Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aee2d0e-26bb-3914-8d19-511e376be8ec.roa
File:                     5aee2d0e-26bb-3914-8d19-511e376be8ec.roa (raw, json)
Hash identifier:          IqASzRE3GcfcQqvZVybVd3RpLCcbtQoY8xDP9c27lP0=
Subject key identifier:   BA:92:38:F4:C2:84:13:3A:9C:5D:78:2E:E7:83:74:69:9B:4C:FC:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2DB0E516CEBBF02A7B0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aee2d0e-26bb-3914-8d19-511e376be8ec.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        174.62.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:db:0e:51:6c:eb:bf:02:a7:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=93a4fa7b-f843-4d80-a93f-50964a2a394e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:d3:8e:f5:2b:bc:9b:8c:41:73:2a:35:37:
                    26:d9:58:19:41:65:6e:20:98:19:d5:ad:66:f8:77:
                    21:22:f9:bf:14:43:fb:b7:1a:b2:a4:db:f3:2f:c7:
                    6e:0c:f9:00:88:96:87:13:23:91:1c:b3:41:09:bb:
                    1b:54:d6:cc:69:7f:1c:b1:90:0a:44:f3:2f:c9:1d:
                    ba:a6:70:e7:44:b7:15:30:50:c4:ab:44:97:99:a2:
                    8f:18:3c:b9:eb:78:bb:4b:e4:7e:39:77:7a:4f:66:
                    ab:e8:bd:76:18:eb:09:0d:d2:18:a9:2f:e3:95:6e:
                    d0:fd:42:53:f8:f1:e8:36:05:7e:71:b2:aa:84:16:
                    d8:70:50:d5:0f:fa:fd:47:d3:90:10:08:f9:20:d8:
                    68:2d:5e:75:3a:34:36:1c:54:55:e2:a5:0f:4c:b9:
                    c2:66:b0:95:2c:ab:d2:a4:5e:fd:86:90:92:2f:aa:
                    39:e7:aa:59:b5:f4:6e:f5:0e:6a:03:d3:75:ca:6d:
                    7b:e7:70:64:e7:17:68:80:7f:cd:85:f9:6c:70:4c:
                    1d:11:a7:a7:1e:21:a3:8a:a1:3c:c3:86:1e:f2:4e:
                    8c:b8:a5:75:0d:f3:14:f0:34:dd:73:50:00:00:d7:
                    af:20:a9:a8:fb:6e:81:fb:e5:1b:92:17:3f:77:71:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:38:F4:C2:84:13:3A:9C:5D:78:2E:E7:83:74:69:9B:4C:FC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aee2d0e-26bb-3914-8d19-511e376be8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:67:fe:83:5e:84:cb:60:9b:7b:e3:ce:95:c8:dd:ae:df:7e:
         94:c5:ab:a0:af:88:da:08:12:59:3e:d6:af:65:cc:cf:37:c7:
         36:44:9b:45:42:33:78:07:c2:a9:e9:2d:4f:34:a9:d6:27:55:
         37:43:73:69:42:d5:3a:bc:12:24:17:90:49:9e:66:d8:54:23:
         f5:3f:0a:0d:1d:55:9f:c9:f2:72:38:a7:db:3d:31:2c:18:ce:
         23:b6:ec:24:b8:9d:11:c5:0b:3c:05:31:74:3b:0b:83:65:4c:
         e7:8e:11:46:a9:41:6c:c1:1e:5d:db:c3:49:76:d2:e8:9a:82:
         4b:cb:f6:24:40:b1:15:df:80:8a:d8:4b:91:e6:80:dc:ae:d6:
         20:37:0c:42:e7:3d:50:e7:42:fa:75:42:0f:b4:7e:e4:6d:55:
         20:1c:9a:85:e1:c6:89:fe:03:7c:1c:fc:a5:ec:b2:1c:b8:c9:
         53:05:89:a5:6e:6b:a5:68:e3:5a:07:7b:5e:2a:0c:97:42:c7:
         ca:f0:32:04:e9:f6:eb:7f:69:25:64:b0:09:f6:00:d0:52:b4:
         d4:78:d3:24:eb:8f:25:c0:f4:ed:9c:32:08:2f:ac:cd:b9:33:
         e8:4a:4e:36:8c:96:06:41:34:3e:30:a7:58:30:32:2d:30:de:
         ab:32:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:03 2025 by rpki-client