Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7d8d097-45ac-372e-8386-d7e1bbfca903.roa
File:                     d7d8d097-45ac-372e-8386-d7e1bbfca903.roa (raw, json)
Hash identifier:          NHAJkKqkdVw2D0wy5EFmT4btpu5dylbG9XomIXWnjew=
Subject key identifier:   57:5A:B8:FE:3F:83:BA:8D:83:0A:46:5B:D0:AC:6B:E2:ED:7A:46:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC320F48EEF71414CE0D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7d8d097-45ac-372e-8386-d7e1bbfca903.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        73.70.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:20:f4:8e:ef:71:41:4c:e0:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d9f402fe-d58b-4695-aa41-ef5adf7f3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:1c:4a:2b:2a:56:58:69:7f:1e:cd:51:41:
                    ba:e9:72:d2:bd:c7:b0:54:08:53:94:16:13:15:65:
                    86:c1:c2:dd:a0:4a:4d:c3:fb:b6:d4:c7:d5:89:6f:
                    5e:af:65:c0:a4:8a:1c:87:7c:15:c1:d4:e3:e2:53:
                    a0:6b:3b:5b:88:35:01:22:8b:75:32:21:ce:0f:36:
                    b6:0d:db:a4:d5:37:69:81:74:26:6d:c6:11:69:69:
                    af:7b:5d:0f:03:ed:95:d0:2c:fd:5b:f5:ed:85:3c:
                    51:03:41:03:70:9b:b3:e1:f1:70:90:dd:59:1c:23:
                    d0:ef:0d:7d:e5:76:2e:f7:cd:19:78:21:a4:24:71:
                    fb:fb:2b:aa:e9:7b:b4:c2:1f:3f:52:20:59:5e:1d:
                    18:11:6d:1b:c5:73:99:d1:b0:46:1a:99:96:f1:6e:
                    24:0e:54:ab:34:82:fe:e3:81:24:1a:46:c3:b5:99:
                    ed:79:0f:07:0b:72:45:70:1b:79:05:48:c8:b3:6b:
                    6e:36:0e:38:19:a4:11:5b:5b:6e:6a:41:99:2f:b5:
                    51:a4:fc:92:9a:87:b0:3e:a0:bc:ba:b5:43:4a:72:
                    fe:db:3e:ec:f8:5c:16:58:4b:d9:61:14:f6:3a:7a:
                    bf:bc:db:63:57:b1:66:c5:68:5b:b0:56:0f:ff:15:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:B8:FE:3F:83:BA:8D:83:0A:46:5B:D0:AC:6B:E2:ED:7A:46:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7d8d097-45ac-372e-8386-d7e1bbfca903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:84:ea:06:01:c5:ee:f1:41:58:3b:33:55:21:50:3e:da:14:
         a9:2d:34:c1:29:2d:f5:1d:82:68:1f:3e:7f:b2:8a:48:74:5b:
         be:7b:cc:62:52:d0:60:2f:d2:ff:dc:2c:66:ba:cd:a1:78:c8:
         89:9a:2b:d0:26:0e:fd:aa:fa:fe:77:a0:da:90:02:e3:d6:6f:
         26:5e:73:ff:51:17:72:d2:19:da:20:10:ab:fe:75:69:b9:e7:
         80:73:f5:7c:11:ec:e8:49:f1:47:53:2f:f2:8d:c3:96:6a:1c:
         ff:ba:14:16:74:0d:c2:bc:5c:2b:25:fd:84:fd:22:f2:77:f9:
         02:25:36:69:75:98:0b:53:d4:ac:71:02:fc:94:66:ed:f6:65:
         31:20:2b:24:f5:1b:9c:81:f5:44:c5:ca:4a:b7:4d:45:6d:71:
         3b:fe:1e:7e:bc:a2:ef:39:ba:33:ad:73:a5:97:08:86:5b:b5:
         f4:9c:30:f5:2e:22:d1:c2:a5:86:b8:b6:63:9d:2b:50:2b:3a:
         ca:98:ab:35:b0:2a:fa:cb:9e:01:68:7e:d1:89:8c:f6:f4:a6:
         c1:93:a9:9a:69:1c:6d:f2:78:1b:c9:ef:15:f7:ba:85:9b:0c:
         4f:06:d7:ae:29:8f:ec:40:05:99:a0:b2:6a:67:90:0a:47:96:
         86:99:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:47 2025 by rpki-client