Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/019d38f0-d94f-3ce9-af0b-f3418382c16a.roa
File:                     019d38f0-d94f-3ce9-af0b-f3418382c16a.roa (raw, json)
Hash identifier:          k11kme2wfahem1VEvcsGVJo2UUiRpGK2ybxOgV+H70Y=
Subject key identifier:   F5:00:06:20:4A:D5:D2:7E:AD:B2:47:1C:F6:6D:2C:BE:74:35:DA:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08016DA3B1D4DA600AAE20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/019d38f0-d94f-3ce9-af0b-f3418382c16a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        73.103.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:01:6d:a3:b1:d4:da:60:0a:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=518397e6-ea05-48b7-afa4-1d1a86a0d09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:24:29:6f:80:f0:82:4b:ae:05:b8:b4:ed:
                    82:91:18:7e:74:43:b0:ac:3a:3b:28:ab:1a:a9:91:
                    3b:77:64:75:58:d9:1f:ce:25:98:c0:63:61:28:2c:
                    65:d0:4f:d7:dc:ba:18:c3:bd:da:3f:24:e9:99:25:
                    44:2d:6e:69:29:6b:a5:6a:e9:eb:6f:ca:35:d6:74:
                    f8:22:8a:2a:87:a6:c7:55:d3:c8:c1:f5:90:20:f0:
                    71:ce:bd:0f:1f:fa:f0:94:10:e3:20:e7:85:fc:f6:
                    f3:72:d4:75:b0:60:c1:ad:6b:73:c5:e0:6d:a7:42:
                    3b:4c:4e:9d:8b:fb:8f:d8:06:c2:7d:e5:c8:83:27:
                    d3:9c:ee:aa:bf:b2:7c:d0:6f:26:94:3b:04:b5:e8:
                    cc:1c:0a:5e:d1:c4:60:38:20:d2:44:56:54:d4:f8:
                    39:49:ea:47:25:5a:4c:3b:13:80:51:79:c8:ee:a7:
                    d1:53:d6:ce:29:9d:a6:b4:bd:a9:3c:41:3e:7f:14:
                    34:a6:cc:1b:77:4a:27:91:a5:07:be:75:4a:38:17:
                    b9:dc:02:46:b0:e4:06:c7:41:22:c4:0e:57:a3:7c:
                    da:a4:94:77:4b:2b:08:d2:86:a0:e0:26:e0:98:d9:
                    a2:74:ef:10:4c:4f:6b:ad:9b:43:a0:c9:aa:d5:ce:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:06:20:4A:D5:D2:7E:AD:B2:47:1C:F6:6D:2C:BE:74:35:DA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/019d38f0-d94f-3ce9-af0b-f3418382c16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.103.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:97:bf:c8:d6:bb:71:47:6c:2e:69:1e:f6:75:13:9f:3e:
         fd:b9:90:f1:b4:f4:31:a6:f9:45:06:4b:96:dc:51:de:df:f8:
         02:22:e3:20:2d:0f:dc:33:29:cd:b5:2b:f7:5b:67:e4:62:0e:
         2a:7c:ad:a3:db:f6:52:98:af:7f:9f:56:a2:b2:39:24:70:84:
         d1:d0:76:1c:c5:55:23:82:0a:f3:78:8c:fd:d0:a6:d9:f2:ef:
         81:63:f8:85:be:24:c6:9c:ad:93:96:26:f7:80:3f:51:2a:d7:
         25:7c:57:98:67:b0:e9:f0:10:be:c1:e7:b8:d5:42:9b:03:6b:
         77:a9:3d:29:35:b5:9c:fb:df:5f:c4:85:01:7e:d3:93:28:90:
         ab:da:2c:6b:82:46:c3:e0:74:07:70:82:b5:29:ed:a6:3c:f9:
         35:1e:f6:d2:53:74:b8:1d:ba:c1:08:69:fd:49:38:69:5e:a0:
         f9:ca:48:45:de:ea:30:18:ee:a1:b4:8a:f8:55:0a:af:4d:ec:
         98:58:31:80:f9:68:39:b8:2a:eb:c4:99:5f:0b:99:05:68:d8:
         20:ac:8c:15:5c:29:dd:c7:d8:31:f6:d7:a6:84:4f:f2:e4:b2:
         93:8b:45:3a:c3:72:9e:8a:ba:9b:f1:bd:12:26:33:46:e1:3b:
         a2:fc:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:35:36 2025 by rpki-client