Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88836fec-1408-3ded-8b35-eedc8abe5ce1.roa
File:                     88836fec-1408-3ded-8b35-eedc8abe5ce1.roa (raw, json)
Hash identifier:          eEkNYUAo9lgFugp2LPLLMHDYV9H2ROXVdUh4/q/5vzs=
Subject key identifier:   A8:22:B6:D6:4C:32:3A:67:29:61:94:EA:7B:0B:81:3E:35:C6:34:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC458EAE3439A495B7B0E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88836fec-1408-3ded-8b35-eedc8abe5ce1.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.102.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:58:ea:e3:43:9a:49:5b:7b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2ec61881-d3ea-4fd7-9b39-fbd55a2839a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:fb:2a:a8:6a:37:bf:e8:dd:31:df:2f:95:
                    a5:0e:f7:06:df:43:e7:27:2a:a3:32:1b:f5:70:8c:
                    b5:4f:20:a3:87:fe:da:30:06:21:8a:9d:0f:0e:bd:
                    c7:3b:7d:8c:fa:d8:c6:e6:f5:2b:8b:c1:f8:ab:88:
                    a0:b1:e4:24:e4:87:f7:a2:4e:a5:77:74:b0:3f:9d:
                    a8:b5:a5:6d:38:97:44:d3:40:a8:fb:8e:cf:90:bb:
                    a8:29:8c:27:b4:2c:8c:56:31:cd:26:22:84:c0:dc:
                    0e:7d:33:a4:f5:1c:30:15:03:5d:be:90:41:02:00:
                    6a:e1:ec:ba:6a:88:bd:b0:66:d2:06:bf:d1:0a:96:
                    3f:60:fc:a4:0b:7b:c7:96:fe:f2:d6:9c:52:bc:78:
                    73:11:cb:a4:b9:09:e7:11:a4:5d:38:bf:87:60:4d:
                    de:cb:c3:37:b2:a2:99:c1:44:ff:76:29:fd:e4:5a:
                    ff:ee:64:31:9b:b1:56:09:57:cc:8a:7f:a5:50:ab:
                    e1:e2:e9:68:aa:ed:71:e1:fc:06:d8:a0:71:85:fe:
                    fe:44:2a:f8:93:d7:29:85:ae:e5:7b:61:df:1a:9e:
                    a2:97:a5:21:36:21:16:07:2d:a6:ab:64:67:6a:e5:
                    75:8e:5d:3b:06:7f:7b:ea:94:df:b0:12:1a:c2:e1:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:B6:D6:4C:32:3A:67:29:61:94:EA:7B:0B:81:3E:35:C6:34:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88836fec-1408-3ded-8b35-eedc8abe5ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.102.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:20:f0:1b:88:a8:37:61:e1:bd:2c:17:8b:c6:91:85:c6:51:
         36:7a:2a:c9:43:c7:d8:0c:1f:6d:a5:fd:e6:f0:8a:12:d8:cc:
         7c:7d:e3:53:c7:49:0d:31:66:df:ff:68:09:23:fb:a8:25:f3:
         c9:0e:76:21:41:32:15:91:0b:21:20:77:bf:65:5b:06:6e:9b:
         5e:f4:6c:e1:30:0b:9f:36:32:e4:1d:d8:1c:66:38:c6:a8:93:
         3f:ed:21:3a:a2:70:13:99:27:d2:8d:89:f5:a6:55:68:78:84:
         0e:d7:76:b3:2b:f1:df:5b:b2:5f:7e:e8:21:0a:b9:da:0d:e9:
         4c:6f:de:ff:ea:77:13:d9:4a:1f:c5:e3:6b:ed:54:4d:78:3a:
         53:ac:73:1d:05:83:a7:5d:89:7e:f3:d0:5f:53:de:c0:61:db:
         99:1d:29:2a:52:ca:db:4b:88:95:be:4a:fb:49:83:0f:60:9a:
         d3:0f:56:b7:56:59:42:ad:e6:83:30:86:97:da:e9:0b:ae:b4:
         a1:55:0b:14:8f:ea:13:22:aa:7c:3d:88:89:26:47:85:0b:aa:
         f1:6a:28:69:5e:2e:73:5a:2c:05:5d:a2:6f:79:61:bb:12:aa:
         2d:d8:29:83:96:7d:b3:22:91:74:2f:0b:32:b9:d5:04:36:a2:
         80:36:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:28:58 2025 by rpki-client