Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8cfad-58b3-33fb-840b-79b2b1f67735.roa
File:                     52b8cfad-58b3-33fb-840b-79b2b1f67735.roa (raw, json)
Hash identifier:          lv+21JhT8Eml4Hy5hI0+rqw1Bb6hG65WLnSfdhVyZ+Y=
Subject key identifier:   AF:9B:05:8D:6A:AE:2D:C5:C2:29:1D:C8:5D:D9:12:B6:FB:E2:93:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC286BE9162B55F2C711B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8cfad-58b3-33fb-840b-79b2b1f67735.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.45.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:86:be:91:62:b5:5f:2c:71:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=93853d3a-338c-4d37-9507-1a71d6e0f161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:d6:07:04:98:b5:98:cd:0a:b2:5d:d4:20:
                    50:3e:8a:b9:21:6f:f6:7e:f8:7f:32:0c:39:bf:69:
                    25:e8:eb:67:df:6a:c2:42:22:0f:3a:21:69:e6:c3:
                    93:76:ea:90:ab:57:b6:4f:2b:23:a5:c5:cb:ba:2f:
                    84:17:94:f7:3f:da:32:4d:b4:bb:07:dd:75:6c:4d:
                    63:f6:c1:e7:d0:b2:76:88:75:3e:af:be:ad:ea:13:
                    32:69:29:dd:bb:08:39:ae:bb:7c:b3:47:11:8b:1d:
                    11:cc:d3:f8:ae:27:83:ff:55:98:59:61:7b:38:e8:
                    da:a1:54:11:83:96:1a:73:f2:be:f6:7c:4c:77:42:
                    c4:0f:3b:71:a2:9a:d6:47:c9:12:30:a5:27:4f:a0:
                    fa:f1:01:8e:88:e0:1f:d2:06:dc:63:d8:5a:59:ff:
                    13:f7:36:05:b0:ab:42:40:fa:5e:39:45:c8:05:36:
                    a4:83:e5:7e:62:f4:d9:e8:39:d3:c8:67:e3:b3:9b:
                    64:fd:b1:a1:d1:96:82:41:14:58:0a:d4:35:fb:37:
                    c1:d5:b5:19:15:61:a9:80:e6:19:a6:13:04:57:01:
                    94:3e:fe:e6:1e:c5:97:7e:16:47:79:1f:28:e9:a1:
                    62:c6:5e:d4:22:58:70:6e:fa:a8:72:84:5b:ed:9e:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:05:8D:6A:AE:2D:C5:C2:29:1D:C8:5D:D9:12:B6:FB:E2:93:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8cfad-58b3-33fb-840b-79b2b1f67735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.45.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:47:6c:e2:3a:aa:c7:4e:d2:bb:34:bf:11:5f:28:28:35:cb:
         7e:bb:66:a5:33:f2:39:63:83:6c:ea:3a:95:04:b2:9b:46:fd:
         06:7e:8d:45:96:d0:b0:5e:8b:2e:f4:f2:a0:c9:f4:97:7b:0e:
         7a:70:9c:52:80:42:6a:0c:36:c2:1d:da:4e:15:6f:25:3d:04:
         f7:55:e2:e7:ad:bc:a9:18:eb:98:85:0b:f3:46:a9:82:dd:4c:
         f1:a8:a7:7d:ae:21:af:4b:67:72:99:a6:34:51:0d:88:77:ce:
         44:98:85:8f:e9:a5:16:16:2e:25:1c:30:e1:b1:98:2e:20:6f:
         ad:df:fe:6b:5d:2c:c6:b2:4e:d1:23:e5:80:d4:6d:32:ca:16:
         2f:d9:65:26:21:c4:c5:0f:a2:5b:25:b0:a2:28:59:57:a0:17:
         6a:af:2f:01:43:4f:bb:ac:5d:4a:49:02:96:11:fd:74:c8:08:
         45:06:fe:28:12:78:7f:54:26:bf:79:f9:6e:7e:4d:e4:3d:da:
         93:88:d9:6b:1b:72:18:a3:7b:0e:99:09:d7:e0:88:a2:1f:5d:
         94:c3:60:9a:44:c3:3b:a4:4c:bc:b3:85:17:cb:85:d6:b4:43:
         41:1c:50:46:bb:ab:b1:f9:27:18:27:ff:15:22:f8:54:64:59:
         5a:31:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:25:54 2025 by rpki-client