Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa
File:                     d12b48af-2341-3795-a912-e5a8a93eb32b.roa (raw, json)
Hash identifier:          TCLBiUXPqCENCkY51359uCINTwv5/40fcBy3DW99KBw=
Subject key identifier:   51:68:8A:ED:72:C3:15:09:31:E4:40:87:5D:95:4A:8B:2B:2B:14:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1B35199FFF5310FBB9400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.199.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:b3:51:99:ff:f5:31:0f:bb:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0a2188c3-c1e3-4a9d-8240-095c572e1eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:c9:bf:c3:51:a3:28:c5:50:3c:6f:1c:19:
                    49:79:08:0c:61:ec:aa:13:f3:43:48:bf:db:46:a7:
                    1e:e1:a3:68:83:e6:88:f5:c3:48:1d:ab:06:81:38:
                    ab:a3:89:16:7c:d9:d7:78:2d:92:d4:c5:7f:56:f2:
                    0f:0f:a8:a2:ce:6b:93:5b:7c:0e:fa:8a:2c:90:ae:
                    82:b2:9c:72:11:c8:b4:cf:1e:21:da:83:9b:64:df:
                    92:db:bd:fe:3e:8f:3b:ce:49:7b:dd:56:ca:e8:b4:
                    42:a9:d3:3d:84:fc:b6:1d:90:ac:0f:9f:b4:5a:25:
                    b1:3f:dc:d1:cd:d6:6e:be:ab:7e:f9:ed:fe:25:df:
                    99:6f:39:4c:4b:9f:3d:46:1d:9b:d5:7a:f5:35:03:
                    de:db:ef:fd:c1:c7:11:97:b1:79:1a:8d:d2:82:6e:
                    74:a8:01:3a:81:8a:4a:9d:05:3d:7f:4e:80:cf:6a:
                    b9:cc:d7:d4:40:4a:49:1b:2a:c0:1c:99:47:c7:40:
                    01:e1:94:95:e4:fd:d5:98:eb:df:c4:ef:f4:1e:1b:
                    0f:ed:7f:58:cb:19:5e:03:7f:4f:89:ae:01:7c:b1:
                    42:f0:66:b7:e9:31:fd:74:c1:13:c8:31:11:6a:57:
                    3e:f1:60:e3:5b:bf:12:e3:5c:3a:11:83:e2:1f:45:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:68:8A:ED:72:C3:15:09:31:E4:40:87:5D:95:4A:8B:2B:2B:14:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d12b48af-2341-3795-a912-e5a8a93eb32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:4b:2a:a7:fe:5f:e4:fd:4d:70:fe:32:66:70:01:8c:94:
         09:39:e8:5f:9c:99:2c:93:d9:4c:73:5a:58:b4:8a:70:d7:15:
         3e:f6:b7:7f:46:de:69:e6:ca:29:45:cc:6f:e1:a7:36:07:b6:
         12:fe:ed:12:4d:f0:d8:f8:1d:24:fc:af:1f:58:29:77:df:50:
         f4:68:2e:61:36:c6:56:c6:db:a5:e1:60:5c:27:13:5c:9b:63:
         21:b0:52:29:14:18:58:c1:e2:17:77:54:46:94:f9:0f:92:fa:
         ed:b0:6d:69:8d:e4:12:ef:e1:71:0c:d0:a5:11:ea:9b:a3:9a:
         07:14:1f:c0:cd:14:f4:e2:d3:5b:82:2b:61:bf:f7:73:79:27:
         83:e5:d3:f2:f3:d7:fd:e2:40:be:34:6f:ef:b7:88:c9:b6:87:
         82:c6:5b:8b:c5:4a:9b:e7:14:5c:00:0c:73:27:96:8e:a7:58:
         78:66:bb:28:6a:7b:a5:21:d3:1f:a2:9f:66:34:e5:57:51:ed:
         6a:16:49:27:53:25:7f:f4:21:4a:15:64:14:52:4b:ee:e7:7a:
         77:88:73:ff:81:f1:e6:48:72:5b:38:6a:f4:1d:16:46:60:0e:
         1c:43:88:f2:ec:81:c5:ee:a8:d2:71:ce:30:fa:13:20:6a:76:
         d5:28:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:06:58 2025 by rpki-client