Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b55ae05e-5560-3ec1-80fd-4dc79f4513ed.roa
File:                     b55ae05e-5560-3ec1-80fd-4dc79f4513ed.roa (raw, json)
Hash identifier:          ALmKjP5fLwFJ+R013+7RdGE5O3v/plWwxDa6rrpZHSg=
Subject key identifier:   A6:0E:40:B2:8E:5F:64:DB:7E:36:23:66:B5:F7:CF:F3:9C:D2:AE:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1619DB0D2B091FA401180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b55ae05e-5560-3ec1-80fd-4dc79f4513ed.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        73.52.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:61:9d:b0:d2:b0:91:fa:40:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7227e16d-1ac0-491b-bee9-81f756cb32f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:86:7e:90:18:63:68:c7:69:e8:73:15:96:a5:
                    2e:e5:66:80:94:d6:13:ae:89:26:c4:5f:34:05:77:
                    24:61:0d:a2:a8:4e:8d:f8:e9:cd:c0:80:f6:4e:b9:
                    61:4a:c7:da:e1:ff:d0:b7:8d:4f:7a:a9:f7:c2:cd:
                    c5:27:8d:20:f7:a4:00:72:7c:6f:00:4a:6d:17:83:
                    70:90:9c:df:ea:67:0a:23:7a:2a:4f:79:63:30:87:
                    ee:71:f7:80:4c:46:0c:be:c6:52:8d:62:ac:57:b5:
                    c8:ce:52:50:1e:f4:f9:3b:3d:98:1b:cc:46:37:b0:
                    0a:7b:22:2d:7d:04:02:ce:c3:be:38:be:00:3d:3c:
                    13:da:8a:50:04:65:1d:ab:8e:12:8b:da:db:67:61:
                    7a:50:bf:6c:30:3c:e9:37:25:f3:77:05:a5:c7:a8:
                    a8:18:9a:bf:12:19:c7:45:b4:26:27:15:b3:f0:f0:
                    75:fa:ea:f8:7c:a9:20:af:63:ac:d4:a0:92:5a:20:
                    7e:ae:1e:4f:78:51:fe:ef:1c:05:aa:bd:7a:b2:67:
                    83:b8:5f:ee:9c:e7:e2:09:f1:af:9f:ac:dd:83:7d:
                    bc:a9:d5:8b:76:b9:85:75:e2:89:8d:df:35:e7:50:
                    cb:4f:55:99:d7:08:2b:f6:59:a1:ac:2b:31:b6:6c:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:40:B2:8E:5F:64:DB:7E:36:23:66:B5:F7:CF:F3:9C:D2:AE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b55ae05e-5560-3ec1-80fd-4dc79f4513ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.52.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:19:3b:70:e7:f1:cb:f3:fb:09:44:3c:29:e5:e4:1e:d5:
         50:b9:8f:8d:8b:01:af:da:9c:28:e7:58:d0:cd:62:13:12:8e:
         c9:d3:e7:9b:a5:bc:58:6c:6c:aa:c9:4b:9a:d9:bb:94:ef:ed:
         77:e3:e2:5e:f5:09:69:22:41:3c:e3:98:be:a8:21:f1:ce:8e:
         2a:39:22:6b:f9:0f:d2:b3:6e:f4:0e:94:ef:f1:bb:ab:0a:de:
         d9:be:47:ba:eb:70:39:53:f3:23:6d:ed:8e:37:24:37:9d:31:
         56:e9:64:0c:e8:56:72:5e:d4:95:d2:73:df:24:15:21:22:00:
         4a:96:be:2e:62:96:c5:86:74:66:24:ad:77:c8:a2:bf:bb:91:
         3a:7c:93:9c:1d:5d:63:57:f3:2b:e5:df:15:0b:05:7b:cf:97:
         6a:30:c0:69:b1:14:62:18:6a:8e:ed:49:0f:d1:d3:72:5a:cb:
         96:c1:59:9e:9e:be:41:87:e4:f0:ff:b0:bc:ee:4d:99:f3:22:
         6e:27:20:7c:90:92:9e:fd:c8:2a:68:34:b6:a6:c4:8b:d7:86:
         c9:f2:a1:58:36:14:3e:88:d9:ad:ba:25:df:ba:24:37:ce:28:
         a1:11:63:5e:d1:24:9f:a0:45:8c:1f:38:90:e1:c3:b3:c8:6a:
         e3:85:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:04 2025 by rpki-client