Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39397946-143d-3673-b31d-977140faf053.roa
File:                     39397946-143d-3673-b31d-977140faf053.roa (raw, json)
Hash identifier:          s3+iuxBKZuHePw9YnkHjviGieo0p0bL4fnddSUvlqMY=
Subject key identifier:   62:EC:19:72:3F:0B:0B:89:4A:97:DC:11:71:6B:95:AF:42:88:2A:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4773EDC62BD3C43367980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39397946-143d-3673-b31d-977140faf053.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.209.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:77:3e:dc:62:bd:3c:43:36:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=70488e07-45ae-430e-8c71-6690f0a0cf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:6f:64:c7:d9:21:35:06:e6:34:cc:dc:4d:
                    e4:3f:3d:b9:da:d0:e7:b9:1b:7e:c8:67:00:7d:49:
                    1a:20:31:72:8f:1e:a4:4a:1c:04:c5:70:54:ef:88:
                    d5:aa:4e:ed:ed:e5:c3:35:a8:c6:30:43:f7:37:ff:
                    f6:6e:46:84:74:ef:5a:4f:16:65:ca:30:6d:0d:81:
                    8b:82:23:fc:20:86:50:8b:c1:f7:8c:af:8a:ba:52:
                    e5:2f:c0:52:95:5c:e9:d1:f0:cc:cf:be:bc:37:fe:
                    05:84:94:7c:c9:6d:a8:e2:44:3f:a1:8b:7b:fa:3b:
                    55:4c:89:16:b5:98:67:13:74:a8:db:81:a7:aa:9c:
                    fc:85:27:c9:de:47:0d:16:98:ae:92:86:90:dd:86:
                    0a:d3:f8:52:82:2e:a1:e5:79:a7:d3:ca:f1:af:06:
                    04:e7:0d:25:42:2f:24:c2:ed:bb:c8:2c:84:62:7d:
                    ab:e4:95:21:42:d5:a8:da:8a:a2:51:fc:4a:21:aa:
                    d0:51:2f:69:33:2b:25:8d:b7:ae:1c:cc:7e:4a:53:
                    64:98:32:3e:cd:42:c5:a2:80:d7:be:2a:5c:69:33:
                    bd:29:36:54:52:5c:59:e1:29:1d:25:79:60:88:3c:
                    64:cb:d7:78:27:bc:ac:1b:1f:75:71:cf:89:97:f4:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:19:72:3F:0B:0B:89:4A:97:DC:11:71:6B:95:AF:42:88:2A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39397946-143d-3673-b31d-977140faf053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:77:5f:ba:10:53:2f:82:4a:44:9b:3c:15:36:b2:c4:1d:ef:
         ee:78:84:8b:27:5c:c0:40:32:e1:d8:11:f7:c1:c5:60:ce:e9:
         05:f8:34:b4:80:98:26:82:e6:65:bc:f2:d5:d2:65:00:f9:15:
         0f:4e:52:ab:d2:75:2c:63:4c:eb:61:95:cb:02:09:3f:b0:ca:
         f8:97:e1:6e:c0:9d:8d:20:05:55:2f:26:9e:38:32:17:ca:81:
         44:23:a9:65:9f:fa:a4:f0:d8:bd:ad:b7:95:68:ec:fd:f3:4b:
         26:e0:1a:2d:60:4d:22:2b:ad:5e:e4:d0:81:b5:9f:bb:13:55:
         95:8a:13:0f:7a:e5:54:87:eb:8e:d9:f1:38:56:1f:a9:fc:fc:
         14:40:7a:d8:c7:6a:c1:11:7c:4a:5f:df:7b:1d:7c:d6:4e:24:
         73:56:a9:8a:6c:3f:5b:d5:40:2d:6c:88:90:23:66:17:7b:51:
         36:4a:d7:04:fd:02:3a:73:57:c6:89:f2:6c:14:2d:50:20:b3:
         64:fe:3c:cd:9b:0f:36:b2:8d:25:35:a8:0c:5d:47:e5:10:bc:
         60:03:79:b6:3f:86:11:28:78:48:44:b4:ee:e0:31:d6:c0:c2:
         ac:49:4d:da:9b:65:bf:e0:dd:69:2e:2c:f2:a6:0e:09:b9:60:
         c5:a6:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:54:17 2025 by rpki-client