Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c33c08-20b8-3b20-b127-f8e81915b813.roa
File:                     47c33c08-20b8-3b20-b127-f8e81915b813.roa (raw, json)
Hash identifier:          ZSW8M+9/xYXMZecmGlbzPfwOcxG4qx1xZwe0A852lg8=
Subject key identifier:   FD:AB:F9:31:BB:C0:9F:ED:29:6D:E9:9F:CB:0D:6C:73:5A:6F:9C:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1624BBB27F93E67E88280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c33c08-20b8-3b20-b127-f8e81915b813.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        73.63.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:62:4b:bb:27:f9:3e:67:e8:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f13b641f-bcf8-451d-9d8c-d77ccacb30fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:23:d9:9b:26:16:05:1b:8f:61:99:d5:42:
                    52:b1:dd:ef:01:06:d5:f0:57:e8:f9:84:bb:79:c2:
                    e7:ad:29:bf:27:e6:ab:45:de:2e:aa:09:af:c9:a2:
                    09:f6:6a:5b:00:12:e4:ce:a0:7c:83:d0:7e:0e:44:
                    79:90:ed:77:92:9f:23:b2:48:b1:01:ce:21:17:ad:
                    c7:b7:e3:6e:dc:22:c5:0d:55:16:7e:19:f4:44:41:
                    bb:39:4d:67:8a:dd:e4:3c:16:39:9b:4e:a9:e1:c3:
                    ed:bf:b9:e1:c6:a6:24:a8:e1:18:4c:d1:e9:07:05:
                    24:9f:6c:b6:76:3f:90:ae:74:fd:07:c0:96:e4:ec:
                    17:8b:c9:f0:e8:62:09:e2:3e:1c:6d:ce:6b:b6:fd:
                    e0:fc:96:8b:f9:18:a3:1d:8f:15:6d:a2:9b:c8:8b:
                    c8:ff:a6:4b:19:3e:dd:50:05:cb:0f:db:d4:06:cd:
                    31:05:3b:12:cd:c2:fd:28:d0:67:eb:a0:53:1a:8c:
                    fe:78:98:37:d0:19:43:10:4e:d6:4a:b0:3b:5a:69:
                    0d:f0:45:ff:7d:0a:ce:e2:79:53:2c:17:92:90:80:
                    9a:65:8e:d2:16:7f:6a:16:62:ae:b0:03:a1:ea:e9:
                    ce:eb:6e:2b:1c:98:2f:d5:7c:95:5f:be:0f:64:38:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AB:F9:31:BB:C0:9F:ED:29:6D:E9:9F:CB:0D:6C:73:5A:6F:9C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c33c08-20b8-3b20-b127-f8e81915b813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.63.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:8c:2e:d4:e9:0b:97:f5:2a:dd:34:d7:40:73:8b:17:ce:be:
         1f:5f:56:29:4b:9a:c0:16:4d:73:ae:b2:87:ae:e1:ac:ee:3e:
         42:3f:d0:66:3e:eb:b9:9d:e2:f9:84:4d:42:20:c1:e9:58:f0:
         15:52:6e:70:bf:d3:82:0a:79:24:95:13:3e:71:16:ca:90:fe:
         ff:65:f2:14:b4:e5:f1:be:79:82:10:3b:e7:b0:cf:b0:00:fb:
         b2:7a:80:4e:14:98:ac:b4:c7:5c:71:b3:2c:4c:f8:1f:cc:62:
         cc:3a:ec:55:a9:bc:b1:f5:45:0f:c7:cc:72:14:05:b8:aa:48:
         7d:c1:7f:48:49:c6:46:c2:55:9c:e9:b3:d8:b6:0c:77:30:3e:
         ce:01:d0:75:7f:55:10:f4:f4:b2:2e:52:49:97:9c:d2:9c:34:
         78:21:b8:dd:bd:45:3f:19:91:7c:a2:da:66:57:cb:e7:4e:6e:
         02:03:e9:4b:d3:74:fe:dd:cb:08:bb:b1:4c:fb:51:fb:e6:d9:
         67:5c:19:c3:c3:12:5d:ee:83:95:ce:c6:15:3e:38:61:e6:44:
         61:21:12:09:0a:68:45:aa:6d:41:2d:18:1f:8e:2b:41:b1:d7:
         b3:97:86:8b:ef:4a:7e:28:98:98:78:fb:59:48:67:b8:36:44:
         b5:ae:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:37:47 2025 by rpki-client