Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8338ae1b-d1da-3938-8d2c-6652a81ef475.roa
File:                     8338ae1b-d1da-3938-8d2c-6652a81ef475.roa (raw, json)
Hash identifier:          UymF4fobhv1lDKS6nXFUTTINO90C56heJTT2OjtLgyY=
Subject key identifier:   3B:5B:7C:EF:EC:91:B0:FD:5B:BC:DD:E0:59:37:00:60:D3:C4:A1:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2737861411FC1F02413C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8338ae1b-d1da-3938-8d2c-6652a81ef475.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.211.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:73:78:61:41:1f:c1:f0:24:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=6799d31e-4e54-4ea0-affc-5d6aa0b888f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:0f:ce:14:8a:f7:11:2b:c6:d4:5d:e6:d1:
                    dd:51:83:cd:26:70:4a:eb:7a:b8:d7:ad:eb:18:de:
                    c6:1f:7b:05:6b:21:f7:eb:29:be:34:c2:30:a1:43:
                    b0:eb:42:a4:ed:f2:1b:8d:ad:00:27:82:11:1f:62:
                    bf:10:9e:6c:f8:9e:96:0d:54:29:b0:91:1c:4f:bc:
                    e1:8f:25:d6:a7:5d:de:a4:87:2a:fd:25:d1:6b:f3:
                    b9:75:11:0a:9c:05:75:98:df:5c:f1:db:f9:ba:c5:
                    a0:6e:8d:17:07:80:48:6b:7c:b7:f4:94:3f:61:6b:
                    f7:cd:db:8b:b1:24:38:cb:c5:44:f6:1b:50:b2:72:
                    4d:66:b5:07:a3:7c:af:82:eb:b9:04:a8:a9:be:1f:
                    17:fd:c0:65:29:cc:c9:77:39:bd:f1:33:87:00:8c:
                    9c:21:b6:09:a4:ed:ed:86:5a:03:c1:29:7a:e8:56:
                    9c:a9:26:b9:ae:0f:52:bc:b4:ed:f0:62:5e:69:4a:
                    44:a9:0e:62:6f:9b:d8:11:4d:cf:39:f2:d3:a4:4a:
                    cd:1a:5f:2d:85:bf:2b:7b:02:25:f9:92:be:86:fc:
                    73:c7:40:d3:38:10:26:b6:41:ca:d7:e0:df:c5:10:
                    a5:a6:5f:66:f6:2d:f0:bd:c8:8b:98:ee:49:24:fa:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5B:7C:EF:EC:91:B0:FD:5B:BC:DD:E0:59:37:00:60:D3:C4:A1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8338ae1b-d1da-3938-8d2c-6652a81ef475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:41:1e:d2:df:fd:28:96:b3:a1:55:70:6b:53:d2:fd:43:
         43:05:0c:96:6f:2c:e0:94:dc:75:de:a5:30:91:77:30:04:51:
         23:28:53:4e:f5:35:a1:fe:97:60:ec:f4:78:a5:de:d2:84:89:
         2a:a2:38:77:2e:93:a6:d4:fa:81:86:c6:66:89:c5:b5:ec:71:
         7d:41:e2:70:46:d5:25:d9:90:aa:b7:9b:8b:17:ce:4d:1d:51:
         02:bd:66:53:80:04:62:e8:83:4a:36:16:d8:62:f5:86:6d:a6:
         dd:4e:20:fe:c9:48:b6:e0:b3:f2:0c:0b:27:a1:a7:62:6d:79:
         b3:d7:58:3a:0b:72:44:ec:ba:2a:35:2b:ac:fc:bb:31:3c:72:
         68:ad:2e:e9:34:a5:bf:93:72:44:6e:a3:5d:de:b5:12:40:8f:
         66:94:a6:68:bc:2a:6b:dc:4e:6c:b6:a6:86:8b:e4:47:b0:65:
         bb:14:37:64:80:a0:15:16:64:d9:63:2a:09:18:68:51:12:33:
         a2:9b:f6:e3:61:fe:03:2e:13:aa:fd:d5:0b:f3:25:0c:48:3a:
         28:b6:41:33:7a:64:bf:e0:6c:ed:2e:f6:88:65:ab:68:a4:fe:
         a3:3f:f2:af:93:43:fd:47:7b:9d:6d:00:12:eb:ef:4b:c7:19:
         74:dd:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:37:57 2025 by rpki-client