Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e18ef0-202b-3830-9996-d1e736e72cee.roa
File:                     90e18ef0-202b-3830-9996-d1e736e72cee.roa (raw, json)
Hash identifier:          Vj5d2TRVO8AoCVNJEPK1XjuuC5ngG2QQGaHLuyKTzSw=
Subject key identifier:   FC:3D:68:54:C4:6A:CE:C7:0B:50:A1:A4:A7:1A:3A:74:F9:53:5B:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC492498178A2800FAE4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e18ef0-202b-3830-9996-d1e736e72cee.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.36.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:92:49:81:78:a2:80:0f:ae:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=32ea5153-c79f-4289-88d2-9d114c34ede9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:37:60:0e:77:ff:e0:ca:ba:e5:6c:a2:63:
                    70:b8:0a:13:7d:9a:43:6f:b2:ee:ba:44:12:bd:e0:
                    3a:a4:7c:80:19:e7:a1:c4:ee:ed:79:2d:50:7d:15:
                    22:b9:10:0e:28:ef:80:f5:ce:2a:3b:fa:46:18:69:
                    ee:dc:f1:63:dd:62:e7:d7:1f:b7:a5:61:63:7d:b4:
                    f6:96:7b:a6:47:9e:14:b8:8a:0f:c6:99:c0:2f:b8:
                    1c:21:3f:e6:65:81:91:ab:d0:1c:f9:dd:ec:38:91:
                    7f:cc:b7:f9:75:0f:cd:06:db:c2:61:d6:e8:77:dd:
                    d7:b9:71:87:9c:c0:92:8f:6d:28:e3:2f:71:2e:fc:
                    de:73:12:ae:f8:b7:d4:bd:75:2f:7e:25:8f:ce:f1:
                    cf:48:0a:aa:bb:71:4d:98:90:c8:1c:ed:e3:1b:e9:
                    73:a4:f1:0e:d4:a5:e1:75:f3:a4:33:15:51:bf:20:
                    5b:66:1a:1e:83:a8:01:93:b6:60:22:72:62:8b:38:
                    c1:79:db:fb:0a:97:8f:a5:31:7b:d8:f1:86:1a:a0:
                    da:68:6c:fa:d8:63:19:73:f5:3e:ca:97:36:c4:39:
                    88:2c:a7:1d:dd:63:9f:df:91:5b:7f:49:8a:85:7d:
                    5c:ce:ea:05:f2:0b:c1:ec:90:96:46:92:51:e3:be:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:68:54:C4:6A:CE:C7:0B:50:A1:A4:A7:1A:3A:74:F9:53:5B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e18ef0-202b-3830-9996-d1e736e72cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:21:51:00:7e:ef:03:50:e2:7b:d7:ab:1c:ed:fc:c2:ca:
         3b:dc:76:cd:0e:84:e3:7e:6f:72:f5:46:18:8a:af:a6:e5:d4:
         25:89:91:61:dd:d7:04:87:d9:38:ba:6d:e5:ef:6f:87:17:d7:
         a6:72:87:70:2b:34:d6:9c:32:f7:cc:9c:03:2d:34:e2:d5:05:
         61:c7:88:81:ef:5b:c6:d5:fd:5e:41:9a:98:f5:6a:90:e6:de:
         fd:96:80:27:bb:3e:11:87:65:93:66:3b:75:42:77:a2:97:96:
         b0:56:7f:aa:8e:0c:81:b4:96:a6:08:3d:2f:38:6a:60:23:85:
         62:50:16:3a:c6:79:37:72:64:0b:e3:31:cb:85:e0:40:22:6a:
         3f:e9:5b:b9:00:2e:fa:e4:23:ff:76:50:53:ab:7b:a7:70:09:
         91:6d:98:d2:03:03:82:28:48:58:fd:1d:8d:89:00:8f:e6:cd:
         4a:7a:96:9a:5b:e2:6c:23:d9:55:d1:ab:b7:c2:bc:99:77:a5:
         dd:0b:1a:cf:65:04:d4:77:e8:9b:f9:70:98:3e:f7:be:63:dc:
         03:7b:c7:0c:94:47:a0:33:8d:b7:b4:d6:55:9e:68:ca:e6:f1:
         47:2d:42:38:d4:b7:7c:3e:27:8d:c1:3f:dd:80:79:6f:db:7c:
         00:55:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:56:54 2025 by rpki-client