Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e7df98-4d83-3377-9a19-114a20115475.roa
File:                     a6e7df98-4d83-3377-9a19-114a20115475.roa (raw, json)
Hash identifier:          FvEj853WsDwZsqggr3uZYKp4kfdnI0CPyn0L22C8zPU=
Subject key identifier:   F3:29:F8:A7:40:B1:A9:1E:C1:3F:31:A5:BE:60:15:05:85:83:18:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC25618E1ED20B10468D3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e7df98-4d83-3377-9a19-114a20115475.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.110.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:56:18:e1:ed:20:b1:04:68:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=63bcf6f5-0945-4b00-91fc-9988408428e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:0e:a1:3a:22:89:d7:dd:b4:11:f5:0c:72:
                    e1:ec:41:35:6b:89:f4:d7:22:91:db:9b:c8:c5:24:
                    d3:0a:b4:d5:e1:06:eb:ba:4d:b5:a8:f5:ce:60:cb:
                    c7:0b:e5:65:0f:10:8a:d2:d6:15:ca:be:43:21:c4:
                    d9:cb:d6:88:a7:3b:fa:d5:5c:65:92:8c:05:06:83:
                    e3:f8:af:ee:d8:96:b5:ad:f3:77:87:8e:f6:e7:83:
                    bb:30:16:51:18:53:16:03:04:d9:c1:1a:89:fa:30:
                    17:4f:21:d6:69:01:c1:57:7f:fa:71:19:d0:21:52:
                    78:8d:38:f7:fd:93:e2:0f:3e:19:f0:9c:bf:e7:7b:
                    32:51:68:67:88:2b:e4:2b:3b:97:22:26:13:93:b1:
                    57:f3:b3:d0:71:ec:02:96:b5:67:53:09:67:b1:98:
                    62:2a:68:1e:76:62:dc:75:09:5c:0c:e3:5e:c5:d4:
                    a2:2f:4c:9e:19:cb:7d:29:b4:0a:5d:c2:67:f6:ea:
                    99:00:6d:2d:4e:c6:e9:30:af:8a:19:5b:af:55:98:
                    21:15:68:d2:2f:df:3a:87:9e:d4:13:c2:0d:97:c4:
                    b4:78:4a:00:45:58:5b:66:b6:31:a5:93:ec:71:50:
                    a4:b9:8a:33:07:04:9c:ac:73:4d:ed:30:6f:57:17:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:F8:A7:40:B1:A9:1E:C1:3F:31:A5:BE:60:15:05:85:83:18:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e7df98-4d83-3377-9a19-114a20115475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:85:d7:57:44:50:5a:a1:be:2a:91:33:d7:8c:87:ba:e8:32:
         43:ab:09:32:e4:c0:d7:b2:c5:15:ae:2c:08:ad:a1:c2:1c:1c:
         5e:ed:a4:f7:44:42:d7:de:49:4d:d2:7f:82:8d:16:4b:3e:de:
         06:b3:fc:e8:99:92:55:ec:1b:da:1a:ff:de:62:99:6e:81:68:
         04:7f:1d:4c:2d:68:7c:f0:0e:7c:3d:60:8f:95:d7:8b:c1:db:
         bd:21:ce:32:6b:12:37:69:20:84:a5:17:8f:20:f0:30:6f:d0:
         9b:d1:8a:40:f2:ab:1e:ba:ed:c3:aa:85:2d:d8:c9:ec:9a:be:
         f7:53:af:f2:35:63:b5:cb:ce:57:6f:19:2f:d4:42:3d:ab:26:
         1d:97:14:20:9e:1e:53:92:30:26:da:ef:71:04:b6:46:77:db:
         03:b9:53:9b:b7:c8:91:b0:d6:5e:5a:1c:e8:7e:17:b1:f2:e8:
         eb:f9:25:ba:77:4c:d8:91:17:8d:7f:61:94:62:45:ac:0a:cc:
         3f:d2:1b:3b:26:71:fc:d2:cd:7d:55:c6:7e:f3:a8:53:df:40:
         76:8f:fd:fd:b5:e7:bc:49:f3:0c:6a:01:e3:20:6e:d5:a8:80:
         a6:5b:57:04:62:c6:67:6a:89:e9:fa:f7:27:0d:d8:8b:9a:09:
         63:8c:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:16:13 2025 by rpki-client