Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acfbdef4-dcf9-33c0-a588-cafa07c94aa1.roa
File:                     acfbdef4-dcf9-33c0-a588-cafa07c94aa1.roa (raw, json)
Hash identifier:          In/yCdHFYTuJVopj6aUkvNa88dQnBOtzCPBz8gzoOrA=
Subject key identifier:   60:06:81:51:D4:97:40:58:3A:80:25:81:3B:E7:EF:28:4E:57:46:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3FFFCCD94CBCE5941B3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acfbdef4-dcf9-33c0-a588-cafa07c94aa1.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        73.226.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:ff:fc:cd:94:cb:ce:59:41:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c1c5449e-e352-4f83-b527-3680d0cfb760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:c1:cd:67:59:e3:d7:96:f9:85:27:5d:97:
                    ee:ca:30:b1:1f:bb:a1:ed:5a:f9:5c:41:3d:dc:6c:
                    ec:8c:39:37:4a:3e:83:66:c7:47:2a:03:86:02:12:
                    fa:0e:81:15:ae:72:c6:fb:ff:2e:28:cc:bf:bd:f3:
                    34:5a:26:32:b6:ca:a8:e9:6f:8a:14:5c:51:fe:1e:
                    d5:f5:b5:b6:53:16:ce:7f:55:12:5a:8f:4e:d1:da:
                    24:d8:91:97:97:76:4b:2f:df:dd:57:4e:46:d6:59:
                    54:72:8e:bf:be:a1:7d:5c:47:a9:ae:8d:fe:61:f0:
                    7e:62:e4:43:f0:76:c3:44:e5:43:29:fd:f4:d6:21:
                    87:f2:42:6e:4c:90:3c:c3:c4:ce:7f:6f:12:46:18:
                    3f:51:1d:d0:97:a6:a7:78:4b:9c:e8:07:1d:d1:19:
                    c8:14:bb:ff:8e:3e:91:47:d1:ae:c7:52:b2:95:85:
                    b5:ca:eb:1a:cd:2f:4d:65:b5:bb:54:17:17:40:f8:
                    7e:7e:fb:ad:e0:17:db:25:5d:30:8f:1d:a9:da:9b:
                    ad:60:50:f1:84:db:89:18:c5:5f:cf:5d:05:94:5d:
                    d1:d3:b6:b9:df:fa:70:77:33:87:6f:81:e6:70:fb:
                    9d:1e:51:40:52:d0:8a:55:ef:52:9e:9a:19:67:ae:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:06:81:51:D4:97:40:58:3A:80:25:81:3B:E7:EF:28:4E:57:46:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acfbdef4-dcf9-33c0-a588-cafa07c94aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c1:a5:84:75:76:f8:88:cb:ef:13:8e:3a:40:c6:3d:1d:30:
         17:19:6d:d4:98:27:b2:1a:42:6b:90:fa:33:13:70:26:25:12:
         ab:a4:af:fc:de:44:3a:09:f5:b8:ed:4b:0a:e2:09:f1:d7:6e:
         13:89:57:fd:3b:b6:d4:19:1c:4b:46:a7:fe:76:a9:94:a1:34:
         bd:3c:de:2d:c1:c5:db:cd:f4:fd:47:a3:6b:a1:50:46:b7:fa:
         dc:63:e0:d1:15:d8:e2:88:26:39:00:1a:bd:88:b9:fe:0b:48:
         21:6f:dc:25:dc:f4:38:e1:d7:88:ad:39:2b:09:9e:ef:1f:09:
         9e:bd:75:77:1d:4e:42:53:78:17:35:45:2d:98:b0:49:a6:41:
         9c:5a:2b:05:b8:e0:69:3d:f0:9c:77:75:0b:25:1c:ec:ee:7e:
         40:2d:00:de:9b:4c:ae:21:70:c3:70:19:61:5a:9a:25:fd:6e:
         27:85:4c:fe:da:e0:0e:0b:bc:74:a7:ec:85:28:02:b7:60:a9:
         bc:cc:b9:99:36:eb:c4:b9:80:b1:f6:e2:40:b2:83:3c:fd:52:
         b7:bb:08:7f:ea:c5:dd:59:e3:75:e6:17:d2:d2:ae:0c:18:73:
         07:1d:ba:f7:92:52:4d:74:59:ae:1f:97:5d:8e:42:1c:9f:c9:
         3d:4a:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:14:49 2025 by rpki-client