Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d34ffca1-80a4-3e13-b376-75bcfcb9e515.roa
File:                     d34ffca1-80a4-3e13-b376-75bcfcb9e515.roa (raw, json)
Hash identifier:          /RlIuNfKcL0bpXzM5e4KkXyYzl10P6P0wGEuZ4phdB0=
Subject key identifier:   25:C3:AF:AC:12:73:91:B2:D1:5F:C7:62:9D:98:D1:E2:C9:83:7E:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC187D7BA2E662DF521E680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d34ffca1-80a4-3e13-b376-75bcfcb9e515.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.29.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:87:d7:ba:2e:66:2d:f5:21:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0697dfde-b62c-45db-914e-cc6f532e2217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:f3:40:b0:7e:b6:1e:cb:c6:0f:5a:8c:89:
                    2b:53:ee:56:00:f7:8c:5a:ea:97:2d:4f:fe:af:2d:
                    27:72:21:9e:c4:38:3a:0d:0f:15:da:90:13:11:18:
                    aa:85:67:65:26:c5:d9:fe:50:b1:78:9e:34:47:de:
                    43:ec:a9:86:be:f3:63:89:51:60:98:c7:88:eb:3e:
                    0c:d2:fe:bd:cd:de:79:43:47:30:d3:f3:1e:b5:24:
                    a2:f6:50:1b:24:3f:fb:37:52:da:63:e0:60:63:05:
                    12:ba:87:35:1d:ed:e7:e5:56:39:ca:c1:a8:65:6a:
                    8c:06:3f:4e:e6:22:d8:eb:b5:52:f6:74:9e:d6:45:
                    fc:c6:91:25:76:f1:49:07:e7:8a:f2:dd:83:59:07:
                    51:12:43:f1:82:23:7d:8c:ad:b5:87:74:d1:c2:81:
                    ea:70:43:d6:4b:0e:60:f4:eb:11:03:2a:03:2a:f8:
                    e0:79:75:5f:19:ea:44:54:d5:df:b9:ba:97:b3:f0:
                    f9:1a:af:46:bf:be:25:12:0a:a6:a2:03:b6:27:5e:
                    6e:0d:fe:87:76:d3:33:6e:fb:9e:a1:d6:6e:dd:80:
                    1b:0f:46:79:c6:7c:44:bb:c0:35:df:b9:1d:a3:23:
                    74:01:4f:f2:32:64:9c:f7:70:73:f1:7c:ae:57:28:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:AF:AC:12:73:91:B2:D1:5F:C7:62:9D:98:D1:E2:C9:83:7E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d34ffca1-80a4-3e13-b376-75bcfcb9e515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:8e:98:10:82:7f:16:9d:b9:54:7b:f8:d1:66:15:11:04:
         93:03:59:03:a2:96:1b:bb:5c:08:d7:07:20:aa:4a:6d:90:18:
         61:ff:04:a5:d6:b2:93:1a:60:05:7f:85:fa:0f:7f:cb:0c:c1:
         f3:70:29:0f:f7:97:09:4a:e0:2c:59:02:cc:24:28:3a:56:54:
         34:3f:83:31:24:ed:65:17:72:e5:cc:77:bc:3f:6e:a4:26:50:
         85:e6:b6:c1:32:ce:35:05:e4:20:43:56:ab:cd:d6:6a:74:b3:
         b8:18:6b:4c:c6:43:62:7d:a0:e6:a9:ec:cb:28:31:f2:a2:7e:
         58:b7:0d:d7:c9:a3:2b:a6:97:ed:6d:ac:8d:de:65:94:8a:fb:
         ee:6e:4f:2e:d3:81:e3:4a:27:b6:b7:f8:c6:53:52:1d:ab:28:
         13:f9:df:1e:95:7f:5a:e6:42:b4:a1:15:0f:ea:24:cf:49:8c:
         8e:65:7b:b6:9a:33:9e:7d:2a:98:64:8e:30:5c:fe:36:13:9b:
         b5:c6:0b:39:d6:6d:73:0c:17:4f:b2:4e:8a:61:35:e9:b0:93:
         d1:18:d5:ad:a7:de:28:ab:ac:46:92:6f:cb:b2:d1:ea:db:d5:
         10:37:00:ab:1c:38:05:9d:63:d4:d1:31:a9:2d:cb:9e:bb:6c:
         8c:24:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:33 2025 by rpki-client