Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/044e3b06-0f0d-38ce-9a25-4f27116833a6.roa
File:                     044e3b06-0f0d-38ce-9a25-4f27116833a6.roa (raw, json)
Hash identifier:          ckKoIL39VsgQbqVP8AOdJ8BbEdwhKvW0h+Lx3Z3nRME=
Subject key identifier:   C1:53:35:74:92:B2:82:EB:92:BA:1F:D5:A9:23:AC:69:C8:E8:DA:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB22105D4EAC6F22214BF6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/044e3b06-0f0d-38ce-9a25-4f27116833a6.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.252.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:05:d4:ea:c6:f2:22:14:bf:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e35e6aad-3142-4ebf-9ca2-67533ff8840a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:47:eb:0e:ca:32:7b:e9:42:78:f9:ba:e9:
                    0b:62:8c:f5:71:4b:6b:ff:7c:a4:9f:f4:45:29:ec:
                    47:ab:83:4f:66:f1:45:da:60:ec:6c:84:6d:87:7b:
                    b4:fb:ad:0b:35:cd:fb:1b:1e:d2:c6:36:92:fe:d8:
                    1b:07:03:d4:c8:af:57:cb:40:67:9d:57:f1:e1:05:
                    6c:22:f4:0e:83:25:4f:71:fb:03:f2:27:41:fa:af:
                    0a:ac:4b:12:64:05:66:e2:1f:81:4a:fe:d7:81:3c:
                    12:b9:0c:a7:ee:4c:e2:06:45:9d:ef:07:b2:5d:a5:
                    07:bc:7e:88:c2:75:e0:49:ac:2f:32:70:43:af:e1:
                    c7:c6:6f:4f:2e:54:80:2d:2a:21:40:81:5d:94:58:
                    92:79:ba:5b:52:7e:08:3b:4d:e4:66:57:de:8a:96:
                    22:7b:35:1a:b7:58:24:55:73:70:78:88:b8:09:ac:
                    40:b6:62:a7:b1:58:2f:18:6d:14:b8:72:8e:ed:ef:
                    a1:7b:d6:40:5a:42:8d:82:29:90:3f:97:64:9a:3a:
                    34:8d:4c:10:cb:43:ad:2e:1e:f0:ae:23:cc:b3:40:
                    68:07:0c:13:20:da:41:07:b1:38:8b:35:6b:36:24:
                    a0:a9:94:7e:3b:a9:a2:ce:6f:2d:17:69:fa:a8:b9:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:53:35:74:92:B2:82:EB:92:BA:1F:D5:A9:23:AC:69:C8:E8:DA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/044e3b06-0f0d-38ce-9a25-4f27116833a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:2d:15:30:e7:52:53:62:c6:a1:7b:df:43:67:bc:33:17:e3:
         21:56:54:ee:81:48:be:56:7f:cf:d5:57:32:2e:b8:fe:06:11:
         82:04:47:3d:74:60:ba:7d:ca:5a:18:3e:e4:d4:56:d9:31:58:
         9e:db:db:39:96:32:f5:c6:66:a6:84:41:5b:ac:2e:4c:90:03:
         77:40:bd:44:0b:57:83:bf:2d:0f:f9:02:ce:00:61:68:37:0c:
         9c:8c:70:92:33:53:2a:b8:92:bf:2f:5c:d2:94:7f:b1:e9:b4:
         22:6d:5b:72:3d:96:81:6a:b1:20:31:ad:3e:4a:67:c3:ca:da:
         95:33:b6:e7:49:3a:9c:e2:d6:f5:e3:d6:22:a7:17:5d:62:2c:
         06:9d:44:ae:98:a8:62:55:13:8f:82:df:bd:1b:e5:b6:31:a8:
         92:20:b8:ee:5b:cc:cb:f7:e3:93:2b:58:5a:c3:3e:28:11:98:
         91:a6:eb:ff:89:50:c7:73:bf:b1:9c:cc:71:58:de:61:fc:fb:
         a5:71:14:35:64:4b:e9:68:71:80:b8:02:18:03:a9:6d:02:31:
         00:da:40:ee:f2:16:3a:a1:ac:c0:96:09:df:22:ad:80:f7:20:
         52:ff:d7:99:a9:21:11:d7:41:2d:39:e2:cf:67:ea:4b:b7:b5:
         85:8d:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:06:44 2025 by rpki-client