Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be05370-510c-30f3-889a-88675d256101.roa
File:                     3be05370-510c-30f3-889a-88675d256101.roa (raw, json)
Hash identifier:          s4PuHo3bXtbPENfWPXTQcTzmaXEUlWKa/8itCclF9e8=
Subject key identifier:   A5:4B:6E:6E:CD:F3:57:BC:36:F9:71:52:6C:04:38:EB:4B:97:B3:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC481DD7D54001FFBC35F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be05370-510c-30f3-889a-88675d256101.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.211.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:81:dd:7d:54:00:1f:fb:c3:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2b91d596-90a0-4baf-96c0-5b18217a0d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:81:4d:61:62:1e:d7:b0:2c:fd:2e:2d:07:
                    e6:81:3a:15:f2:c0:70:d1:ac:d0:3b:e3:d1:b9:eb:
                    d0:d7:49:07:d9:eb:22:ee:b1:b2:ca:a8:1a:f8:b8:
                    7e:2d:69:39:4d:0b:ba:01:dd:8b:b1:6e:c3:5f:6a:
                    16:6d:cf:42:ee:86:cd:36:7b:f6:7e:64:5e:c7:41:
                    c7:32:43:e4:c9:93:f9:76:9a:1a:da:c2:4e:e5:74:
                    21:c6:81:79:90:4c:9c:b5:c4:7f:3d:b4:54:4a:3e:
                    0f:30:9b:14:86:6f:41:ae:ee:72:66:80:9f:c6:8b:
                    34:d2:60:e4:77:41:f0:1b:9e:70:80:70:9f:5b:9e:
                    ed:ca:d5:d3:82:eb:4f:ad:ca:51:95:e9:ed:c8:eb:
                    1e:6d:a6:85:cc:f9:0d:d6:3a:74:f2:00:9e:b6:45:
                    d0:01:a9:1d:f9:de:d1:58:dc:9a:04:09:4e:d6:02:
                    99:1f:6c:e7:a3:de:a2:0c:f2:8c:de:f6:90:a9:38:
                    e1:50:69:91:c5:f4:29:49:1c:e4:88:55:43:77:b1:
                    c6:b4:4f:42:ee:9e:01:1b:31:ba:35:3a:27:5d:f8:
                    a3:7f:97:17:5e:39:22:1b:f7:bb:19:b6:15:1d:75:
                    19:00:9b:bc:95:02:9c:21:32:4b:a0:f9:91:3c:06:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:6E:6E:CD:F3:57:BC:36:F9:71:52:6C:04:38:EB:4B:97:B3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be05370-510c-30f3-889a-88675d256101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:20:04:c8:89:01:42:8e:66:96:a8:65:14:3e:b2:1b:0e:
         96:4e:f5:f2:7c:44:6d:fe:2f:25:dd:b8:89:63:72:cf:f1:cd:
         3f:92:98:13:79:ba:3d:5f:88:66:dc:81:78:d0:f5:52:60:27:
         1a:6b:86:ab:16:51:4a:5f:cd:0d:b4:e8:a6:56:75:71:82:49:
         2c:bb:13:22:ba:f7:ad:ed:58:f1:32:e1:e6:6a:0e:23:d6:b4:
         f2:c3:a1:08:f9:80:6e:04:33:df:ce:68:f0:fc:dd:c2:0e:9f:
         39:4a:7e:5d:62:4b:43:eb:63:32:f7:bb:5d:a6:95:3a:f4:30:
         de:c3:ea:db:3d:80:a2:21:e3:4c:13:92:47:37:c7:64:0c:e9:
         f2:32:04:d5:2e:e6:d4:83:58:32:df:26:b4:28:f2:a8:ff:c2:
         80:ad:04:3a:a4:fa:c3:dc:eb:b0:e1:7c:0c:a9:5d:5d:cd:cd:
         12:9f:70:a0:bc:2c:a1:d6:56:a9:55:24:54:05:1f:a7:53:eb:
         07:6d:c5:87:dd:ea:59:80:61:59:2d:7c:fd:e1:a8:21:d6:0a:
         21:d6:84:37:01:f6:4b:49:5b:49:19:8d:09:c8:64:14:19:82:
         1c:90:99:e5:7a:df:25:91:b4:e7:48:c3:7e:16:96:e1:64:f8:
         b0:cf:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:05:16 2025 by rpki-client