Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70c8244f-b699-3c91-ab1d-43b5234fc525.roa
File:                     70c8244f-b699-3c91-ab1d-43b5234fc525.roa (raw, json)
Hash identifier:          HpfZwPigAUsOX9du6iu6Tgz1XhqbFlU3csyS6SkAT3k=
Subject key identifier:   80:97:51:59:54:78:D3:EB:FF:FC:27:A5:D0:B2:66:7D:FB:CD:81:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCB9198B79363D679A2870
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70c8244f-b699-3c91-ab1d-43b5234fc525.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        73.108.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:b9:19:8b:79:36:3d:67:9a:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=692d8451-7a7d-45ef-81f7-30686a814268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:d7:f4:c2:ad:3f:93:e8:6d:9a:c8:d1:67:
                    9e:17:9e:38:ce:18:59:43:66:2c:74:4f:19:ce:d7:
                    13:40:0b:d7:5f:df:bc:1f:ad:25:ff:02:c2:55:d3:
                    55:fe:f3:ab:40:b1:f2:66:ba:bf:99:40:68:96:64:
                    b7:3b:60:30:92:e7:cd:b1:87:68:9a:0a:50:c4:27:
                    95:eb:85:bb:f4:92:4e:9a:de:fe:8e:cf:68:40:f2:
                    39:41:cc:f6:97:fe:12:3b:c9:a7:d7:ba:28:fc:43:
                    2b:9e:80:c8:e0:78:57:a6:cf:15:a1:43:3e:fc:c7:
                    4a:8c:89:5d:ae:b0:29:a9:83:1c:7b:28:6d:65:ad:
                    82:8f:ed:85:a3:41:bb:f1:78:94:5b:55:85:aa:9f:
                    1f:48:cd:f1:ff:84:9b:c7:c3:17:6c:d7:bc:39:e8:
                    93:b2:82:74:25:0d:c4:fb:4c:e2:a6:87:45:35:d0:
                    78:f1:a6:52:2f:74:57:02:1e:21:9a:5d:db:6b:30:
                    aa:d2:fc:08:c5:33:74:8e:e5:34:df:d3:05:b5:7d:
                    1f:e0:06:b9:5a:48:93:bf:55:06:b6:c3:2c:8f:3c:
                    a3:f4:c2:9f:91:d1:ac:60:73:42:89:b9:80:e6:60:
                    00:ae:ec:d6:43:ae:0e:67:c0:f1:43:b2:8b:28:07:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:51:59:54:78:D3:EB:FF:FC:27:A5:D0:B2:66:7D:FB:CD:81:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70c8244f-b699-3c91-ab1d-43b5234fc525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.108.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fc:1c:3c:36:b1:13:bd:77:d1:24:76:89:c7:79:87:47:2d:
         5a:68:82:a3:17:e2:df:22:cb:32:b8:3f:dd:47:25:7e:c6:f4:
         ec:c7:79:d8:24:2e:1d:a3:f1:01:77:6c:03:0c:f5:a6:8c:4a:
         af:45:3d:f4:58:67:83:34:1e:12:ba:1d:e2:12:84:80:72:fa:
         b6:5e:54:9b:d4:49:72:05:a4:21:2f:05:1e:03:4b:48:9f:84:
         55:81:64:c1:1f:ba:72:70:c4:05:65:4e:7d:fd:72:ad:1d:7d:
         8e:2b:9d:c9:91:72:74:ed:8d:15:a1:dc:d6:71:18:98:7e:f9:
         23:85:cd:9b:e6:f5:ad:c9:53:58:91:b2:fe:ce:53:e1:3f:36:
         94:25:18:89:4f:f8:d7:e2:9a:16:92:bb:f5:b9:65:32:48:6d:
         9a:83:09:c6:2f:88:ae:68:60:08:64:3c:4d:fa:67:0d:86:95:
         46:d0:b2:62:f2:eb:30:c1:6b:de:06:7e:ba:86:fe:00:0a:9d:
         15:89:a6:9e:ee:1e:3d:73:ab:e9:98:30:2a:33:f2:f9:d3:12:
         ad:62:6a:ef:dd:54:5c:90:4b:26:ab:cd:7c:0e:db:95:88:94:
         9a:f2:c5:0c:c4:97:ea:7d:58:ad:72:8a:92:52:a3:66:f0:0c:
         c1:56:61:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LkZi3k2PWeaKHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NjkyZDg0NTEtN2E3ZC00NWVmLTgxZjctMzA2ODZhODE0MjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lTX9MKtP5PobZrI0WeeF544zhhZQ2YsdE8Z
ztcTQAvXX9+8H60l/wLCVdNV/vOrQLHyZrq/mUBolmS3O2AwkufNsYdomgpQxCeV
64W79JJOmt7+js9oQPI5Qcz2l/4SO8mn17oo/EMrnoDI4HhXps8VoUM+/MdKjIld
rrApqYMceyhtZa2Cj+2Fo0G78XiUW1WFqp8fSM3x/4Sbx8MXbNe8OeiTsoJ0JQ3E
+0zipodFNdB48aZSL3RXAh4hml3bazCq0vwIxTN0juU039MFtX0f4Aa5WkiTv1UG
tsMsjzyj9MKfkdGsYHNCibmA5mAAruzWQ64OZ8DxQ7KLKAcS5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICXUVlUeNPr//wnpdCyZn37zYHIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBjODI0NGYtYjY5OS0z
YzkxLWFiMWQtNDNiNTIzNGZjNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWwcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb8HDw2sRO9d9EkdonHeYdHLVpogqMX4t8iyzK4P91HJX7G9OzHedgk
Lh2j8QF3bAMM9aaMSq9FPfRYZ4M0HhK6HeIShIBy+rZeVJvUSXIFpCEvBR4DS0if
hFWBZMEfunJwxAVlTn39cq0dfY4rncmRcnTtjRWh3NZxGJh++SOFzZvm9a3JU1iR
sv7OU+E/NpQlGIlP+NfimhaSu/W5ZTJIbZqDCcYviK5oYAhkPE36Zw2GlUbQsmLy
6zDBa94GfrqG/gAKnRWJpp7uHj1zq+mYMCoz8vnTEq1iau/dVFyQSyarzXwO25WI
lJryxQzEl+p9WK1yipJSo2bwDMFWYYk=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:03:11 2025 by rpki-client