Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf09ab6-0667-3a1e-bb85-22512fbdccb4.roa
File:                     4cf09ab6-0667-3a1e-bb85-22512fbdccb4.roa (raw, json)
Hash identifier:          yLzajyVDfPpeWFzIMEUFaQFqL1PwVZ4Mz+qNwoJIth4=
Subject key identifier:   6D:32:2B:1F:BC:AD:2A:78:AD:9A:56:7E:D0:91:EF:7C:AB:46:B2:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC48643F66E291758AD7600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf09ab6-0667-3a1e-bb85-22512fbdccb4.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.22.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:86:43:f6:6e:29:17:58:ad:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=cee0c755-ab94-4bb8-ba5f-620fe20f33fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:d1:36:5e:69:2c:79:3b:8e:a2:e1:19:68:
                    28:08:ef:17:ce:ea:5f:bc:d1:3f:4d:de:ab:1a:2c:
                    03:29:be:f4:01:bc:51:ab:dd:5d:f8:81:c6:ae:75:
                    df:f7:49:49:0b:34:88:f5:5c:79:61:e9:dc:96:21:
                    50:fa:9f:8b:68:c6:20:af:84:f7:02:cd:c0:ea:fb:
                    ab:3c:71:17:62:f5:a2:5e:bc:f8:d7:8a:e0:bb:45:
                    fc:3e:b0:51:99:1c:c8:39:56:eb:1e:c5:57:00:3a:
                    ce:92:b2:a2:ae:5c:85:49:23:30:b3:1f:a3:5f:bd:
                    f0:97:04:6e:2f:43:fa:8c:17:0e:fc:4b:03:80:a8:
                    7c:a9:e4:8e:0f:08:7d:1e:43:9e:23:18:c1:ba:1c:
                    a9:d7:52:21:28:b5:a4:c8:1e:a9:94:4a:4c:16:76:
                    4a:56:fb:b3:b5:82:b8:38:e1:22:cb:b2:42:36:f3:
                    e1:a7:af:01:e7:73:c7:e6:19:32:4b:f8:85:10:7e:
                    1e:57:56:a3:1f:24:a4:b7:e3:a4:74:ab:b9:74:e5:
                    b9:9b:9f:67:84:82:e1:73:68:70:17:55:39:fb:5a:
                    94:d6:07:1e:85:56:f0:7b:f8:9f:17:88:23:2d:ce:
                    b9:60:55:4e:c8:e9:32:58:1e:96:88:52:92:66:9f:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:2B:1F:BC:AD:2A:78:AD:9A:56:7E:D0:91:EF:7C:AB:46:B2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf09ab6-0667-3a1e-bb85-22512fbdccb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:43:0b:09:b7:c5:3c:d6:1f:7e:f3:8b:f4:c4:93:bf:66:
         77:b8:b6:ec:7d:c5:73:3d:3e:7f:a0:24:c4:78:8d:2a:6e:d9:
         8a:79:e5:9d:09:36:d8:09:26:25:df:d1:5f:f2:0a:cf:79:ca:
         7d:c1:23:5a:63:3e:39:67:53:24:a3:d5:12:d5:00:1a:17:fc:
         77:7a:53:13:75:7e:d1:a5:f2:22:05:21:69:78:45:c3:81:0c:
         93:cd:0c:d9:67:2a:1a:06:aa:7e:86:c4:f6:63:44:05:1d:cb:
         59:5d:21:9b:b0:3b:e2:df:40:63:9a:4a:9f:30:5f:fd:49:71:
         b7:a5:02:86:a8:a6:7f:af:48:2b:d4:d7:cb:14:2a:4a:a7:4d:
         2e:29:10:b5:fc:30:7e:7e:ef:04:7e:08:38:63:ba:46:d2:7e:
         55:69:5f:17:1f:a0:08:7c:35:9c:5c:2b:95:79:f3:4f:57:3c:
         40:8d:9b:07:26:91:a2:f5:ef:98:ed:0b:5f:f0:a2:b4:e9:e1:
         1b:ba:cf:7e:73:57:5f:bd:08:b3:c9:53:39:63:47:07:83:db:
         19:8d:12:5a:20:3c:c8:df:64:8d:ea:11:07:ee:3c:88:5e:15:
         e6:a2:30:3a:34:e8:35:f3:c6:b0:f2:23:3f:4d:31:1d:f8:81:
         12:ff:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:12:09 2025 by rpki-client