Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac5804f2-c000-338f-9c9c-c2a9861a1683.roa
File:                     ac5804f2-c000-338f-9c9c-c2a9861a1683.roa (raw, json)
Hash identifier:          Jto/gmV+tdLxSq9gKUxVwY8QkoIsPdp058p3NKmqVSM=
Subject key identifier:   50:16:60:97:E4:7B:79:C7:6B:00:94:3A:22:7E:DF:FC:D1:82:89:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC434BF3DEBE9C4882EB7E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac5804f2-c000-338f-9c9c-c2a9861a1683.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        67.176.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:34:bf:3d:eb:e9:c4:88:2e:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=db91b439-34b1-49fc-acec-5c398f2565f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:e2:67:f4:f5:6d:34:b4:44:77:ae:2b:9c:
                    34:8c:7e:d0:a1:81:37:fe:c5:02:67:e2:8c:b4:d8:
                    dd:db:77:5f:ac:29:74:14:03:15:8c:a6:d4:2f:5e:
                    ee:78:18:99:1b:14:19:f4:fd:a0:71:3c:a7:00:49:
                    9e:6f:95:b6:38:c4:3a:fb:03:b5:7a:88:df:cd:e1:
                    c1:e5:e4:53:cf:b5:7b:93:40:d3:dd:cf:7e:4a:c1:
                    db:75:36:d9:83:e6:29:da:01:ff:d9:a1:f6:38:a3:
                    49:bf:4d:80:c9:ad:c3:02:14:80:36:11:ec:9a:56:
                    6b:73:f0:c7:e2:f2:fa:b7:bc:15:1c:67:ac:81:0b:
                    21:70:87:22:6b:62:a6:b8:2f:29:89:e7:93:ba:b2:
                    0a:1c:42:2d:e6:0f:f5:05:27:fb:5c:61:ef:53:82:
                    8a:67:61:83:ab:59:f7:df:41:11:b7:2e:86:b2:66:
                    a7:62:6a:3d:ef:2f:94:bd:ce:bb:b4:59:be:ac:71:
                    59:8e:21:35:b2:c6:5e:86:8c:96:d7:43:58:aa:4f:
                    f9:85:f6:f1:70:17:9d:5e:23:b0:50:7d:a6:bb:89:
                    08:b0:b8:15:41:59:16:7a:48:9e:44:be:e6:0b:50:
                    fb:b1:34:d5:3c:46:43:4c:cd:ac:07:96:8e:77:23:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:60:97:E4:7B:79:C7:6B:00:94:3A:22:7E:DF:FC:D1:82:89:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac5804f2-c000-338f-9c9c-c2a9861a1683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.176.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:0e:81:f4:9f:f8:5c:c3:9d:2f:d0:22:e7:60:60:99:61:
         8b:b6:55:b7:6a:33:52:62:f9:85:c8:f9:3b:6d:6e:62:ab:da:
         cf:ba:96:12:e6:f9:f3:cb:9b:11:79:62:24:b9:57:c8:c4:c5:
         67:6d:cd:95:1b:68:2f:f8:14:0a:c6:3e:d9:6d:74:02:9e:89:
         38:3d:64:c2:a1:f8:94:8b:ef:93:49:82:10:87:5b:3e:c6:d7:
         f5:5e:89:37:3b:84:1c:7f:53:28:de:19:4a:1b:fd:d6:aa:44:
         af:fb:90:1e:0b:80:9e:8d:49:aa:94:c5:4e:85:c3:5e:08:48:
         a1:5c:cc:a1:ee:90:db:ca:cb:6f:a5:27:84:0f:5e:58:4f:f5:
         b4:ba:e4:d0:f4:ad:25:f7:c0:11:74:7b:97:c5:a8:eb:5f:ce:
         14:7c:9b:32:a0:40:2b:6c:b7:72:4d:8a:04:e0:fb:b4:23:1d:
         c1:70:df:43:e6:77:3f:8f:6d:92:83:53:2f:17:2d:7a:e8:2f:
         be:50:33:8b:97:ee:07:21:83:99:d0:1a:cf:40:28:c1:32:4e:
         19:aa:51:ec:6b:55:f4:4d:24:bd:80:c7:19:fa:cd:cb:6f:46:
         c8:b9:ca:3e:24:31:e4:92:b3:23:47:59:d4:5b:e0:90:74:1a:
         04:2f:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:39:10 2025 by rpki-client