Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6903371-a8c8-389e-a00d-8d93a5fd438f.roa
File:                     d6903371-a8c8-389e-a00d-8d93a5fd438f.roa (raw, json)
Hash identifier:          hY1LqqodQ4noS05WZdERoOMuoLMaMX/jeYjQcG80rSY=
Subject key identifier:   4E:E9:8B:2A:2E:6D:5F:D6:4D:CA:89:C7:C0:DD:4A:47:0D:5C:ED:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC47A1F8D101E310A6D57E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6903371-a8c8-389e-a00d-8d93a5fd438f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.210.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:7a:1f:8d:10:1e:31:0a:6d:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=61100738-3b65-4c5f-ba47-0d2f0f14c084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:f2:f1:97:90:dd:ac:d6:f2:93:24:6e:ac:
                    a6:40:4d:d5:56:40:40:b2:34:94:55:20:ac:88:56:
                    5f:08:8d:e5:61:37:11:8b:50:59:0e:c7:31:2b:46:
                    a0:16:4c:6d:70:87:f6:3a:9c:66:21:c3:e1:db:4a:
                    ec:bc:a2:88:7c:df:39:bd:f8:91:37:29:67:56:19:
                    64:1d:5b:b4:18:6a:79:2e:31:11:e3:9b:a8:5c:03:
                    5b:96:5f:d7:f8:c7:d7:b2:15:ba:81:8b:06:56:ea:
                    bb:80:01:18:b9:4b:e6:51:d5:c3:5d:55:0a:4e:26:
                    78:b8:05:b7:18:ef:5a:0e:63:fa:e0:11:57:36:be:
                    aa:62:48:5c:61:bb:6b:a0:fe:96:c9:21:77:76:03:
                    6c:dd:d3:36:e9:1e:cb:52:66:dc:d1:99:fb:41:0e:
                    dc:ab:e9:68:0a:ca:68:06:3d:2c:16:e9:b7:27:5b:
                    c9:3e:c5:1a:9d:94:ec:fd:5d:2d:e6:d3:e7:c1:5a:
                    1b:9c:77:25:70:2c:e0:3d:cd:52:37:d6:86:12:c4:
                    03:59:11:c1:bc:84:97:d3:34:1b:66:07:bc:52:93:
                    0d:85:aa:84:db:66:74:01:54:8f:35:fa:b1:de:ce:
                    60:cf:09:89:e0:91:8a:63:9d:86:3d:1f:80:4d:7c:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:8B:2A:2E:6D:5F:D6:4D:CA:89:C7:C0:DD:4A:47:0D:5C:ED:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6903371-a8c8-389e-a00d-8d93a5fd438f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:cd:31:17:54:d6:7d:ef:ae:03:3d:10:a1:9e:e3:f9:2c:44:
         74:d3:fc:b3:a0:77:e5:9d:8f:79:86:62:ca:6c:1a:e8:8c:e4:
         94:94:57:5d:48:70:63:cb:b9:00:d6:23:3a:e2:d5:79:37:3f:
         db:7e:01:05:b0:79:30:56:ab:06:20:74:25:ea:77:b6:fd:08:
         45:29:f6:89:4b:d1:3c:1d:31:f1:df:56:d4:6e:24:7f:a2:ff:
         bb:66:a1:df:a4:79:77:f9:43:d2:78:99:b0:b2:e2:b1:1b:db:
         fe:36:1d:48:60:ce:52:e0:ef:6a:31:a9:bc:14:14:22:a1:1f:
         cd:80:7f:97:51:23:8e:79:f0:03:79:b3:95:6b:03:0d:e1:b1:
         ad:be:60:74:79:91:88:98:3d:fe:06:c7:29:28:99:be:0d:42:
         54:73:09:69:e8:4c:ee:59:9b:93:a5:89:ac:d4:2f:7a:2b:43:
         5d:25:87:c1:35:4a:3f:6b:f3:f8:b7:10:51:dd:ba:2f:10:d8:
         ff:ff:de:8f:a9:63:3d:2b:9c:d6:ff:24:29:16:55:73:ba:ed:
         13:21:ef:b6:3d:cb:ab:35:75:0c:76:e3:13:e4:51:99:e8:cc:
         33:f2:65:90:fc:d9:da:5b:be:1e:8c:4e:d8:fe:a8:59:bd:75:
         ef:80:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:54:52 2025 by rpki-client