Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2690e04-1629-36a6-8762-39574fd02378.roa
File:                     c2690e04-1629-36a6-8762-39574fd02378.roa (raw, json)
Hash identifier:          pjR7l1JF64JtfEEs853wvW4MrmAa3AimohzZ6wcyFDE=
Subject key identifier:   40:7A:10:D6:7C:C2:8B:00:29:2B:F1:9B:5F:7E:15:F0:75:81:80:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4A5BF5FA4B3D2CF4C4C90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2690e04-1629-36a6-8762-39574fd02378.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.72.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:a5:bf:5f:a4:b3:d2:cf:4c:4c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9472f2d6-0866-4fdd-8cb8-4068cccc8b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:84:a0:5c:1c:15:57:b3:a0:0e:20:1d:7b:
                    66:f0:2b:4f:0b:06:2c:18:83:73:09:78:f5:a8:e4:
                    ed:9b:c5:20:f3:9a:27:bf:7f:c0:dc:81:71:13:2d:
                    f6:b0:94:e1:c7:4e:63:a6:90:5a:82:66:f2:d1:07:
                    be:37:2b:b3:26:13:ae:fe:97:92:9d:51:33:7b:7c:
                    6a:5b:ac:4b:2a:3a:9f:11:e0:fd:85:4b:87:c2:6e:
                    f0:53:b9:c1:21:6d:98:4e:69:41:20:97:fc:73:1f:
                    f8:fa:0f:30:9f:36:1c:58:af:65:d3:e5:29:4b:18:
                    92:76:f3:47:08:fd:1e:df:21:1e:3c:ff:66:3c:6d:
                    bd:5a:6e:82:dc:ff:46:48:41:ba:1a:1e:a9:86:5d:
                    5d:d4:88:ab:15:22:18:e1:6f:f5:0d:42:c7:50:5f:
                    fd:99:9a:a3:47:56:e5:c1:d5:ec:ee:00:95:ff:c6:
                    c9:17:26:84:6c:05:27:46:45:e0:21:ea:c1:f2:e8:
                    fb:6f:a9:36:54:e0:57:f7:63:37:14:71:58:a3:59:
                    c2:3a:d9:8d:c5:02:1c:00:75:fc:fb:87:dd:44:ec:
                    99:1c:ac:ad:3a:e3:3b:2f:56:f1:33:00:78:14:0d:
                    b6:43:f2:1e:53:c5:41:7e:13:72:fa:71:b9:ce:97:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:10:D6:7C:C2:8B:00:29:2B:F1:9B:5F:7E:15:F0:75:81:80:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2690e04-1629-36a6-8762-39574fd02378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.72.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:bf:e5:fb:ca:41:39:61:2a:4c:11:24:28:93:f6:06:74:e7:
         97:19:c8:bb:d0:88:3a:cc:d5:5e:60:41:40:6f:4d:48:7c:59:
         85:4b:c7:0c:30:d1:6d:c3:f8:ae:8f:b9:ef:d4:a0:d0:14:24:
         59:54:91:72:1c:25:da:eb:7a:62:e4:01:b1:c0:ae:d3:8d:1c:
         88:c3:84:4e:44:60:5e:df:f1:e4:b3:e3:6f:31:0b:ed:20:0c:
         9a:4d:08:38:98:ba:76:82:e0:70:12:62:47:9c:f7:9a:f5:10:
         b3:e5:08:93:8e:ca:d5:ee:cc:cb:07:f9:75:c8:f4:5f:38:71:
         95:36:eb:92:8d:87:f1:f6:ed:2e:8f:e5:16:4a:02:1c:bd:82:
         ee:f9:a0:0b:8f:e0:78:c4:0b:63:96:d9:7c:7d:09:49:bc:f2:
         07:3a:39:b4:24:8d:28:df:7a:a9:45:51:78:48:87:78:fb:90:
         58:8e:5e:ea:45:0d:49:7c:45:fb:06:a7:3f:64:e1:5d:94:6c:
         7f:69:69:87:6f:92:a8:95:79:25:76:df:06:72:5c:02:9b:f9:
         b0:da:77:53:af:ad:77:01:2f:9d:c0:f4:8f:1e:af:df:14:2f:
         a6:2c:0f:08:ff:12:ef:d1:30:66:30:0a:e3:76:a1:33:0a:cb:
         03:fd:24:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxKW/X6Sz0s9MTJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
OTQ3MmYyZDYtMDg2Ni00ZmRkLThjYjgtNDA2OGNjY2M4YjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GeEoFwcFVezoA4gHXtm8CtPCwYsGINzCXj1
qOTtm8Ug85onv3/A3IFxEy32sJThx05jppBagmby0Qe+NyuzJhOu/peSnVEze3xq
W6xLKjqfEeD9hUuHwm7wU7nBIW2YTmlBIJf8cx/4+g8wnzYcWK9l0+UpSxiSdvNH
CP0e3yEePP9mPG29Wm6C3P9GSEG6Gh6phl1d1IirFSIY4W/1DULHUF/9mZqjR1bl
wdXs7gCV/8bJFyaEbAUnRkXgIerB8uj7b6k2VOBX92M3FHFYo1nCOtmNxQIcAHX8
+4fdROyZHKytOuM7L1bxMwB4FA22Q/IeU8VBfhNy+nG5zpeWeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEB6ENZ8wosAKSvxm19+FfB1gYC6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI2OTBlMDQtMTYyOS0z
NmE2LTg3NjItMzk1NzRmZDAyMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANe/5fvKQTlhKkwRJCiT9gZ055cZyLvQiDrM1V5gQUBvTUh8WYVLxwww
0W3D+K6Pue/UoNAUJFlUkXIcJdrremLkAbHArtONHIjDhE5EYF7f8eSz428xC+0g
DJpNCDiYunaC4HASYkec95r1ELPlCJOOytXuzMsH+XXI9F84cZU265KNh/H27S6P
5RZKAhy9gu75oAuP4HjEC2OW2Xx9CUm88gc6ObQkjSjfeqlFUXhIh3j7kFiOXupF
DUl8RfsGpz9k4V2UbH9paYdvkqiVeSV23wZyXAKb+bDad1OvrXcBL53A9I8er98U
L6YsDwj/Eu/RMGYwCuN2oTMKywP9JAg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:23 2025 by rpki-client