Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06801ae3-d6be-32c3-bf1f-7fe804644821.roa
File:                     06801ae3-d6be-32c3-bf1f-7fe804644821.roa (raw, json)
Hash identifier:          jv9cm+8gcFR6ajPcAkFlM5+c+t3dnZFHThk2RgPJPNY=
Subject key identifier:   A6:B7:6F:F6:44:DA:4D:24:AD:7E:B3:28:98:C8:83:BA:E3:A8:2A:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC54143D52FA75FC4190200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06801ae3-d6be-32c3-bf1f-7fe804644821.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.241.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:41:43:d5:2f:a7:5f:c4:19:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7b7f4636-fe96-47e6-b128-6b0c5797a75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:5d:8e:97:dc:48:99:c6:a9:62:da:fd:58:
                    ee:d9:a6:91:5d:a8:b0:75:9e:d1:4a:dc:70:8d:b3:
                    72:22:57:f4:46:f8:6c:21:b5:32:d4:47:30:d6:48:
                    8a:c2:f2:da:cb:23:89:a0:7e:05:74:bb:43:74:77:
                    a8:42:6d:0c:f2:c1:a6:1a:28:f0:33:b6:6f:9e:74:
                    8b:ec:b0:cc:31:0f:51:b6:36:ed:aa:d7:0a:71:7d:
                    3d:32:65:bf:95:98:9a:c0:56:cb:fc:42:be:68:c8:
                    92:e3:28:6f:fa:0f:10:bf:6f:da:c6:1b:57:21:24:
                    8f:42:7d:57:9c:66:4a:00:bd:c2:3f:19:4d:c6:7b:
                    7f:31:1d:48:1b:15:c9:14:38:b8:37:fb:08:d5:3a:
                    22:6e:49:b7:bd:cd:ba:86:98:36:42:0e:68:24:eb:
                    19:19:10:af:78:8f:1d:0d:c8:fe:a0:96:57:9f:ea:
                    98:e7:07:91:98:c7:23:ec:3f:b1:71:97:82:30:a6:
                    6f:64:da:08:ba:c6:5e:e8:b2:36:d2:e2:f0:38:ef:
                    57:ae:fb:be:1a:2e:1d:21:91:9b:79:28:55:15:ff:
                    2e:4f:a9:78:12:01:ea:a9:b0:44:42:63:86:c9:c9:
                    7e:2e:36:dd:08:f7:f5:33:a0:92:92:70:cc:88:9f:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:6F:F6:44:DA:4D:24:AD:7E:B3:28:98:C8:83:BA:E3:A8:2A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06801ae3-d6be-32c3-bf1f-7fe804644821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.241.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:92:0d:1e:dd:64:ab:3a:31:65:c3:fc:67:e3:c6:a9:2f:48:
         7e:57:5b:f7:1f:32:69:e3:f1:be:0d:f8:a5:87:89:08:d1:e0:
         f1:7b:0f:40:6b:4e:b4:34:68:8b:37:bf:e9:8a:19:7c:35:6d:
         30:77:82:c7:89:1c:79:96:f6:96:9d:72:21:6a:95:73:3a:09:
         4d:6c:8d:1a:1c:78:5e:59:a5:7a:6d:c7:12:0f:42:fe:e1:e9:
         23:61:d4:b3:18:8d:20:8e:60:e0:39:d2:46:cc:54:21:a0:a5:
         53:57:73:45:86:5e:38:b8:f1:dd:46:42:b6:b6:c4:13:95:1f:
         4b:3d:b7:79:b2:76:12:7e:9b:07:45:2b:30:9c:5f:f6:63:47:
         f4:c2:f0:0c:28:ac:07:06:9e:ff:30:6e:a1:8d:21:c7:a6:28:
         25:27:2f:61:2e:1a:75:f5:da:9e:81:8d:aa:85:a0:fb:48:6a:
         cd:cf:46:a2:60:57:f5:c2:7d:c7:27:44:81:51:1d:4e:f9:0f:
         c1:37:75:f8:40:fd:f9:81:3c:b0:86:08:d9:09:08:a0:a4:f5:
         40:7c:80:aa:cc:aa:6c:a5:0f:30:f2:61:78:f4:2c:c9:c0:d6:
         06:22:fb:29:da:bd:b4:34:10:b5:bf:c1:6e:a6:33:d2:b6:ac:
         98:3d:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:00:58 2025 by rpki-client