Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa
File:                     02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa (raw, json)
Hash identifier:          CPm4TGdl3WjRsE9lXYJ1wnB571y11O8Y5z/rIpaP02k=
Subject key identifier:   88:F6:FB:7E:B0:40:4B:C0:09:9C:32:70:23:74:E3:04:D8:2D:62:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC0CC3BE03DA43F6581780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        73.88.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:0c:c3:be:03:da:43:f6:58:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=21eebb76-d147-4613-94bf-252bb110296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:29:fd:96:80:c3:f5:09:e7:f8:d4:6f:cb:10:
                    4f:4c:b4:30:b5:e0:ce:34:e4:9f:0d:ef:ce:86:21:
                    88:e5:ca:8a:97:0e:d4:43:bc:7d:7f:32:2b:6c:83:
                    8d:bb:1c:78:d3:64:66:05:9d:7c:2a:b8:61:c0:cd:
                    75:59:28:7a:62:54:e6:55:12:9c:0d:15:b8:38:d7:
                    01:59:8a:08:22:fc:c1:13:27:9c:ee:c3:93:ec:59:
                    20:60:ba:66:6e:25:dc:5e:52:37:34:fc:0f:c8:83:
                    ce:05:73:65:cd:b1:61:18:f5:4a:e8:de:c6:dc:33:
                    1d:8e:58:a5:82:fa:42:9a:36:9a:94:93:6a:7a:7b:
                    44:4d:4d:97:42:82:28:90:ef:5d:b2:81:27:1e:4c:
                    a9:8f:68:31:4a:5c:db:7a:a5:62:19:e4:85:ad:33:
                    be:25:e7:4b:e0:87:1a:43:21:37:46:3c:42:0d:9d:
                    bc:8c:ca:5d:1a:7d:b0:a4:8b:2c:22:33:d4:ff:c1:
                    75:28:0d:ba:b6:06:c8:14:23:0a:5e:47:4d:2c:2c:
                    60:bb:de:2b:26:2e:3e:d0:93:b6:6d:1a:6a:d1:e6:
                    ae:f9:4a:17:27:5a:2b:0f:7a:cf:72:93:a7:ea:95:
                    bb:87:12:47:08:5d:49:f7:d0:a1:a2:2a:cd:b6:54:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:FB:7E:B0:40:4B:C0:09:9C:32:70:23:74:E3:04:D8:2D:62:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02153fbb-2608-35de-9c9b-ef2c37c95ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:b4:e2:c2:db:bc:fe:ec:40:61:70:88:4b:c5:82:78:fe:28:
         2a:d0:04:60:0b:b7:15:a8:4d:f1:c0:d0:da:6f:5a:78:3c:a3:
         05:28:5b:3e:1a:83:0b:97:da:76:ee:dc:35:b0:88:39:4f:a4:
         e2:b6:98:10:33:de:bc:cf:1b:11:2a:41:a0:1c:65:fb:cc:a5:
         58:97:0c:d1:18:f4:a9:d3:e5:d3:36:c7:70:6c:ab:24:06:1f:
         2b:1e:d7:f7:ae:a4:22:bf:3f:b2:49:15:87:d7:a6:f3:76:4c:
         ef:b1:26:de:20:37:b8:6b:3d:81:3a:66:b9:11:47:9a:3f:e9:
         a6:49:6e:d8:99:8b:d3:01:6c:9b:54:5f:87:04:e2:13:58:f2:
         c0:c6:f1:5f:6c:44:22:95:5c:3a:70:39:3b:93:11:cd:37:fa:
         70:59:7d:9a:79:5d:6a:dd:42:fb:37:0d:1b:f4:99:b9:6d:e6:
         1e:fb:64:6b:45:31:7b:7e:55:a8:5b:87:d4:17:da:3e:3e:4a:
         e1:43:92:b1:7f:50:78:33:80:0f:74:47:6e:01:81:dd:5c:07:
         3e:a2:af:5e:49:cf:10:df:ad:82:3a:a5:34:49:76:f4:93:0e:
         8b:8d:4f:99:43:b9:a5:18:df:93:eb:b3:fd:69:b0:33:f9:74:
         64:2d:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:05:16 2025 by rpki-client