Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4daf46-8898-3f6e-97cc-e439d70b8433.roa
File:                     dd4daf46-8898-3f6e-97cc-e439d70b8433.roa (raw, json)
Hash identifier:          yJvzXnlBLJguBaV8xNTEuJQsxvqqex5k5cXsuIcVqak=
Subject key identifier:   66:24:D0:DB:1A:9F:61:63:57:E0:D7:E4:13:D4:67:2A:1E:96:A2:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929474F4B374A88BB4933480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4daf46-8898-3f6e-97cc-e439d70b8433.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        73.176.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:74:f4:b3:74:a8:8b:b4:93:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a9bc1b4d-7cb5-439e-85d5-1ac752cd2076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:e3:88:c9:59:e2:ff:69:44:42:6a:0b:4c:
                    e1:1e:d3:bb:1d:c1:18:7c:cb:4d:5f:db:73:2d:97:
                    5e:e6:d3:f6:61:0e:e7:c3:6c:86:0d:55:8e:33:2e:
                    1a:f7:70:49:6d:52:41:31:70:6e:9a:de:31:38:9c:
                    57:f9:29:8e:30:f6:6a:9b:5f:2d:00:6c:f0:0c:dc:
                    04:0c:89:7e:f7:3b:5f:d1:dc:cb:0f:0b:28:df:67:
                    a8:ae:6e:d5:f2:29:14:81:20:4a:29:3e:ce:00:1d:
                    dc:ca:50:dd:39:4a:64:60:7f:1d:4a:0b:71:e3:15:
                    33:be:06:3e:65:51:38:93:72:ab:bd:69:95:5f:53:
                    31:68:86:51:97:73:34:f3:42:e6:bc:47:3d:50:65:
                    28:e3:d9:8d:5d:f6:bb:22:2c:ba:7d:e8:e4:aa:9d:
                    96:0d:29:74:44:41:6b:32:a7:08:8a:b2:a1:34:d7:
                    47:59:cf:85:25:3d:19:9a:d6:cf:87:48:38:03:8a:
                    82:2f:26:12:be:55:b2:d9:8f:eb:cf:74:0c:87:4e:
                    02:cc:3f:bb:65:de:14:25:37:2b:b4:66:8a:88:d1:
                    20:43:33:49:a5:0b:99:b3:7a:59:79:ed:22:b5:0d:
                    87:ea:c8:2d:c9:82:b1:5d:11:71:3a:97:8b:11:71:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:D0:DB:1A:9F:61:63:57:E0:D7:E4:13:D4:67:2A:1E:96:A2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4daf46-8898-3f6e-97cc-e439d70b8433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.176.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:24:26:5f:3b:9a:bd:22:bb:0c:80:3b:bb:5e:f3:74:4f:22:
         d8:b6:1e:ae:63:90:81:92:bd:e4:27:c9:e7:4f:af:29:d4:fb:
         d5:ce:81:54:3e:7e:12:76:9b:b8:c4:9a:d0:5f:25:08:33:e0:
         a3:d1:4f:7d:00:3e:23:ba:58:06:e3:0a:bb:7a:e1:e5:1a:4b:
         da:33:4b:6a:66:c9:c1:f3:9a:bd:1f:c1:ac:a8:8d:9e:ec:8c:
         06:90:a3:75:14:c1:8e:56:6c:7c:df:4c:70:35:bd:90:93:5a:
         3e:30:b1:56:b7:32:04:ac:a5:ef:2d:7a:e2:62:b1:c2:05:c9:
         71:de:dd:16:49:af:0a:99:13:9b:48:a0:d2:c0:5c:86:f6:bb:
         1e:33:1a:d3:ad:ac:62:9c:19:42:d7:01:5f:8e:0a:6a:b0:2b:
         37:3d:90:a9:85:d3:1d:67:25:bb:30:a0:b1:80:b5:2a:a1:41:
         0e:ed:78:dd:48:f6:0a:db:7e:3f:19:1e:b9:89:51:08:36:92:
         2b:c9:ca:da:93:f3:aa:7f:9d:eb:2b:20:78:ce:43:7c:50:56:
         a3:8b:0f:0f:16:61:b5:0a:ae:f3:56:0d:b8:da:a5:07:81:97:
         37:21:84:6a:43:5d:49:46:3a:c8:5a:f9:16:89:86:4f:4b:96:
         5c:6f:5e:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlHT0s3Soi7STNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
YTliYzFiNGQtN2NiNS00MzllLTg1ZDUtMWFjNzUyY2QyMDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JrjiMlZ4v9pREJqC0zhHtO7HcEYfMtNX9tz
LZde5tP2YQ7nw2yGDVWOMy4a93BJbVJBMXBumt4xOJxX+SmOMPZqm18tAGzwDNwE
DIl+9ztf0dzLDwso32eorm7V8ikUgSBKKT7OAB3cylDdOUpkYH8dSgtx4xUzvgY+
ZVE4k3KrvWmVX1MxaIZRl3M080LmvEc9UGUo49mNXfa7Iiy6fejkqp2WDSl0REFr
MqcIirKhNNdHWc+FJT0ZmtbPh0g4A4qCLyYSvlWy2Y/rz3QMh04CzD+7Zd4UJTcr
tGaKiNEgQzNJpQuZs3pZee0itQ2H6sgtyYKxXRFxOpeLEXEeAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYk0Nsan2FjV+DX5BPUZyoelqK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ0ZGFmNDYtODg5OC0z
ZjZlLTk3Y2MtZTQzOWQ3MGI4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSbAkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUkJl87mr0iuwyAO7te83RPIti2Hq5jkIGSveQnyedPrynU+9XOgVQ+
fhJ2m7jEmtBfJQgz4KPRT30APiO6WAbjCrt64eUaS9ozS2pmycHzmr0fwayojZ7s
jAaQo3UUwY5WbHzfTHA1vZCTWj4wsVa3MgSspe8teuJiscIFyXHe3RZJrwqZE5tI
oNLAXIb2ux4zGtOtrGKcGULXAV+OCmqwKzc9kKmF0x1nJbswoLGAtSqhQQ7teN1I
9grbfj8ZHrmJUQg2kivJytqT86p/nesrIHjOQ3xQVqOLDw8WYbUKrvNWDbjapQeB
lzchhGpDXUlGOsha+RaJhk9LllxvXrM=
-----END CERTIFICATE-----
Generated at Sat May 10 19:20:42 2025 by rpki-client