Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa
File:                     c759ef66-8916-335a-b020-293cf701956c.roa (raw, json)
Hash identifier:          dQm9nrQdB8Obf6lVEkezPAPQheHZ6fP6vHTYUaeZ0Gw=
Subject key identifier:   6D:78:9B:39:B8:DB:F8:75:73:A1:89:32:CE:95:EB:9D:AE:EE:2D:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3E337487DD0702C32F400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        71.225.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:e3:37:48:7d:d0:70:2c:32:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9de3d24b-07f2-4e7b-84e2-e5d73b15f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:10:69:0a:d5:6c:f5:1c:0f:a6:12:87:f9:
                    46:1f:b3:78:4b:73:1f:ef:7a:d0:d0:66:cd:94:90:
                    eb:e6:f3:5e:13:e1:59:20:74:6f:b3:93:47:f3:a2:
                    93:a1:79:82:ef:d4:de:dd:4a:22:ef:e7:8e:7d:1e:
                    01:f7:26:d9:6c:52:d9:3a:1c:cb:10:c5:7c:90:62:
                    93:1d:c3:5d:ed:a2:11:82:1e:d4:27:cd:63:08:f9:
                    f8:68:2b:69:6a:79:6c:52:61:ee:7c:05:e6:8d:a6:
                    4a:6e:7f:f3:04:86:b2:82:96:a5:2f:11:d8:8b:e4:
                    6a:ec:1a:b1:90:f4:31:4e:19:6e:71:07:c5:f4:fc:
                    8a:f5:37:54:ec:ef:d3:10:db:85:fa:db:d5:82:b9:
                    f3:d0:82:b5:5c:4f:9c:e3:36:db:0f:7b:80:ee:77:
                    03:61:02:75:87:18:48:63:4a:24:fb:19:d1:ae:eb:
                    86:bd:b7:3c:2f:99:6c:72:ae:90:a9:b6:e2:e1:9d:
                    11:65:0c:36:55:76:bc:ca:bd:7e:3e:93:21:c7:c9:
                    2b:8c:61:db:ed:6c:6f:83:7d:d6:51:25:22:bc:82:
                    e8:5a:b8:7a:7a:f6:22:8e:64:e6:ed:96:dd:ef:0d:
                    c4:81:ad:07:18:b7:be:87:2c:fc:a4:da:22:e7:ad:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:9B:39:B8:DB:F8:75:73:A1:89:32:CE:95:EB:9D:AE:EE:2D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d9:3d:f4:3d:b2:19:95:13:c7:c7:a7:f0:8a:bf:9d:81:80:
         c7:69:7a:81:da:43:c3:3b:50:e3:90:e4:d1:a8:8d:c3:7d:26:
         56:13:c4:11:c6:a0:bd:c1:a3:53:fe:b5:52:05:2d:8c:fd:d5:
         02:c2:dd:00:bd:36:20:f8:cc:3d:a2:86:f1:d9:4b:31:58:e2:
         05:f5:03:6c:b7:7f:f9:59:c3:6b:7a:c7:d4:28:c2:5e:52:80:
         97:b5:a2:6e:de:0a:a8:03:7a:de:53:ab:53:58:87:e5:e6:8c:
         0d:90:94:2f:fe:07:1f:0b:00:2e:f4:b0:8a:0a:65:c4:46:49:
         d1:77:93:9a:f3:36:05:0d:8c:27:fa:4e:4b:6c:42:54:b1:76:
         bc:e3:ec:00:06:52:8c:64:ad:d3:1e:01:94:da:3d:37:f9:92:
         bd:00:39:70:32:3a:d9:4f:45:fd:35:fe:43:89:3c:fd:35:6e:
         ac:6c:b6:17:82:f5:c3:18:d8:d3:8e:e7:dd:15:d9:81:6d:4d:
         5a:ae:43:7e:08:64:e5:b1:5f:4f:a0:11:8f:88:00:ab:cf:5c:
         2d:fd:64:39:06:cd:e0:e5:8a:f0:62:a3:2b:a7:08:07:a7:22:
         3f:67:47:e8:03:27:2b:47:39:fb:65:66:c1:ee:a1:3b:95:6f:
         5e:2f:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:50:43 2025 by rpki-client