Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/676f9c3f-df54-3bc4-bc4d-cb3ba01d7b53.roa
File:                     676f9c3f-df54-3bc4-bc4d-cb3ba01d7b53.roa (raw, json)
Hash identifier:          QBF0iGmZQZLAXZmw9VlPfXkmnSLn+hAp4z94grsvEWY=
Subject key identifier:   01:90:D2:3C:28:81:60:C2:6B:DC:19:8D:46:A4:AD:28:C2:F2:94:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3142C6707DE44487E55CC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/676f9c3f-df54-3bc4-bc4d-cb3ba01d7b53.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.223.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:14:2c:67:07:de:44:48:7e:55:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5cf40678-8e94-42c8-a63a-bd635f9d3e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:70:b0:a5:83:7f:68:c3:0d:cd:da:f7:7f:ce:
                    99:95:16:89:c8:83:84:3e:11:af:4a:94:e9:c0:38:
                    8c:26:e2:7b:3e:38:be:94:02:ff:c8:0c:28:9e:cf:
                    9d:a5:55:bd:65:8e:61:61:69:1b:1a:ac:2d:81:76:
                    99:48:9d:81:fb:3a:8b:4d:3f:b6:6b:ee:6a:47:0c:
                    50:79:86:a6:62:8e:37:bc:69:6a:79:70:96:8c:57:
                    85:6e:ba:03:c0:89:41:82:24:1c:ac:5d:4d:18:5e:
                    77:59:7f:bb:ff:02:61:1d:ba:04:b1:1b:62:d9:bb:
                    43:4b:c7:1b:f0:bc:ec:ae:16:21:82:8f:05:b6:b9:
                    2f:2d:8f:ec:81:23:ea:0d:42:69:09:7d:91:d1:3e:
                    f7:91:fe:c9:d7:87:49:42:e8:85:05:49:c1:a6:8b:
                    af:18:e0:66:d6:94:07:7c:ae:3a:26:19:83:17:b9:
                    05:a1:1e:03:ac:1e:0f:56:cb:b8:9b:f8:af:05:b3:
                    d1:5a:a4:d2:94:0b:94:5f:65:79:ec:7b:34:69:0d:
                    9f:56:bf:a6:77:28:00:55:63:88:9a:25:7e:ba:da:
                    16:30:37:5b:fc:04:5e:97:b9:2a:58:17:24:70:d4:
                    14:8b:23:98:a2:b8:94:f8:3b:30:58:72:a1:f1:f2:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:D2:3C:28:81:60:C2:6B:DC:19:8D:46:A4:AD:28:C2:F2:94:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/676f9c3f-df54-3bc4-bc4d-cb3ba01d7b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:de:0d:ea:63:4a:8d:44:56:b8:10:40:29:54:60:03:e8:
         f0:5d:ba:fa:cd:34:c9:9b:89:48:72:68:68:2b:02:4b:86:ec:
         d8:7e:c0:a8:03:58:da:d6:23:f3:93:e7:8c:2a:06:53:52:79:
         1f:ed:65:a1:4e:48:41:37:cb:a5:f8:1b:cf:1e:37:c4:50:cb:
         c7:00:3a:ce:4f:c4:0e:4f:d0:f4:3c:d6:59:29:85:d1:5c:e4:
         a0:3a:6c:00:a0:50:a6:0f:e1:af:5e:58:e7:56:d2:32:8f:9f:
         1b:e2:90:b5:b6:32:71:7f:03:27:72:92:e3:a5:2f:81:a6:d0:
         c7:f4:58:c5:1f:12:60:35:fc:f1:2b:a2:91:d6:74:46:0a:47:
         a8:48:40:5e:85:0a:ad:59:11:39:00:ab:ab:25:b4:e2:5a:f8:
         d6:19:7d:8c:87:1b:cc:5c:54:75:db:1c:b3:3e:cd:09:16:13:
         89:14:6d:8e:6a:22:c6:c2:13:33:82:a2:4d:91:49:e3:3a:55:
         d8:6c:ef:5a:08:bb:2f:14:ab:fd:9e:d0:a3:28:0c:58:e2:46:
         27:b6:0d:d8:4d:5f:8b:68:a6:aa:8a:f5:ee:e4:44:cb:f3:04:
         34:a0:59:79:98:82:bf:04:db:70:43:a8:4b:8b:a2:a6:cb:ff:
         32:ff:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:15:37 2025 by rpki-client