Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d9eaae8-3520-3672-b65b-715f8485b091.roa
File:                     0d9eaae8-3520-3672-b65b-715f8485b091.roa (raw, json)
Hash identifier:          XKL5Pzow0ujrrruPgzW580jl4ZGvFOTuEKZejLcGbiw=
Subject key identifier:   F3:F1:D8:4E:17:9A:14:7B:D2:7A:36:3A:F2:8D:98:19:9A:9F:7D:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC303D0ABA37AFA0B5DED09
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d9eaae8-3520-3672-b65b-715f8485b091.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.162.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:03:d0:ab:a3:7a:fa:0b:5d:ed:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=6f66a870-cce0-40a7-b05c-a3a447dc7588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:67:fd:40:35:fc:28:c8:40:78:ba:66:ab:
                    16:d0:92:5b:c8:ee:06:67:1b:f5:84:40:5d:a4:24:
                    a8:cb:a3:da:9f:1c:28:a9:d1:b3:4a:83:e0:87:98:
                    3f:7a:4f:ce:61:fa:ab:e2:f2:4b:4a:7b:54:b4:c2:
                    54:66:5e:6b:4f:4b:73:da:e3:5c:a4:d1:31:61:5c:
                    e9:c5:1f:91:75:0c:ea:fb:df:50:59:25:22:59:f0:
                    68:91:cf:fe:4a:33:01:bc:0a:9c:4c:8c:bc:ab:d3:
                    4a:59:c2:4e:2b:8f:ef:8d:ee:77:b5:ad:2e:17:12:
                    cd:e3:a1:06:8a:db:ca:e2:06:d0:f1:37:1a:2a:31:
                    8d:64:37:08:ab:29:a8:76:79:3c:ff:96:90:b4:aa:
                    0a:66:37:07:55:ea:da:30:e7:47:f2:c2:fa:7d:44:
                    18:08:3d:31:5e:d2:93:1f:13:a1:51:61:f0:29:0e:
                    c6:28:75:29:b9:87:69:04:42:46:2c:ea:09:13:c9:
                    85:5a:d2:9c:d8:9a:ca:1a:66:3a:30:22:95:38:38:
                    3e:f5:86:a4:67:3d:4b:dd:59:62:4f:e4:ed:71:e8:
                    3f:bd:6a:58:b6:58:73:7e:9a:b8:c1:ea:ed:b4:40:
                    c4:b2:b4:e8:c1:12:05:81:a3:2d:16:59:5b:c2:cd:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:D8:4E:17:9A:14:7B:D2:7A:36:3A:F2:8D:98:19:9A:9F:7D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d9eaae8-3520-3672-b65b-715f8485b091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.162.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:3b:55:8f:7c:f1:cd:5a:2c:97:ef:39:ad:e8:84:bc:09:
         95:12:b8:29:70:8c:60:f4:7f:f8:6b:28:04:8a:a5:3f:34:87:
         85:14:39:92:ae:b8:37:af:69:b8:fe:58:01:e6:41:08:2e:df:
         d4:a4:ee:2c:d2:14:09:f8:1f:db:53:52:a5:5b:c2:9e:80:dc:
         0b:98:7b:49:a8:b6:67:7e:76:18:5c:82:14:25:bb:0a:23:de:
         c5:71:1d:9b:e4:f9:c7:51:17:8d:34:b1:d3:2c:fb:20:a5:8b:
         0b:48:0e:ce:48:16:87:9f:a4:3e:5f:c7:00:35:ec:03:21:67:
         da:d5:86:1f:d7:9a:88:43:63:d1:7b:c7:f7:e5:0e:7b:f0:6e:
         a9:48:49:7d:d8:f8:67:2e:1c:c5:d6:c4:a0:5c:74:62:e8:dc:
         8f:52:e1:3e:f4:f0:0e:bf:47:9a:30:6a:9f:71:4c:94:c8:11:
         e5:d4:48:a0:4a:de:7e:7e:cc:a3:db:82:8e:f9:ac:b8:51:e6:
         ae:29:e8:5c:fd:fc:27:50:6f:65:64:9a:2c:a7:7b:24:14:6a:
         09:f2:5a:a3:1f:93:f4:0b:76:11:a0:f2:a2:b8:19:bc:c5:32:
         53:8a:5f:c4:33:ee:7d:a3:60:99:af:4c:93:e1:00:26:67:63:
         71:8f:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:58 2025 by rpki-client