         b8:3b:97:e3:30:59:ed:d7:49:c5:f3:25:9e:40:b6:be:31:18:
         4a:d5:fc:21:48:01:69:e7:5d:45:17:77:f6:2c:87:46:9b:91:
         c6:d5:65:18:b2:0f:6d:e4:e8:4f:e4:79:c3:3c:47:14:45:39:
         dc:10:f2:56:cd:b4:16:69:30:18:64:f1:dd:92:11:d5:05:e0:
         d2:4c:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:25 2025 by rpki-client