Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfafbce7-bb94-3488-a484-224172d5ea99.roa
File:                     cfafbce7-bb94-3488-a484-224172d5ea99.roa (raw, json)
Hash identifier:          PSwOrln015U7AL5HoI97OxcUqTlzRGB7TKQEdaDRUs0=
Subject key identifier:   7F:C2:9E:CF:7C:E8:CB:EB:1A:CA:A2:D3:DE:06:70:91:19:EC:57:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB53E31505552596BAF280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfafbce7-bb94-3488-a484-224172d5ea99.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        73.113.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:53:e3:15:05:55:25:96:ba:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1e23ee7e-5f5b-43ab-8664-17778296cc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:10:e8:6a:f3:df:ed:06:eb:87:d0:e8:69:
                    7d:3d:75:d4:c4:94:53:86:f7:2b:5f:9a:44:d3:4d:
                    6f:fb:20:a3:1b:19:1e:d2:4a:4a:09:cd:d4:5a:53:
                    cc:39:36:62:86:2b:ea:6b:60:5c:cb:46:15:67:f3:
                    37:6d:23:6e:0f:1d:5a:4c:85:24:7f:ca:f9:5f:41:
                    b2:21:37:28:fc:1d:ba:2f:e2:d9:c1:ac:f3:31:79:
                    54:ca:fb:16:cc:db:9f:07:a2:86:ca:c8:eb:2f:80:
                    a3:01:47:27:5d:3e:ca:02:c6:c3:1d:bf:6b:e5:4f:
                    da:a6:ac:cd:42:c9:4e:e1:df:1e:91:80:01:2f:43:
                    82:f3:04:83:5b:13:2e:d1:29:c9:21:5b:1d:f4:a9:
                    f5:1d:c5:2c:38:2e:33:7e:01:a6:bd:2a:44:0b:92:
                    2f:62:81:5a:0b:9b:9f:83:6e:ae:64:b4:3f:b8:06:
                    c7:56:82:d0:9d:b7:2d:dd:77:d6:75:43:98:08:38:
                    09:9c:ce:eb:d4:2d:5f:25:83:6c:63:ca:f1:9b:a7:
                    45:c1:99:a5:10:66:cd:bb:0d:ef:c0:16:ec:83:7a:
                    ee:db:c6:1e:33:0b:d4:a4:14:9d:a4:a3:f0:b6:f9:
                    f9:a0:25:ba:f8:8b:53:5b:64:8b:f8:65:4f:a2:1e:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:9E:CF:7C:E8:CB:EB:1A:CA:A2:D3:DE:06:70:91:19:EC:57:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfafbce7-bb94-3488-a484-224172d5ea99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.113.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:fd:37:14:99:c9:21:1f:04:cd:9b:e9:c9:df:c9:02:a1:
         49:eb:54:50:ef:48:c2:d0:f6:59:53:ed:5f:02:55:ef:2f:f7:
         8d:d8:47:00:84:e4:50:64:b3:39:b4:d8:30:2e:47:6d:d1:ac:
         1d:12:2b:18:dd:a7:19:0b:f0:76:5e:8b:c8:41:ea:79:2e:b5:
         28:0f:f3:36:8f:57:99:24:c8:73:f1:a1:1f:b1:3e:43:ff:aa:
         3a:57:19:5d:0e:0f:f8:fb:ee:a3:16:f5:21:35:5a:6b:ce:8d:
         8d:93:cd:e3:c8:01:b0:ae:65:65:b5:f5:4f:25:96:6b:a7:3c:
         68:ae:42:a2:ce:2a:6f:59:de:18:6c:af:b8:9f:38:4e:a8:dd:
         f2:68:cb:a9:1f:42:46:01:8c:76:91:f1:b8:44:30:01:ca:93:
         d7:01:bf:87:00:99:6b:13:15:7b:2e:75:63:e4:76:ac:45:af:
         bb:13:a9:bf:12:a3:25:2a:a0:c8:e1:e0:01:4f:3f:93:83:27:
         6d:06:92:2f:c5:8c:8d:fe:32:ff:c7:a2:f8:23:8b:6f:a1:04:
         f8:6d:d4:f5:ed:87:cd:41:7e:fc:34:c2:d8:df:a1:4a:f9:e4:
         5d:cb:18:b0:9d:20:bf:92:04:66:70:47:80:51:d6:e0:55:19:
         b2:d9:fe:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+1PjFQVVJZa68oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MWUyM2VlN2UtNWY1Yi00M2FiLTg2NjQtMTc3NzgyOTZjYzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDQQ6Grz3+0G64fQ6Gl9PXXUxJRThvcrX5pE
001v+yCjGxke0kpKCc3UWlPMOTZihivqa2Bcy0YVZ/M3bSNuDx1aTIUkf8r5X0Gy
ITco/B26L+LZwazzMXlUyvsWzNufB6KGysjrL4CjAUcnXT7KAsbDHb9r5U/apqzN
QslO4d8ekYABL0OC8wSDWxMu0SnJIVsd9Kn1HcUsOC4zfgGmvSpEC5IvYoFaC5uf
g26uZLQ/uAbHVoLQnbct3XfWdUOYCDgJnM7r1C1fJYNsY8rxm6dFwZmlEGbNuw3v
wBbsg3ru28YeMwvUpBSdpKPwtvn5oCW6+ItTW2SL+GVPoh69FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/Cns986MvrGsqi094GcJEZ7FeQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZhZmJjZTctYmI5NC0z
NDg4LWE0ODQtMjI0MTcyZDVlYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6h/TcUmckhHwTNm+nJ38kCoUnrVFDvSMLQ9llT7V8CVe8v943YRwCE
5FBkszm02DAuR23RrB0SKxjdpxkL8HZei8hB6nkutSgP8zaPV5kkyHPxoR+xPkP/
qjpXGV0OD/j77qMW9SE1WmvOjY2TzePIAbCuZWW19U8llmunPGiuQqLOKm9Z3hhs
r7ifOE6o3fJoy6kfQkYBjHaR8bhEMAHKk9cBv4cAmWsTFXsudWPkdqxFr7sTqb8S
oyUqoMjh4AFPP5ODJ20Gki/FjI3+Mv/Hovgji2+hBPht1PXth81Bfvw0wtjfoUr5
5F3LGLCdIL+SBGZwR4BR1uBVGbLZ/vc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:14:45 2025 by rpki-client