Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/371c784e-30f0-3c08-96bc-adc2e80a37ef.roa
File:                     371c784e-30f0-3c08-96bc-adc2e80a37ef.roa (raw, json)
Hash identifier:          ROMeBCIJnGEWFDi6OMxGrXqUJXsad/to6kIj/qidBj4=
Subject key identifier:   AD:36:A5:20:B5:0A:51:22:6B:DB:AC:69:51:28:62:88:EC:D7:8D:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC27410B5994FCE30275380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/371c784e-30f0-3c08-96bc-adc2e80a37ef.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.22.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:74:10:b5:99:4f:ce:30:27:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=611c6367-3fa1-4b41-9bd4-66f25ff40ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:27:a0:cb:86:71:99:f0:68:dd:9d:59:00:
                    c9:c4:79:8d:8b:94:2b:65:c8:ee:dd:54:2e:c0:81:
                    3a:f1:ee:a3:ea:bf:b4:07:c4:0d:8a:e6:60:43:81:
                    06:1d:7a:40:d0:90:a7:9a:79:c2:11:2d:ef:54:9f:
                    ff:68:07:29:d8:4e:c5:bb:de:5c:81:51:cb:d3:cb:
                    72:15:b4:43:bc:e6:70:1d:62:51:cc:9f:6b:b4:89:
                    97:ba:7b:b4:b4:ee:d9:78:a8:fa:f1:21:a6:92:10:
                    cb:b7:89:22:4c:a4:08:c4:5a:60:8a:04:3f:c3:f8:
                    3a:44:77:cf:63:6b:95:34:53:f5:72:62:38:3e:58:
                    ad:38:62:80:99:30:1a:27:76:9a:98:ea:73:06:4e:
                    ba:70:46:ee:4b:02:b7:a4:ef:96:6e:2a:ca:23:17:
                    30:f7:69:67:06:1d:4d:d9:fa:d1:9e:75:a5:4b:6e:
                    74:e2:5a:ab:45:c7:33:63:ab:36:5f:86:35:04:d3:
                    89:3b:77:80:63:13:b0:dc:72:ac:8a:cd:7c:44:65:
                    24:08:fc:4a:da:c4:94:89:8f:6a:fe:fb:91:84:93:
                    a6:a7:4a:d5:96:05:1a:fb:5e:bf:09:c3:38:10:8f:
                    3e:bc:2a:c7:24:af:59:c8:6a:9f:ad:37:07:bb:37:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:A5:20:B5:0A:51:22:6B:DB:AC:69:51:28:62:88:EC:D7:8D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/371c784e-30f0-3c08-96bc-adc2e80a37ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:c1:b6:8b:c9:99:68:31:be:12:82:43:0f:f9:4d:28:fb:a3:
         ac:9d:f2:f5:67:21:8b:b7:04:f9:7f:80:56:1d:5d:16:29:60:
         02:94:7e:ce:eb:be:92:24:ad:c9:d5:48:fa:07:67:84:df:a1:
         fd:cc:a9:99:8e:73:ad:55:80:5d:eb:f6:72:64:05:10:db:a4:
         36:20:dd:c7:63:05:bd:7a:6b:f1:a9:5c:89:13:7c:7d:67:0d:
         81:f8:c4:8d:54:31:c2:56:a3:76:78:7f:4f:c2:00:cd:ae:a6:
         0b:c7:eb:aa:3a:0d:31:b3:34:b6:95:f2:30:cf:61:86:7c:76:
         81:6c:46:3a:c1:e1:78:0d:d0:e5:3f:ae:dc:b8:0d:83:26:33:
         91:4a:22:9a:ea:dc:95:21:f5:78:6b:8e:52:4b:90:c8:79:8a:
         94:59:d3:74:fe:94:95:84:2f:d2:6b:72:15:50:f7:9f:14:a4:
         c3:6d:0f:34:9e:94:63:8f:36:16:6b:9b:76:9a:a7:5f:93:08:
         9d:ee:a3:ce:b8:25:32:28:a6:90:b7:36:c2:87:ab:c6:1c:9a:
         5c:1c:f4:73:7f:7c:e4:90:24:6c:c3:08:4b:fc:d2:9a:c2:35:
         fc:9c:1d:1c:b1:cd:b0:da:c3:47:42:f2:a4:ff:be:bc:06:a4:
         6b:8f:fb:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswnQQtZlPzjAnU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
NjExYzYzNjctM2ZhMS00YjQxLTliZDQtNjZmMjVmZjQwZWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7cnoMuGcZnwaN2dWQDJxHmNi5QrZcju3VQu
wIE68e6j6r+0B8QNiuZgQ4EGHXpA0JCnmnnCES3vVJ//aAcp2E7Fu95cgVHL08ty
FbRDvOZwHWJRzJ9rtImXunu0tO7ZeKj68SGmkhDLt4kiTKQIxFpgigQ/w/g6RHfP
Y2uVNFP1cmI4PlitOGKAmTAaJ3aamOpzBk66cEbuSwK3pO+WbirKIxcw92lnBh1N
2frRnnWlS2504lqrRcczY6s2X4Y1BNOJO3eAYxOw3HKsis18RGUkCPxK2sSUiY9q
/vuRhJOmp0rVlgUa+16/CcM4EI8+vCrHJK9ZyGqfrTcHuzfjzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK02pSC1ClEia9usaVEoYojs141TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzcxYzc4NGUtMzBmMC0z
YzA4LTk2YmMtYWRjMmU4MGEzN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMDBtovJmWgxvhKCQw/5TSj7o6yd8vVnIYu3BPl/gFYdXRYpYAKUfs7r
vpIkrcnVSPoHZ4Tfof3MqZmOc61VgF3r9nJkBRDbpDYg3cdjBb16a/GpXIkTfH1n
DYH4xI1UMcJWo3Z4f0/CAM2upgvH66o6DTGzNLaV8jDPYYZ8doFsRjrB4XgN0OU/
rty4DYMmM5FKIprq3JUh9XhrjlJLkMh5ipRZ03T+lJWEL9JrchVQ958UpMNtDzSe
lGOPNhZrm3aap1+TCJ3uo864JTIoppC3NsKHq8Ycmlwc9HN/fOSQJGzDCEv80prC
NfycHRyxzbDaw0dC8qT/vrwGpGuP+6g=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:33:29 2025 by rpki-client