Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e435915-4f61-381e-90b5-e7ffdd04b679.roa
File:                     9e435915-4f61-381e-90b5-e7ffdd04b679.roa (raw, json)
Hash identifier:          4SLNP5QAfvHbpDP6EL74MkcOA78HRR1krdj6OI7N+ow=
Subject key identifier:   47:12:40:3B:AE:24:C0:2C:2A:7B:49:F9:C2:9F:3E:28:AC:CC:09:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD70A999507AA142F24540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e435915-4f61-381e-90b5-e7ffdd04b679.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        73.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:70:a9:99:50:7a:a1:42:f2:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=aabccb48-719d-40a4-89e9-238a2ffc8fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:c0:3d:ec:2d:09:7a:5e:bb:97:3b:ed:35:
                    98:53:ec:01:1a:40:7e:c0:7e:05:a7:e8:ae:06:d3:
                    0b:51:fa:af:b6:f2:ce:c6:6c:af:3a:d8:c7:83:0a:
                    4f:fb:e3:d9:93:81:16:dc:7e:7f:1b:f8:17:d9:89:
                    68:55:ef:a7:4a:2c:bc:05:ad:0c:d4:6f:67:3c:21:
                    15:dc:27:a0:b0:43:6a:0f:33:2d:14:f2:dc:0f:10:
                    62:b3:66:c5:91:0f:57:8c:b5:3b:c0:85:2f:1c:8b:
                    83:4d:dc:6e:b4:a9:f2:7a:81:31:57:21:db:74:c9:
                    1c:61:0b:a4:de:a5:81:5e:8c:04:42:10:9b:68:02:
                    14:f6:58:f3:84:4c:78:7d:e8:6d:f8:56:ca:1d:35:
                    62:c7:37:55:03:64:1b:aa:d2:a2:fe:d1:20:06:8c:
                    2f:c9:0a:f3:49:cf:05:c0:02:07:cd:20:06:34:8c:
                    09:6a:34:cd:af:37:6f:ce:4c:f6:95:39:3f:d7:a7:
                    de:37:f4:f7:99:b5:42:e6:5d:30:be:d2:1e:4c:b6:
                    f8:27:82:37:b7:23:b8:7f:88:06:08:ff:c1:23:29:
                    66:a6:09:4c:7f:1a:38:2d:0e:3b:33:03:aa:c5:17:
                    d1:87:95:e2:e4:b5:60:26:cb:5f:b1:0c:4e:36:40:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:12:40:3B:AE:24:C0:2C:2A:7B:49:F9:C2:9F:3E:28:AC:CC:09:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e435915-4f61-381e-90b5-e7ffdd04b679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:29:ff:93:6e:67:a0:ee:dd:73:f9:9a:a8:85:6f:3c:bb:
         7b:d7:97:99:ef:e6:e0:7b:46:95:0d:24:91:65:3c:df:09:7d:
         67:e2:17:a4:d1:eb:af:bf:71:81:4c:54:22:05:a6:01:b5:5a:
         0c:c8:25:fc:b7:8b:5e:69:c9:f3:27:9e:48:57:19:ed:ed:5b:
         94:d3:4d:e0:71:07:9f:f3:65:b6:68:7d:63:13:0f:a2:78:dc:
         45:aa:07:27:48:7c:0a:5e:1a:5e:f3:ba:35:ae:fd:c9:61:6a:
         48:fb:22:ff:d4:2c:98:75:08:5b:fe:9b:0e:20:30:95:a8:5e:
         f8:c5:48:64:b2:47:af:a0:e0:e7:ce:25:47:f6:00:1c:b9:5d:
         9c:b4:72:b1:38:2e:78:92:29:1d:85:1c:d8:16:bc:cf:37:03:
         c8:70:cc:c2:56:ff:8e:f0:54:4c:5f:5e:de:ce:68:a1:78:e7:
         f7:ad:3d:34:79:38:ff:07:5f:34:a5:3e:6e:ae:38:5e:8e:7c:
         b5:3a:92:8b:fe:9e:a9:4d:b4:2e:eb:05:08:7d:d2:f1:96:90:
         16:c1:d1:20:e7:84:9d:fe:13:21:7a:6c:9c:31:43:8f:74:e9:
         bb:0b:57:c0:91:3f:d9:24:5d:6b:45:49:bc:de:c0:46:e4:00:
         88:12:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:39:38 2025 by rpki-client