Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bed980f-c286-3c04-8125-9f5575b2aff2.roa
File:                     9bed980f-c286-3c04-8125-9f5575b2aff2.roa (raw, json)
Hash identifier:          fiBeP2+EBv2p5b7tHTLKSeRmkFEILVjA/jdJUOZG1Sw=
Subject key identifier:   EF:AF:CB:4B:6A:94:38:7B:7C:F5:9A:1E:AE:81:D4:38:A1:81:4A:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC25B1247D8E74BD84983C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bed980f-c286-3c04-8125-9f5575b2aff2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.146.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:5b:12:47:d8:e7:4b:d8:49:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2db063e5-ca06-453e-8287-c7817ec64c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:da:92:da:ff:9e:12:28:6d:47:fa:c7:be:
                    fe:cd:27:dc:58:99:30:af:b7:ea:cd:be:6f:fc:2c:
                    69:4e:b2:fe:53:6d:f4:d9:36:4e:95:5f:1c:83:e7:
                    36:c9:02:45:9c:be:15:f2:26:ef:90:d3:53:2b:d4:
                    2e:c6:5d:3f:e6:96:00:6c:d4:66:db:86:24:6d:ef:
                    dd:4a:c6:84:78:d9:cd:70:a5:0c:52:3f:39:85:07:
                    b0:fd:b1:b9:a3:b2:7f:ef:47:e8:e2:be:cd:13:c7:
                    0d:7c:c4:7e:6a:66:21:91:44:2c:e0:75:99:3d:61:
                    db:49:1f:0e:19:04:ee:23:15:ac:22:ac:ae:4e:b4:
                    9c:8d:09:9e:5e:27:a1:0d:88:57:2d:a9:29:b4:38:
                    e5:76:6c:2d:bd:f1:fc:c6:f0:ad:7f:bd:df:99:d4:
                    65:4d:cf:d9:0a:31:3f:6d:ea:ef:47:1e:4b:32:6b:
                    5c:90:25:c7:11:6f:66:a8:de:5f:5c:1a:be:60:37:
                    37:53:62:aa:2b:0b:3d:85:33:65:8d:64:64:bc:fc:
                    85:10:1f:1d:9d:13:4e:ea:97:83:3f:26:65:17:27:
                    71:c5:6e:5b:d1:3b:0c:20:72:14:83:5f:3f:9e:77:
                    59:85:8a:e1:b2:28:aa:86:54:6c:1f:f4:a0:5d:0c:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:CB:4B:6A:94:38:7B:7C:F5:9A:1E:AE:81:D4:38:A1:81:4A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bed980f-c286-3c04-8125-9f5575b2aff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:1c:9e:e3:dd:99:07:2d:22:4e:ee:d9:3a:00:ff:3c:0c:
         ba:50:5c:8e:48:c7:69:23:14:83:14:00:34:1a:67:9c:e2:b9:
         bb:cf:51:24:bb:08:27:2f:d7:a3:ab:6f:c1:ca:a4:93:46:a3:
         a2:97:8e:29:04:2c:a0:d7:2f:ed:7e:c8:1c:00:2f:ad:c9:49:
         3d:a3:76:09:fd:a4:9c:e2:65:54:13:00:71:b8:5f:6e:20:d4:
         c9:7f:66:ac:6a:33:77:bb:a1:78:55:5a:63:4c:35:95:ed:cf:
         f2:e7:46:08:65:e8:ac:7d:0f:b3:e3:0f:5a:13:74:c3:92:77:
         16:9a:27:61:7f:ba:b8:54:cf:30:9e:6d:09:12:e1:37:4f:99:
         01:08:85:ce:1e:8b:67:ef:c7:94:38:ba:13:77:5d:a8:6d:3c:
         3b:e3:4e:c4:d0:b2:4a:13:af:35:f9:08:2a:f3:f6:34:22:5b:
         ec:a9:af:bd:47:5b:d6:01:41:13:ab:a9:10:b6:8e:0a:0f:17:
         e2:6c:da:f9:e3:6c:65:9c:45:ee:f4:6a:ba:ee:38:67:11:33:
         b2:e6:cd:a4:60:9f:08:05:51:ab:d0:b4:8a:e7:8b:fc:18:37:
         1b:4e:96:3f:6d:59:5b:31:1d:f7:01:9c:81:37:5b:52:4a:c6:
         80:35:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:04 2025 by rpki-client