Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af9da0e0-992f-37c2-b9af-a34e76ade224.roa
File:                     af9da0e0-992f-37c2-b9af-a34e76ade224.roa (raw, json)
Hash identifier:          V4AEJZ/8KEQG49IrrtoZi/2yPEKbYY7xOeL4+Dv1ngg=
Subject key identifier:   B4:BE:41:F9:64:03:A3:68:53:54:A0:AF:36:0C:1F:8C:86:F0:FE:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC498C5603143122855AB10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af9da0e0-992f-37c2-b9af-a34e76ade224.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.45.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:98:c5:60:31:43:12:28:55:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d13246fc-c338-4355-9add-33deab303476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:19:96:85:78:66:0e:6a:cd:83:56:2b:08:
                    31:70:0c:ba:db:6b:82:89:6b:ea:55:3a:a4:6e:fd:
                    7e:1c:da:f8:b1:da:13:62:db:a3:05:d7:97:4f:e2:
                    07:c9:fa:7a:1f:4f:63:0b:a0:8f:25:c3:a0:a6:a9:
                    b5:2b:88:99:38:93:ff:5d:bd:c7:78:ad:e4:64:a3:
                    67:bf:e3:12:7e:58:e7:e1:a4:59:65:21:4a:8d:cc:
                    db:85:83:b0:a0:9e:c7:20:b9:ff:3b:69:ab:e9:d3:
                    b1:ba:23:c8:56:77:73:03:09:65:3b:34:ab:43:42:
                    0b:2e:f9:35:70:2c:ea:f6:de:a8:43:86:1f:a1:7e:
                    5e:be:27:b4:06:d7:d0:7a:89:10:45:58:2c:ea:f7:
                    21:78:4b:14:96:53:41:8a:16:a8:45:6d:0b:1e:db:
                    41:de:1d:b8:6c:b1:2f:53:91:6a:43:c0:0e:c8:0f:
                    7b:d2:46:4e:3d:59:1d:5b:db:7e:37:8e:98:17:02:
                    75:2e:63:08:98:29:b0:f0:01:b2:42:92:e0:40:30:
                    a4:3e:3d:cc:c7:08:dc:b2:e9:99:86:80:92:99:ca:
                    75:e4:d6:48:97:d9:07:ae:e3:b0:28:49:9d:22:99:
                    dc:04:e8:fe:26:59:fb:ee:13:00:d8:20:e0:4a:b3:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:41:F9:64:03:A3:68:53:54:A0:AF:36:0C:1F:8C:86:F0:FE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af9da0e0-992f-37c2-b9af-a34e76ade224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.45.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:17:74:a6:03:c1:49:f9:9d:d8:dc:bb:44:05:04:95:e6:16:
         cf:5a:f7:6f:df:36:c2:f3:8f:3e:a4:26:9d:36:04:47:56:79:
         59:f6:13:76:77:d3:7e:d8:71:68:56:c0:37:1c:b0:61:3d:24:
         03:90:3b:54:75:cd:88:df:dc:05:70:15:bd:05:05:02:b4:fe:
         58:0e:11:e6:8e:a4:21:33:a1:2a:95:01:3e:6c:a5:d7:a6:9d:
         44:1b:9d:40:a9:9d:9e:9e:eb:b1:ef:31:71:a6:8c:16:78:3f:
         75:87:34:d8:cf:80:41:8d:66:7d:90:45:28:53:6e:28:14:05:
         82:58:77:5c:db:28:b4:b6:75:7b:b5:db:40:19:3e:22:10:c9:
         c5:1b:52:8d:76:0a:5c:bd:50:bf:11:f4:a8:05:af:4b:98:81:
         0f:ed:ea:53:15:fa:26:b7:f7:4b:f6:6c:1b:c0:46:b2:6d:18:
         7a:24:36:03:e1:70:56:93:02:ed:dd:96:e0:2b:53:99:13:89:
         e3:47:6c:3f:87:48:25:5a:fa:c2:ec:3a:22:93:34:6a:98:c7:
         b7:4e:e7:f5:ca:e4:5f:c4:39:9c:2d:3b:76:80:69:55:d2:88:
         c6:7b:c7:b9:2e:0d:40:b4:e9:af:88:77:75:27:94:63:6a:0c:
         f8:28:01:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:59 2025 by rpki-client