Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9506278e-78b3-3a7b-8797-0ec3be9e8dca.roa
File:                     9506278e-78b3-3a7b-8797-0ec3be9e8dca.roa (raw, json)
Hash identifier:          KpCPVCvA+BTgJ6jrkIlny+ximuoyH/aggxQJquuN7lw=
Subject key identifier:   0C:B6:86:47:0A:8F:AF:F7:EB:47:C7:58:3F:F3:39:51:C1:16:C8:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD217C706D66F7E056D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9506278e-78b3-3a7b-8797-0ec3be9e8dca.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33652
IP address blocks:        73.203.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:21:7c:70:6d:66:f7:e0:56:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1f6488c2-25a0-4c4b-a106-97c80e857e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:d5:6c:7c:d4:87:17:48:b4:c7:57:7f:62:
                    e5:37:f9:8c:3d:ed:13:10:7d:b2:60:ab:41:83:25:
                    a7:4c:ed:c5:63:fa:eb:ee:da:0f:0c:a9:01:0b:74:
                    a4:b6:da:7e:b3:16:a1:fb:b8:44:fe:da:c6:bd:44:
                    98:5a:ae:3a:b7:84:93:6f:64:ae:f3:ff:e8:5a:92:
                    8f:2d:73:98:ad:a8:17:d5:a3:86:cd:00:22:2a:55:
                    0a:d3:f6:80:70:0a:87:ea:de:10:ee:58:c1:8f:5d:
                    8f:96:24:30:5b:1f:85:89:da:b4:25:f1:b4:e7:99:
                    f5:d4:ab:90:59:1f:1b:80:20:29:bd:65:1f:8e:04:
                    ac:c8:e9:82:49:03:da:b1:1e:f5:83:5e:ee:e0:b2:
                    27:52:a3:ee:4f:5b:2d:f1:ac:2e:e0:78:8d:90:50:
                    95:21:2c:ef:fd:eb:14:6c:b0:12:52:bb:ed:f6:8c:
                    22:07:51:89:75:72:7f:d0:cc:29:86:a9:dd:60:ce:
                    6b:b4:1c:cf:35:66:43:e2:9b:97:bd:94:25:79:b5:
                    89:ea:c6:cd:15:c6:61:ae:43:76:58:38:76:d2:ee:
                    b0:37:29:ef:e7:76:cb:9f:2d:8d:d2:42:05:57:4f:
                    03:7e:d4:69:f0:00:84:e1:3c:10:d4:d8:45:dc:07:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:86:47:0A:8F:AF:F7:EB:47:C7:58:3F:F3:39:51:C1:16:C8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9506278e-78b3-3a7b-8797-0ec3be9e8dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:69:11:02:da:b5:11:23:03:1f:8b:51:ef:3d:68:0c:d0:a2:
         15:09:6e:ee:fe:e3:07:19:a1:8a:5f:c3:3b:e1:7c:28:3b:0d:
         ce:43:aa:39:53:a6:40:2a:07:7d:48:79:9c:e2:19:1c:25:20:
         c0:31:30:c0:c5:f4:02:db:6e:51:a0:dd:5f:0c:7e:7c:f3:92:
         5c:7b:90:d2:28:ac:7a:ed:c7:b2:2b:16:03:9d:ab:22:28:70:
         70:9d:98:c2:67:20:91:69:71:3a:ff:51:d6:e5:c8:9d:96:4c:
         1e:ff:8b:8e:7f:43:c1:fe:c5:40:58:23:d5:c7:dc:aa:c0:cf:
         9c:57:62:c4:e1:df:78:de:4d:02:85:cf:34:f3:29:dc:fd:0c:
         af:47:76:86:61:49:76:51:90:8d:da:62:40:2c:9a:15:80:51:
         15:59:84:a3:84:e6:29:08:b0:c7:ed:a7:73:c5:e8:80:3f:45:
         08:ae:94:75:53:af:3f:22:6a:54:bb:ed:f7:6a:f1:1a:ee:bd:
         37:80:60:11:c1:cb:d3:84:68:8c:21:4e:12:02:47:15:54:cd:
         cc:c6:9b:48:38:53:af:06:a9:f9:89:fc:b5:d1:89:ab:a9:e6:
         07:e7:96:22:89:7b:fc:9c:5c:10:a7:48:91:9f:82:31:0a:09:
         5e:c4:fe:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SF8cG1m9+BW0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MWY2NDg4YzItMjVhMC00YzRiLWExMDYtOTdjODBlODU3ZTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeHVbHzUhxdItMdXf2LlN/mMPe0TEH2yYKtB
gyWnTO3FY/rr7toPDKkBC3Skttp+sxah+7hE/trGvUSYWq46t4STb2Su8//oWpKP
LXOYragX1aOGzQAiKlUK0/aAcAqH6t4Q7ljBj12PliQwWx+Fidq0JfG055n11KuQ
WR8bgCApvWUfjgSsyOmCSQPasR71g17u4LInUqPuT1st8awu4HiNkFCVISzv/esU
bLASUrvt9owiB1GJdXJ/0MwphqndYM5rtBzPNWZD4puXvZQlebWJ6sbNFcZhrkN2
WDh20u6wNynv53bLny2N0kIFV08DftRp8ACE4TwQ1NhF3AcWSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAy2hkcKj6/360fHWD/zOVHBFshpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUwNjI3OGUtNzhiMy0z
YTdiLTg3OTctMGVjM2JlOWU4ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHScsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINpEQLatREjAx+LUe89aAzQohUJbu7+4wcZoYpfwzvhfCg7Dc5DqjlT
pkAqB31IeZziGRwlIMAxMMDF9ALbblGg3V8Mfnzzklx7kNIorHrtx7IrFgOdqyIo
cHCdmMJnIJFpcTr/UdblyJ2WTB7/i45/Q8H+xUBYI9XH3KrAz5xXYsTh33jeTQKF
zzTzKdz9DK9HdoZhSXZRkI3aYkAsmhWAURVZhKOE5ikIsMftp3PF6IA/RQiulHVT
rz8ialS77fdq8RruvTeAYBHBy9OEaIwhThICRxVUzczGm0g4U68GqfmJ/LXRiaup
5gfnliKJe/ycXBCnSJGfgjEKCV7E/rU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:03:04 2025 by rpki-client