Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f52fb0-dcad-39b7-85db-6a5c9ba96ef0.roa
File:                     53f52fb0-dcad-39b7-85db-6a5c9ba96ef0.roa (raw, json)
Hash identifier:          OgjzaDO8VVdCVUpAbNhETRqy1Dj5e5/YEs+5NYPNpxI=
Subject key identifier:   25:DA:B4:86:E4:82:46:33:AD:C6:B2:29:46:FC:B9:A4:F3:A7:30:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC321B35A02CC540D2DE3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f52fb0-dcad-39b7-85db-6a5c9ba96ef0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.70.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:21:b3:5a:02:cc:54:0d:2d:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=370a8c3f-ea78-4fa6-848a-b01d83dfd457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:dd:67:80:77:1f:f2:a1:4b:5f:94:3f:f6:
                    88:d3:02:aa:ad:a5:d6:1d:f4:c1:35:ea:1c:ae:7b:
                    45:7c:3c:6a:d2:68:b6:f3:04:ec:96:84:1a:b2:5f:
                    d4:91:bf:de:66:ec:e4:3d:09:ac:11:d5:74:ec:8f:
                    ab:a1:00:58:6e:23:3f:e7:80:20:d0:d7:31:5d:27:
                    2d:6c:33:b8:df:de:f6:c5:e7:de:22:23:c8:5e:c9:
                    32:8f:66:2f:dc:d7:0e:a2:12:cf:9a:75:05:a5:26:
                    e9:3d:ba:01:70:a0:bc:fb:e8:c3:51:ac:5f:54:d1:
                    2f:6f:e0:1c:bb:3a:85:af:e3:e5:46:4d:59:a3:99:
                    02:4f:1e:43:86:fb:fd:7a:8b:21:8f:47:e9:34:50:
                    cf:80:af:4a:6f:c9:9c:31:c9:8f:32:47:09:7c:e3:
                    a1:40:0d:0d:b7:c2:d6:a5:f2:fd:16:63:a1:c4:36:
                    fb:b9:65:ef:3d:c9:b6:cd:8a:eb:c4:63:93:16:1d:
                    43:6a:24:b9:b2:8f:00:57:b4:55:89:79:6d:4a:ba:
                    e7:86:3f:14:ef:75:83:8a:d7:54:73:88:62:05:83:
                    c8:25:7f:fa:64:e6:10:ae:d0:76:28:eb:f6:61:19:
                    c2:d9:65:0f:86:10:af:64:6c:a4:69:df:81:f7:25:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DA:B4:86:E4:82:46:33:AD:C6:B2:29:46:FC:B9:A4:F3:A7:30:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f52fb0-dcad-39b7-85db-6a5c9ba96ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:14:c4:a7:04:e1:08:bd:ef:d2:58:ae:3a:25:cc:5b:22:
         45:d2:74:36:db:ed:8a:da:e9:f8:f0:af:b3:cf:60:3e:b1:4a:
         cd:09:6b:5d:dd:7e:e3:79:19:8d:53:eb:f1:f9:f9:85:15:96:
         dc:7a:b6:99:ff:21:52:05:f7:de:43:dd:28:ad:54:cd:1a:74:
         0e:7f:2b:2b:de:a8:f5:c0:f0:34:3d:02:36:73:16:f5:47:69:
         a7:59:db:b9:50:ec:9a:17:88:c3:f1:47:64:6e:13:2b:26:87:
         1d:2b:7d:39:6d:ea:ee:2b:d3:89:eb:e6:20:66:ca:7a:05:14:
         78:48:32:8f:bf:d5:fa:11:1e:ab:12:a8:3a:47:9a:20:51:3b:
         bd:5c:f4:2d:38:70:b1:cb:19:6e:61:b1:26:b8:9c:d5:2e:07:
         41:95:de:76:94:3c:44:c6:3c:e4:40:50:d7:63:38:60:c5:27:
         5f:2a:f6:54:00:21:1e:35:2f:7d:0a:c9:5f:34:65:88:77:e7:
         5c:d1:4b:6e:81:0f:93:1b:90:7d:a5:63:c6:1a:99:85:1d:05:
         81:fc:a9:80:3d:eb:30:3b:f6:5e:09:89:58:0c:87:73:a3:0e:
         37:72:64:ee:19:d7:be:98:05:65:af:71:31:56:94:93:c4:51:
         1b:ca:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:41:42 2025 by rpki-client