Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa
File:                     21c00fdd-b057-3005-967a-6f0601783d47.roa (raw, json)
Hash identifier:          sAC12Mn4xRB/2bpmbpxQU2yIs2S+G0j0SX9PTQKdVxA=
Subject key identifier:   EE:ED:50:43:CD:41:4F:A7:80:3D:82:57:B8:EE:7F:22:DD:9D:D2:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC188AC353BED45E52E0640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.29.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:88:ac:35:3b:ed:45:e5:2e:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=84f004da-c5ce-4ecf-97bf-c790105280ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:64:59:c1:d7:34:7d:0a:cc:56:35:76:bb:
                    0c:b7:ce:4a:dc:7b:fe:9b:21:64:3b:88:7c:30:d0:
                    37:16:27:6b:9e:73:54:7a:80:b1:16:d6:d2:e0:c1:
                    ec:0b:e5:19:89:16:9f:b0:32:bd:ac:c6:3f:26:aa:
                    f6:e8:ab:dc:ad:d8:77:72:19:a4:b7:77:aa:f9:9c:
                    b7:14:78:83:d0:90:83:27:6c:70:c8:b6:35:56:b7:
                    fc:83:5a:3b:32:72:25:a2:1a:ee:67:72:ae:88:05:
                    60:a4:9b:66:e0:20:d2:53:3e:5c:45:81:c9:b6:cd:
                    ce:f6:96:28:47:e9:60:fa:14:76:3f:80:e9:9e:7b:
                    37:41:c4:5c:5b:40:f5:cc:1d:46:a1:7c:13:c3:14:
                    71:69:c9:cc:89:7d:7b:88:20:7a:fd:e9:c2:62:90:
                    ea:50:45:34:f1:b8:5c:91:9d:2d:de:96:59:e7:c3:
                    de:86:0e:ec:d5:fd:76:b7:d5:67:2d:80:4a:57:45:
                    15:c4:7c:05:15:c9:eb:b1:55:83:f4:44:f7:c8:42:
                    e9:95:89:44:6d:19:ea:92:6d:85:36:89:3a:58:0d:
                    92:12:b2:91:c0:ee:9a:4b:c7:1c:14:73:af:e6:2f:
                    8b:0f:c8:b5:5e:59:c0:c6:1f:b5:63:68:92:55:77:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:50:43:CD:41:4F:A7:80:3D:82:57:B8:EE:7F:22:DD:9D:D2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:fb:3d:fb:01:f0:f7:b9:ab:3e:06:a0:78:2a:c9:1c:55:
         3e:81:c4:5d:44:b4:7c:cb:54:f0:b1:2d:c0:ba:a0:ee:7a:39:
         9d:05:b3:72:9e:d2:f1:02:35:de:15:00:4b:a5:da:b3:bc:a8:
         f3:c4:ee:9d:e4:44:49:be:4f:77:d5:67:ff:50:0b:46:08:90:
         5a:be:ef:3a:b6:b0:71:e4:9a:02:39:23:36:6f:7f:ef:60:32:
         23:71:28:17:88:e4:ef:59:92:52:e0:13:f7:a7:8e:1a:8c:12:
         9e:82:64:02:27:a0:3e:d3:66:01:3a:4d:c9:e3:63:f6:f2:6f:
         23:f3:63:6e:c9:45:73:fb:f5:d7:7a:9d:24:9b:c7:24:25:0a:
         b5:65:0c:4f:92:9d:52:33:c7:4b:6f:7a:6a:c2:57:96:88:3f:
         d7:4c:41:30:0a:33:51:22:93:6b:69:76:85:c0:42:32:b2:05:
         38:8f:00:e4:8d:8a:a4:7a:0c:a4:9d:83:74:05:b4:2e:1c:ae:
         10:ee:a5:e7:b3:f4:00:a2:b3:64:fe:91:c3:1e:6e:fe:73:ff:
         83:e1:f7:ee:01:39:7a:93:20:b3:0f:f1:d2:3e:f0:da:dc:9f:
         3c:ad:41:ee:f2:13:af:71:a3:15:2c:f2:cb:16:8c:da:31:b0:
         44:14:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:43 2025 by rpki-client