Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355ad8cf-200d-3910-b789-d085936139fd.roa
File:                     355ad8cf-200d-3910-b789-d085936139fd.roa (raw, json)
Hash identifier:          JOfT9IhMnGszsdBImaZGROxVfI32IA3BgpfkApwtFQ0=
Subject key identifier:   D5:B2:5C:D6:80:BB:F2:53:B6:AC:4B:8C:61:D1:EA:CD:42:82:DD:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3A13D9713FEE9179A2180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355ad8cf-200d-3910-b789-d085936139fd.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.195.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:a1:3d:97:13:fe:e9:17:9a:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c5ee4037-3ae2-45a9-965e-4e5ec886d8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:c0:d0:86:67:df:cf:83:1e:6f:0c:2d:81:
                    4d:03:f3:6b:bf:77:ae:d2:6a:e5:d7:c6:91:a0:5b:
                    b0:2b:7c:80:fb:1e:9c:7c:f4:9e:a6:ad:e9:29:98:
                    13:c1:94:17:27:0d:8d:04:91:d1:24:b5:f7:bd:92:
                    c8:03:eb:62:61:6a:d3:72:db:8f:a4:5d:86:64:56:
                    23:ea:77:15:56:af:7d:da:c0:f1:08:1a:86:67:35:
                    c4:ee:5c:c2:f5:da:73:b7:be:53:3d:34:b6:4b:94:
                    ee:9b:c4:4d:97:1c:d8:ea:0c:71:19:cb:80:5e:0f:
                    77:85:f5:b4:48:f8:2b:e3:e8:63:08:1f:c5:c0:09:
                    98:d4:be:32:62:11:84:7e:e7:6b:75:db:e6:e7:a4:
                    6d:e4:a6:64:d0:ac:e6:66:7a:29:95:af:fb:44:59:
                    1e:9b:77:8e:b8:a3:08:74:2e:22:c3:b0:cc:b0:8a:
                    71:d2:d4:1a:63:3d:83:a4:30:db:71:3e:c0:ba:c2:
                    0a:3b:dc:37:51:7d:c9:ff:d8:ce:d6:d5:55:55:33:
                    9b:60:0f:6b:9f:f4:a2:50:d9:97:f2:ef:df:bf:d7:
                    dc:d8:bd:74:49:96:25:45:2d:2b:44:ea:03:71:24:
                    97:e9:2d:e7:81:71:c5:6c:af:cf:1d:e6:23:fd:02:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:5C:D6:80:BB:F2:53:B6:AC:4B:8C:61:D1:EA:CD:42:82:DD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355ad8cf-200d-3910-b789-d085936139fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:df:80:fd:35:3c:db:15:8c:06:ab:06:2e:cb:a3:11:83:
         85:b9:7a:e2:79:fd:1e:10:43:b6:10:42:87:42:45:29:a1:2d:
         5b:a3:d5:55:7a:e1:e1:db:62:b7:91:24:c3:89:bb:47:20:42:
         17:ca:a4:bb:96:bb:6a:5d:c3:e7:2c:6c:a7:e3:da:02:0b:92:
         de:4c:29:d4:65:0a:b5:1f:22:2c:43:f7:f4:11:f0:99:96:c3:
         5d:48:da:f3:65:9a:71:bc:e1:10:b0:68:46:f7:2f:90:64:5c:
         96:3f:12:06:26:27:68:44:5c:71:a5:51:b4:fe:64:cb:34:bb:
         ba:2c:89:c7:bf:aa:a6:d9:a4:51:4d:3a:05:e6:6e:b3:aa:58:
         c4:c9:d1:6e:4c:4f:08:92:05:21:c2:7b:67:73:eb:db:9b:12:
         1a:b8:d9:5c:fd:be:ee:f8:5f:d6:db:61:ac:77:ec:52:86:38:
         42:6b:62:40:ec:68:10:4e:f1:04:65:b9:dd:80:08:bf:41:f2:
         3e:a0:f7:f2:d8:ff:d9:19:97:c7:3d:03:62:cf:1c:da:6e:c5:
         df:65:f8:b1:83:da:3e:bd:29:69:a8:82:da:80:41:17:cb:3b:
         ef:4c:ee:26:6c:24:95:1e:5f:4e:01:7a:78:bc:6e:44:8a:a6:
         66:28:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:24:12 2025 by rpki-client