Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82eab47c-498d-363e-84db-d3bb1e1aeaa7.roa
File:                     82eab47c-498d-363e-84db-d3bb1e1aeaa7.roa (raw, json)
Hash identifier:          6T+7dKBgwWgDIFDcfBi2JyAUSvqia3qxdJwXYCiG2aw=
Subject key identifier:   EA:0B:30:2E:A3:DC:14:83:09:60:7C:06:68:AE:57:4D:38:71:1F:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1600AEF529E8AB6379A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82eab47c-498d-363e-84db-d3bb1e1aeaa7.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        73.3.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:60:0a:ef:52:9e:8a:b6:37:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ea605554-3d46-466d-8658-dd70e0a4f73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:d3:e3:f8:de:9b:70:d0:31:ef:1f:78:75:
                    81:50:dc:fd:20:4a:d8:92:8d:9e:f3:70:2c:f1:5e:
                    8f:fb:8b:57:c3:0c:3e:fd:ca:4b:fb:9c:69:30:9f:
                    2a:21:7c:46:ee:47:ab:2e:69:57:92:51:4a:c4:61:
                    08:6e:0b:54:49:d1:ef:e7:7f:9d:89:d9:6c:19:fb:
                    78:6d:7a:e7:8a:33:d2:c2:07:5e:34:fd:e9:7b:80:
                    d8:48:6a:28:ce:4a:9e:26:1c:e5:56:c1:43:f4:87:
                    fa:a7:b3:bf:94:f5:94:07:e4:cd:98:2b:7e:84:40:
                    2b:9a:ca:e8:b1:66:b0:06:69:3b:b1:a6:5a:f3:b9:
                    89:cf:08:43:a9:db:d5:8f:24:e6:57:34:5a:35:9c:
                    b2:b8:9d:ca:0b:f3:5e:60:36:1d:cb:ab:64:1a:cf:
                    67:8a:a8:90:cf:8d:f3:88:09:0a:64:dc:a8:6e:0c:
                    32:68:f4:09:d0:1a:3c:13:92:fd:99:83:2f:93:bd:
                    54:6c:78:80:8d:fb:f7:3b:93:b0:f4:43:9d:bd:89:
                    fd:76:94:4d:55:1f:41:ee:ef:51:d3:57:7f:5c:d0:
                    2c:9d:67:1e:65:e5:66:0e:d4:8c:8f:00:8a:10:bd:
                    fd:79:2f:85:e7:61:c3:4f:cf:18:a9:74:30:f3:f6:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0B:30:2E:A3:DC:14:83:09:60:7C:06:68:AE:57:4D:38:71:1F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82eab47c-498d-363e-84db-d3bb1e1aeaa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.3.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8f:97:7c:a6:24:28:ac:66:91:f8:e8:d3:76:f3:6e:ef:0e:
         c7:ff:83:3e:96:bf:db:c5:c0:45:2e:68:b7:b9:71:78:45:6e:
         5b:a6:dd:04:f3:9a:e6:ec:14:0a:47:b5:55:b6:52:17:ec:8f:
         b2:99:31:3a:f3:82:12:dd:bc:52:4e:c3:86:46:51:4f:5d:b9:
         6d:cc:54:ed:10:87:3c:2f:6e:1c:ea:0f:5e:26:9b:a4:fd:7f:
         5a:37:2c:2c:44:85:49:b1:1d:0e:fc:ad:98:fd:48:7e:b5:ec:
         e4:a4:69:b2:8b:fb:e8:d6:6f:97:75:bf:47:a5:09:88:b9:7a:
         b9:7e:c1:a7:67:91:91:b2:29:86:d5:68:2a:29:1c:52:12:23:
         39:b1:16:71:72:8a:b2:9e:db:48:4e:22:31:f4:99:83:25:fb:
         82:67:b8:fd:c4:3f:31:b2:33:cc:40:61:bb:35:07:5a:87:72:
         e0:30:49:38:bd:8b:db:45:47:35:d9:1c:79:90:bd:8e:20:30:
         b5:80:e2:55:53:5c:15:b5:d8:ea:02:4a:bf:50:31:68:da:88:
         aa:fc:72:5a:5d:04:33:4a:85:fa:0b:e8:e5:6f:47:ce:b3:f8:
         1b:d8:6e:7c:7b:b2:03:fa:09:39:69:74:11:a4:94:f8:99:7a:
         97:35:62:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswWAK71KeirY3moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZWE2MDU1NTQtM2Q0Ni00NjZkLTg2NTgtZGQ3MGUwYTRmNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtrT4/jem3DQMe8feHWBUNz9IErYko2e83As
8V6P+4tXwww+/cpL+5xpMJ8qIXxG7kerLmlXklFKxGEIbgtUSdHv53+didlsGft4
bXrnijPSwgdeNP3pe4DYSGoozkqeJhzlVsFD9If6p7O/lPWUB+TNmCt+hEArmsro
sWawBmk7saZa87mJzwhDqdvVjyTmVzRaNZyyuJ3KC/NeYDYdy6tkGs9niqiQz43z
iAkKZNyobgwyaPQJ0Bo8E5L9mYMvk71UbHiAjfv3O5Ow9EOdvYn9dpRNVR9B7u9R
01d/XNAsnWceZeVmDtSMjwCKEL39eS+F52HDT88YqXQw8/ZWKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoLMC6j3BSDCWB8BmiuV004cR/9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODJlYWI0N2MtNDk4ZC0z
NjNlLTg0ZGItZDNiYjFlMWFlYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQN8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWPl3ymJCisZpH46NN2827vDsf/gz6Wv9vFwEUuaLe5cXhFblum3QTz
mubsFApHtVW2Uhfsj7KZMTrzghLdvFJOw4ZGUU9duW3MVO0QhzwvbhzqD14mm6T9
f1o3LCxEhUmxHQ78rZj9SH617OSkabKL++jWb5d1v0elCYi5erl+wadnkZGyKYbV
aCopHFISIzmxFnFyirKe20hOIjH0mYMl+4JnuP3EPzGyM8xAYbs1B1qHcuAwSTi9
i9tFRzXZHHmQvY4gMLWA4lVTXBW12OoCSr9QMWjaiKr8clpdBDNKhfoL6OVvR86z
+BvYbnx7sgP6CTlpdBGklPiZepc1YtI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:44 2025 by rpki-client