Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/982fa1a7-d706-30d4-bc8a-dda8f297cefa.roa
File:                     982fa1a7-d706-30d4-bc8a-dda8f297cefa.roa (raw, json)
Hash identifier:          wZAhzJu8y6EMNTAGzI8fK4VjyWY/LLVjrdd+eDx8ZJo=
Subject key identifier:   C1:7B:38:BC:EC:B5:E2:40:1C:32:12:0C:01:B2:06:2E:52:BC:46:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1AF96F51688743D536D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/982fa1a7-d706-30d4-bc8a-dda8f297cefa.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.198.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:af:96:f5:16:88:74:3d:53:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1075903c-e4a8-483f-9ff7-3ea99c66b5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:bc:7b:86:bc:f3:1a:cb:42:0c:84:07:d7:
                    e6:a4:ac:ab:c7:be:40:21:a9:d2:e4:54:fd:27:0f:
                    f4:99:5c:97:a2:2c:01:43:42:d3:d9:24:69:6d:cf:
                    d4:a7:70:1f:b1:3b:94:a8:17:99:97:dc:70:07:9b:
                    c2:11:6b:ab:fa:9d:7a:1b:e5:35:94:1c:9b:01:05:
                    c6:68:7f:ab:cb:16:c0:ab:31:d5:10:34:67:af:de:
                    11:7e:71:11:63:19:01:08:5d:e1:05:c7:7e:10:e1:
                    0a:79:f8:cc:6e:5d:77:ff:00:44:3b:af:71:72:ca:
                    b1:97:37:23:16:ab:eb:de:4b:8c:8f:d9:46:81:3a:
                    13:ac:d4:fb:d1:69:e0:54:7b:5f:d3:e8:50:2f:39:
                    aa:f8:1c:91:46:4d:4e:19:dc:23:89:50:8f:ac:52:
                    e8:4d:90:00:fe:84:21:26:f7:b4:c9:d6:42:6e:45:
                    3c:e6:da:c2:40:6d:d2:0d:69:bf:b6:6d:6c:f0:c1:
                    7e:a0:73:7a:60:02:ae:7c:ba:95:44:b7:4d:5b:3f:
                    d8:77:2a:8b:00:2a:c4:0f:3f:35:b4:a3:12:bf:94:
                    b7:1c:c5:01:3d:6f:fa:e6:b5:d4:11:14:05:d2:6c:
                    9d:8e:aa:39:f9:0f:94:f9:4f:2d:49:1a:21:5b:bb:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7B:38:BC:EC:B5:E2:40:1C:32:12:0C:01:B2:06:2E:52:BC:46:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/982fa1a7-d706-30d4-bc8a-dda8f297cefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.198.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:2d:2b:59:aa:25:58:3a:d4:f6:4e:76:5a:a6:96:82:54:ac:
         f5:d2:83:ae:29:2f:7a:29:a7:94:94:f6:2b:42:f0:19:ee:8f:
         11:b2:1d:c9:0b:da:9b:22:e6:b0:19:3d:40:90:30:fe:b9:d7:
         46:ef:6e:59:7f:1c:48:3a:16:d5:f3:00:3d:e0:fd:ec:9a:65:
         9d:68:fa:e4:07:0c:e8:a1:b7:4e:ac:a0:02:e7:83:c4:e2:8f:
         ec:03:6a:b0:aa:e6:55:e0:41:47:0e:18:cf:08:b2:ac:d4:fd:
         c5:6e:81:72:26:f3:0a:18:ec:b5:9e:2a:9e:31:b7:43:5d:b9:
         8a:d9:ba:73:2d:55:34:29:95:3e:1e:af:2c:4b:29:1b:aa:18:
         a4:75:0f:fe:e6:df:79:24:eb:76:19:4d:d4:10:01:a9:e3:6a:
         c5:16:8e:3d:e1:49:c0:e8:b3:f3:40:08:91:03:9f:0c:dd:10:
         8e:b6:69:27:7e:25:1e:98:86:24:7d:c5:1b:d0:79:0e:73:ec:
         b4:99:95:02:8a:9c:67:f0:f4:0f:47:4e:0a:64:d9:0e:fb:29:
         76:49:ed:a2:e4:1e:ef:2d:9e:be:7e:20:80:52:df:e2:a1:f8:
         3a:36:a2:27:6a:c7:b7:96:7e:9c:0f:76:2a:ee:ea:5c:1d:e8:
         65:5a:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:12:57 2025 by rpki-client