Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a9348e-c909-36fa-aa96-b1c1d0371d81.roa
File:                     31a9348e-c909-36fa-aa96-b1c1d0371d81.roa (raw, json)
Hash identifier:          OvP5aS9mMK2eviPZ3f0lM43UlQoCMRBZiNKC6shqeIo=
Subject key identifier:   50:B4:43:01:9E:CD:22:F6:32:52:B4:29:05:D3:FF:A9:06:E3:02:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1E85B0AD13F1BAC48DC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a9348e-c909-36fa-aa96-b1c1d0371d81.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        73.141.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:e8:5b:0a:d1:3f:1b:ac:48:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d868fdb5-690b-4049-b01e-1f9887c60b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:4d:35:d7:dc:14:05:8a:7a:f4:c0:93:da:
                    04:63:0b:de:da:17:e1:a6:69:c7:7f:e1:b8:a1:35:
                    42:dd:91:9b:34:21:4d:28:b7:7e:aa:7d:8a:97:1c:
                    c5:a2:59:81:f1:b3:d9:de:ed:f3:43:08:0d:16:69:
                    4a:45:7f:f7:8e:07:f8:2d:06:98:cc:b7:86:7d:19:
                    9e:c1:eb:7e:4c:13:3d:0c:a3:11:8b:58:35:20:a1:
                    8e:bd:0a:9f:0a:d7:f3:de:45:4e:f4:9d:7e:8d:cd:
                    f3:7a:33:cd:4c:e1:10:ee:fa:38:2e:a7:1d:67:c7:
                    74:81:3a:72:67:58:54:84:e9:be:7c:f3:77:f7:d2:
                    c7:35:17:fb:4f:e8:21:1c:28:2c:77:f9:67:dd:27:
                    84:4e:92:79:a1:f5:b5:49:96:1c:8f:48:93:0c:3f:
                    bb:97:f2:e7:00:f1:de:a3:fb:45:b0:07:05:6e:7e:
                    77:cf:8f:12:e6:f6:ea:45:8e:75:d9:4c:32:bf:ea:
                    52:39:fa:3e:25:11:a5:95:9b:b9:13:3f:89:04:50:
                    b0:8e:e3:5e:2d:3a:25:25:25:f7:58:6a:cd:93:36:
                    af:ff:9b:12:27:c1:9e:68:d6:47:6e:f3:69:ee:e8:
                    2a:9a:7d:76:cd:59:cd:1d:9c:76:2f:12:ba:37:5b:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:43:01:9E:CD:22:F6:32:52:B4:29:05:D3:FF:A9:06:E3:02:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a9348e-c909-36fa-aa96-b1c1d0371d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.141.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:cb:61:da:a3:b0:87:30:79:51:11:f7:df:78:c9:bd:83:27:
         3c:c9:dc:b9:cd:d1:11:73:b8:ab:e5:66:87:71:dd:12:5b:2c:
         48:14:d0:f9:ba:fe:0d:27:62:34:b2:55:7d:9b:47:1c:c1:11:
         98:93:8a:63:42:6f:01:d6:b4:e2:bf:94:a8:fa:14:d4:94:a2:
         4f:26:03:8f:f6:e1:e8:a1:d5:f7:bb:00:2b:c9:f3:50:47:6b:
         91:05:9b:85:64:1f:fc:92:51:0f:c6:e0:aa:f5:27:14:46:7c:
         07:98:78:79:f5:1e:55:50:4d:2e:51:e3:1f:55:a8:39:3c:50:
         8e:69:a4:8f:c7:d0:27:1a:5e:1d:52:3d:a5:f3:8d:56:19:6b:
         4d:cf:17:61:00:b3:2b:bd:b2:d9:dd:2e:d7:7c:14:b0:8c:24:
         f5:e0:51:26:6f:ba:b6:18:59:b5:3e:80:06:e7:35:d7:91:ba:
         20:d4:83:cb:03:19:d6:4c:53:ee:fc:51:27:0a:4e:91:78:52:
         35:14:26:65:33:35:13:2b:b1:a3:0c:a9:22:c1:25:c6:1b:bd:
         57:16:d8:e0:a2:2b:ab:ae:43:5d:54:3b:70:1a:f7:10:76:1e:
         a1:03:f8:73:04:cd:72:4c:7f:ee:86:09:8b:6b:b5:fe:fd:01:
         c5:05:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:27:14 2025 by rpki-client