Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa
File:                     a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa (raw, json)
Hash identifier:          IwoXysM5g7gWtN1GPxFXh7dr4qwVMfDScctgswQuGAQ=
Subject key identifier:   3B:0A:ED:BB:A9:09:22:5C:E0:49:D7:E0:EE:41:C6:31:09:75:59:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC26A73088BE01015887E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.209.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:6a:73:08:8b:e0:10:15:88:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e49579c0-0175-4b06-bf21-530a3ac92f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:b3:82:76:0e:ba:eb:84:65:48:11:ec:7d:
                    50:13:db:65:b5:a5:b1:ad:68:28:69:94:98:a3:40:
                    09:db:86:1d:15:6a:02:94:a6:bc:d3:33:57:ce:e5:
                    bb:59:a2:6d:66:08:7b:21:95:56:17:b7:22:a6:8f:
                    db:78:63:7a:10:9b:6c:14:60:89:03:1f:aa:3b:1e:
                    39:d7:01:95:06:16:d8:f3:46:35:fb:83:78:e6:3a:
                    d1:68:42:67:e6:f0:5c:59:17:31:40:8a:94:03:f6:
                    69:a3:df:67:af:3e:32:1b:80:38:fb:f3:79:2e:a0:
                    6b:65:40:ba:9c:b4:75:bc:6a:09:31:58:1d:c1:00:
                    c8:35:4f:69:db:d7:4d:02:d7:02:94:66:6e:92:a7:
                    b7:19:cf:ae:89:b9:49:82:06:84:f2:77:a3:92:1e:
                    3c:e9:29:01:25:11:1d:18:1c:a7:6f:1f:76:3a:81:
                    41:0f:2e:17:a5:41:dc:c3:2a:19:87:1c:d5:a5:b0:
                    09:7a:ed:11:e5:0d:70:ee:3e:47:ef:1c:64:9d:a5:
                    a6:d2:c4:ca:5d:4c:83:6e:c5:ac:fc:5b:40:65:8f:
                    1b:0a:0d:b4:6a:27:e4:88:24:68:5e:96:ee:93:a2:
                    da:98:c4:95:a0:5c:db:fa:26:b7:7e:05:62:01:2d:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0A:ED:BB:A9:09:22:5C:E0:49:D7:E0:EE:41:C6:31:09:75:59:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a54bbafa-2ca8-30de-87f1-a8bf074d5865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:d4:6c:d6:39:8d:21:89:bd:02:dd:43:82:38:d2:c2:e5:
         2d:22:83:20:4b:d5:58:e8:88:a0:5b:61:b4:31:6b:94:6b:89:
         57:c9:53:55:5e:0e:82:b3:a0:e2:6c:de:67:7f:67:b3:ad:c1:
         04:af:b9:c4:c4:fa:6a:0e:7c:24:83:51:65:98:b7:bd:85:ba:
         74:3c:fe:d8:c5:51:73:30:3b:c6:68:ae:fe:c4:eb:49:2e:da:
         69:c2:28:7a:38:59:cd:e9:f4:e4:4b:17:57:1c:75:b7:7a:02:
         82:0d:06:e2:d8:8c:4b:2f:7c:1a:ec:76:59:f2:4f:cc:b6:f1:
         a4:19:18:72:a2:a2:83:5a:df:af:80:af:53:88:94:59:bd:0a:
         63:86:78:f2:5f:65:41:92:d7:80:c7:51:76:b8:ae:08:c4:3f:
         f4:c6:21:18:21:00:21:e9:ec:6a:65:c0:91:ce:d3:ba:7e:4a:
         ed:1f:f6:1b:11:b9:ab:59:a5:aa:31:95:1f:d5:d9:34:3a:4a:
         6b:9f:ba:f6:47:d2:60:97:d5:89:7d:d4:94:fb:bd:32:6a:71:
         ec:e1:2d:92:e8:70:a4:69:84:a4:a3:b9:c5:02:a8:76:1a:f1:
         74:88:db:6a:8e:f5:8c:ea:ee:51:9a:37:78:9d:7b:b9:d9:1f:
         43:af:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:52 2025 by rpki-client