Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f9f3e70-24a9-36f0-94bd-abde113d0e4e.roa
File:                     5f9f3e70-24a9-36f0-94bd-abde113d0e4e.roa (raw, json)
Hash identifier:          8RZcUQIvaM7un6KrkTHFEWZVq+eINXbEcmiW5WliWvk=
Subject key identifier:   32:4B:2B:02:33:CB:61:88:7D:7D:A0:EA:57:23:7B:58:8B:A6:9A:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4AA63AC1121E9B475F7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f9f3e70-24a9-36f0-94bd-abde113d0e4e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.74.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:aa:63:ac:11:21:e9:b4:75:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1daa826d-947d-44af-8a9b-f929f69885f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7d:d6:54:39:1a:89:68:1b:08:de:12:10:0b:
                    03:33:5a:c5:23:4c:0a:da:ab:ae:e5:88:35:c2:eb:
                    a6:9b:bb:4a:d3:87:93:23:6e:0c:a4:ca:c6:da:25:
                    0c:0e:42:dd:c9:19:0c:03:e7:25:4b:45:d4:0e:4e:
                    5d:0d:fa:08:45:be:23:66:bf:c4:1c:75:cf:07:b4:
                    6a:92:f2:8e:03:5a:e9:d8:45:c3:07:e1:52:c5:35:
                    d6:56:b3:7b:46:b8:61:4e:f6:40:93:9c:1c:ff:c4:
                    07:26:d7:a2:b5:6f:56:5b:fe:92:dd:a8:d9:0b:20:
                    c8:60:c2:48:59:2e:bf:70:4c:65:1e:a5:31:18:be:
                    57:e5:f2:de:9f:7d:8f:09:f7:05:7e:a7:95:db:5e:
                    89:c5:49:84:f1:26:9b:42:86:37:92:dd:63:f6:f4:
                    91:85:90:f0:54:5c:43:f9:24:3b:83:c2:ad:d4:17:
                    54:89:97:fd:66:64:4f:f0:55:f2:e3:e6:4a:ce:c0:
                    12:10:3f:d2:e4:f9:3e:7b:4f:2d:91:38:5f:c9:2a:
                    a4:1c:15:24:f7:f5:8b:4b:f8:1e:26:42:fd:45:64:
                    59:e4:8f:a5:9c:61:70:55:cc:b3:b5:95:9b:39:bc:
                    de:cd:dc:33:cd:9a:db:18:29:93:4f:bf:81:ac:52:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:2B:02:33:CB:61:88:7D:7D:A0:EA:57:23:7B:58:8B:A6:9A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f9f3e70-24a9-36f0-94bd-abde113d0e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:13:e3:a2:84:40:46:31:05:45:12:5a:c3:f3:fc:77:07:47:
         f5:3a:ff:e0:93:f6:23:8a:8d:de:f6:ad:9b:9b:16:62:71:81:
         a7:10:66:e8:65:79:cf:c0:5c:ba:4a:8d:54:23:5c:ac:d7:61:
         1e:fc:ea:3f:1c:92:d3:b0:8a:74:53:9c:20:0e:42:b8:0f:e5:
         d0:39:47:c4:60:3e:8c:63:b7:e5:1e:24:06:84:3c:2e:39:ce:
         ae:c8:f6:85:b0:1d:81:4d:4c:42:77:e1:d0:51:de:31:49:8d:
         52:a1:a1:4c:43:01:da:ae:22:20:8e:48:b4:3a:12:1d:8c:9b:
         59:df:58:24:2f:66:5e:8d:03:8d:7b:8e:8f:47:45:8d:24:3a:
         f1:1d:0d:60:6e:b3:26:5b:64:05:fc:8a:54:ac:75:da:f6:96:
         57:16:b9:87:14:f5:ed:da:16:15:32:d1:3d:87:cf:b4:a4:47:
         b6:ef:57:da:bb:15:0c:40:c1:49:e1:e6:74:75:9b:59:e7:19:
         62:25:37:c2:ff:70:66:8d:e3:b4:26:65:8e:3f:fd:a1:2f:c9:
         aa:5c:ba:85:2b:47:0d:34:aa:6b:71:f1:c5:25:01:f4:a2:50:
         86:ba:dc:2e:8c:18:29:6d:cf:c2:80:a0:db:f2:8e:fd:c7:28:
         16:3c:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:01 2025 by rpki-client