Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec235e6-81f0-3c17-88ee-8e02aebcf957.roa
File:                     6ec235e6-81f0-3c17-88ee-8e02aebcf957.roa (raw, json)
Hash identifier:          MGdowIQ5e2uTYzydUzGdybnRROCUKBXiHScrUzlA0nA=
Subject key identifier:   AD:7D:4C:F1:5D:0F:93:21:0F:F4:E5:97:D6:88:3E:FF:BB:08:EE:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC284410C1DD0F998288320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec235e6-81f0-3c17-88ee-8e02aebcf957.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.45.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:84:41:0c:1d:d0:f9:98:28:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e8c83021-19e6-4856-9e66-becbec32ffc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6e:8c:59:c8:7c:27:05:9e:fa:bd:44:9e:f9:
                    a7:1c:76:45:64:08:c9:fb:20:eb:4b:2b:a7:fa:d7:
                    4b:d4:7c:08:15:e5:1a:05:5c:26:15:7a:6c:44:7a:
                    9b:64:5c:75:ee:de:26:60:98:40:f6:eb:3b:87:b7:
                    d5:00:68:13:c2:13:3a:8d:20:5d:30:17:e5:0f:42:
                    ea:d5:ce:4b:1d:e0:52:06:0b:fa:ad:49:75:7d:eb:
                    02:eb:c5:51:ed:ee:95:c5:d7:ce:af:22:b4:a3:f8:
                    b4:4f:1d:8b:77:f2:0c:33:f2:b9:e6:e8:c5:b9:c0:
                    df:a9:c9:89:b3:24:a5:02:f4:c8:a0:2d:24:3f:ab:
                    aa:66:49:57:d7:86:b1:96:42:5c:61:12:f0:e7:58:
                    2f:e6:d3:8b:4b:59:e9:4b:06:4b:21:e0:08:ea:9c:
                    e3:f2:d9:50:27:ca:72:bf:f4:dd:25:b5:6d:1a:bd:
                    48:2a:03:d1:76:be:62:5b:35:b5:09:32:8d:05:c3:
                    03:ac:d8:de:2e:69:ff:79:ae:7a:80:03:65:8f:dd:
                    95:24:c8:7f:6c:b4:c6:f2:58:04:fb:aa:ce:88:ec:
                    84:37:78:a9:d8:80:46:12:fd:5b:54:f4:df:02:97:
                    35:67:72:e7:32:0a:0f:26:b4:cf:9a:d1:92:ce:65:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7D:4C:F1:5D:0F:93:21:0F:F4:E5:97:D6:88:3E:FF:BB:08:EE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec235e6-81f0-3c17-88ee-8e02aebcf957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.45.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:74:22:9e:f8:ac:fa:f7:47:86:a4:d2:9a:bb:40:a3:5a:3e:
         f8:17:7a:ad:04:44:32:a4:7b:a9:a9:f9:25:9a:a8:18:f0:29:
         16:86:10:8c:17:01:f9:71:81:4c:72:8d:1a:36:f1:d8:00:22:
         72:56:f0:8d:43:d5:fb:9d:4e:bc:1b:3e:28:6c:33:37:e0:52:
         d5:dc:dc:d6:4a:25:4c:39:b7:8f:bf:0c:b0:c1:71:f0:12:20:
         58:a8:58:67:a6:de:05:d2:de:0c:c5:81:1e:09:e7:c9:88:52:
         77:37:98:2c:42:44:64:82:e7:ee:a4:51:9c:d0:97:31:09:ca:
         03:21:d5:75:45:ee:54:e1:a6:55:ac:e7:d3:28:ee:96:72:21:
         cd:d1:1b:11:76:7b:d3:16:2a:a2:36:d0:24:98:f3:2a:8c:b6:
         6b:25:0d:e1:c8:ed:4c:08:8d:6a:0c:30:8b:2b:f1:42:56:89:
         e6:e2:f4:0b:a9:3a:f3:02:4a:17:9c:3f:a2:43:85:e8:6f:c9:
         ff:0e:66:db:08:5c:78:63:29:fa:74:ea:72:f1:e0:03:3e:ac:
         f9:88:93:4c:8b:63:95:bd:92:c1:37:aa:15:2d:b6:d2:45:38:
         b4:b2:5c:1d:6a:2b:d6:3e:87:33:9d:17:27:9b:99:15:87:f3:
         a5:44:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:17:04 2025 by rpki-client