Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca45d12a-e5b4-33c3-be2f-33db60b8be54.roa
File:                     ca45d12a-e5b4-33c3-be2f-33db60b8be54.roa (raw, json)
Hash identifier:          NoeBbWAfJ2zYoECTlxlBG7hj6sQAhWNEFTlS+vR4+/w=
Subject key identifier:   6B:05:B1:4F:BF:2A:12:D0:EF:9F:9C:3B:75:FE:F9:BC:52:12:30:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1839845C736B00425BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca45d12a-e5b4-33c3-be2f-33db60b8be54.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        71.59.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:83:98:45:c7:36:b0:04:25:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=6388dede-7a8c-4058-aa91-b2a23034c6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:c4:da:e9:7e:d0:1e:4e:f6:7a:d0:fc:75:
                    6a:a1:8f:15:63:7d:fa:af:55:c6:9e:74:7d:22:ca:
                    08:07:98:30:e6:63:e4:6a:a2:4b:0a:ec:8b:c9:b2:
                    01:43:88:74:39:8d:ea:5d:51:d3:ee:30:d7:07:7e:
                    9c:58:5f:2d:df:22:3c:42:d2:5b:b0:c8:88:fb:26:
                    28:fd:bb:40:9c:26:dd:f0:3e:5c:62:32:ff:03:72:
                    8d:0f:b5:c2:6a:ba:e8:2e:90:8d:7c:f1:57:1b:76:
                    6a:45:dd:5e:15:c3:57:c0:e6:b6:88:11:ce:a7:7a:
                    ae:c8:da:78:c4:e7:51:49:a1:69:0e:dd:bd:54:61:
                    5b:6f:2a:bb:ee:68:b3:c5:81:58:d6:b4:75:34:ba:
                    99:97:76:e1:b3:36:d7:88:4f:8c:97:81:22:5d:fc:
                    2a:02:1c:04:e8:e1:c3:0d:5f:5e:5e:91:15:c7:8d:
                    41:81:e4:21:d9:8b:21:80:8d:2d:b1:a2:81:b1:5a:
                    60:e4:14:f9:8b:51:51:da:e8:ed:99:ce:78:ee:9e:
                    75:3b:09:7c:c8:88:ff:a8:81:7b:a4:69:c6:94:a3:
                    c0:cb:62:d3:41:9d:41:62:c3:40:53:e8:53:db:57:
                    94:03:04:f9:dd:30:9e:6a:84:28:17:8e:b5:3f:17:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:B1:4F:BF:2A:12:D0:EF:9F:9C:3B:75:FE:F9:BC:52:12:30:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca45d12a-e5b4-33c3-be2f-33db60b8be54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:bc:85:e4:f0:b2:10:ea:94:2f:69:e3:ba:de:ee:5e:21:
         df:f6:34:9d:e5:9c:de:6a:50:25:7c:2e:7f:82:4d:9f:b8:fa:
         66:c2:fb:f5:3b:48:66:f7:7a:c5:38:f0:a6:ac:a3:0b:9b:1f:
         39:1d:10:bc:20:82:ef:d9:87:d3:a3:c7:95:7d:1f:d2:90:90:
         c7:be:f9:d3:e2:f3:0a:09:79:60:6c:3c:c9:8e:af:c0:42:f6:
         91:7e:80:63:7d:6b:6d:db:e3:d3:ab:b3:1a:47:fc:c1:ac:ac:
         38:84:30:45:b5:33:39:51:a5:f0:8a:63:24:9f:9e:2f:16:8f:
         4e:69:21:1e:64:d4:3d:78:30:fe:51:88:7d:60:4f:f5:0e:73:
         6a:d7:79:91:21:ae:f8:a4:ae:d8:e8:21:7d:8d:a4:6a:4b:00:
         cb:b8:13:98:fd:58:25:aa:08:7c:17:cf:7f:e3:0e:05:d3:34:
         41:20:4f:7d:0f:35:02:ff:37:18:25:06:08:22:e0:71:70:98:
         e7:18:e7:9a:27:06:ee:de:d1:ce:09:ca:6b:b1:c8:7e:6c:84:
         ee:6f:db:30:6c:46:1b:5c:0e:aa:45:49:8c:39:7b:7b:07:5c:
         64:f4:30:b7:e2:47:b3:67:31:2d:51:2a:de:a1:3f:3d:9f:20:
         1b:02:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:54:20 2025 by rpki-client