Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0003881c-f29e-3f60-88e8-eee6c6919ec5.roa
File:                     0003881c-f29e-3f60-88e8-eee6c6919ec5.roa (raw, json)
Hash identifier:          0gyP1WNDHt2S57Mx4xTKqge8t7A2NQ70oW3cMUfdfso=
Subject key identifier:   A3:29:D7:B7:F5:AC:E2:46:01:29:A8:26:A2:7A:A5:E9:5D:29:29:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC29A4D6ADFD72E82516680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0003881c-f29e-3f60-88e8-eee6c6919ec5.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.74.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:9a:4d:6a:df:d7:2e:82:51:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ade7fcd7-2a8a-4f2b-8733-d70aefc0d035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:b5:1b:87:b9:df:fc:bf:3c:ac:56:b9:57:
                    bb:25:a2:55:f5:b2:1a:4c:2a:8a:a8:b0:44:4b:17:
                    37:2a:da:15:76:a3:30:d7:ba:83:69:2b:05:c2:d6:
                    e1:a5:bc:20:59:6e:ee:24:62:2f:70:75:21:41:13:
                    27:cd:52:9a:b3:a3:ac:8f:48:e1:be:a3:1b:a1:b7:
                    61:55:82:ea:19:61:24:6f:db:29:a2:41:4d:c5:1c:
                    e2:4c:7f:e7:7f:60:ab:cd:84:32:67:5c:24:8b:02:
                    17:9d:93:b2:14:8f:cf:d4:59:f0:c4:ed:38:66:d3:
                    f9:90:08:8e:17:ca:ef:89:b3:44:46:f9:45:d0:f3:
                    fa:ed:dc:c1:08:16:fa:1e:7b:d4:c7:6c:94:23:7c:
                    07:75:a5:ed:1e:eb:ae:87:e1:30:d9:5a:06:e5:e2:
                    2c:46:e6:a3:5d:7f:ac:36:2a:97:51:f4:e9:01:fd:
                    2a:54:69:4f:be:9a:da:e3:99:93:69:a2:bd:75:32:
                    c7:38:b2:79:71:ce:cd:8a:16:b3:19:4b:25:e2:af:
                    85:22:c3:f6:79:4a:06:2a:db:ed:01:3a:86:88:90:
                    cd:e6:41:4c:27:bc:c3:b1:50:c7:66:e3:37:61:d3:
                    8a:c7:78:93:f0:8a:f4:5a:57:f0:98:2e:89:07:72:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:D7:B7:F5:AC:E2:46:01:29:A8:26:A2:7A:A5:E9:5D:29:29:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0003881c-f29e-3f60-88e8-eee6c6919ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:e7:e2:bd:7c:e8:5f:a8:d0:95:ea:fe:c0:b2:95:f9:8b:
         b5:2d:d8:f5:94:c7:05:95:f3:38:34:d2:9c:69:9f:b8:0c:35:
         34:ba:d9:57:eb:ec:ce:86:d8:94:05:f9:73:26:8c:2b:cd:7e:
         9e:ae:c2:69:34:ca:0a:b5:25:92:73:32:12:be:12:7b:a4:c9:
         e8:a6:d8:68:25:16:82:e2:e0:2e:18:a8:41:66:94:41:a6:b1:
         16:41:0e:fa:37:f6:69:98:05:e1:d5:13:06:5d:4f:0d:c2:28:
         e7:74:31:3f:ca:80:18:d9:a3:56:63:27:bb:c4:d2:ae:06:51:
         f5:be:80:8f:f2:b9:a8:ed:14:ba:66:6c:be:b9:66:5e:04:f7:
         e7:ad:08:b8:a4:de:35:cd:43:11:ee:fa:c2:7e:2c:32:d7:23:
         bd:fb:f7:69:1c:d7:8f:bb:ec:a0:6c:a1:97:86:9c:08:db:68:
         28:28:33:7e:d7:eb:77:f0:3c:62:30:d8:c9:cf:9c:12:ea:1f:
         4b:5a:c7:0d:38:04:7a:f4:e3:cd:e3:93:f8:b2:a9:4b:66:b4:
         44:fd:a4:7e:f4:c2:25:c6:32:b5:69:36:df:24:dc:1a:e7:16:
         d4:96:2d:21:dc:f0:3f:57:92:7f:60:c0:b6:32:74:36:1c:a1:
         9f:9b:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:46 2025 by rpki-client