Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc548876-738b-3728-b965-d7732323803b.roa
File:                     dc548876-738b-3728-b965-d7732323803b.roa (raw, json)
Hash identifier:          T3q1fQuUijnAg5s8chesWYt6VTkaBItU9Z7s6ptPYq8=
Subject key identifier:   9F:17:BA:2D:A2:70:14:AC:4B:98:66:4F:3B:51:E9:B7:20:D9:D5:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC35CD47A2068D4DB8E1E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc548876-738b-3728-b965-d7732323803b.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        67.182.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:5c:d4:7a:20:68:d4:db:8e:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=92826814-a166-4a82-91ee-d78d26d386d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:34:0e:33:5c:10:a0:2d:43:c3:f8:67:a2:
                    2e:9d:9a:ec:1e:12:41:82:dd:37:9d:23:90:fc:71:
                    fe:b4:0c:3f:43:68:0c:47:b0:30:55:16:6c:f5:b0:
                    79:15:fd:cd:6d:21:b2:79:5d:db:3d:cb:67:5d:09:
                    cc:85:28:2b:55:73:b6:cb:ca:84:58:86:60:08:1c:
                    87:72:8a:5f:02:e0:79:97:dd:b3:8b:3c:58:2f:df:
                    ac:b8:d2:81:e9:1b:fa:9a:e9:99:a3:c2:91:ad:23:
                    93:d0:a4:c4:c8:e8:0e:92:c7:64:ff:9e:28:ff:d9:
                    d2:f7:3e:56:01:e3:14:73:94:05:d6:ef:f0:5e:22:
                    a5:26:1b:ff:95:a6:e9:d8:7d:35:f9:cd:37:d2:a2:
                    d2:83:d9:c5:c3:ef:44:73:76:37:be:a2:16:02:0a:
                    71:e9:9f:77:16:9c:fa:08:72:0c:38:cc:57:0f:ae:
                    42:4a:dd:00:eb:e6:70:5d:21:ae:de:7c:37:26:1d:
                    59:c5:dd:5d:ae:19:86:0a:3c:96:16:44:d6:f6:df:
                    02:84:a2:ad:05:5c:36:5b:7e:15:17:6b:6a:c6:fd:
                    ec:ae:49:c0:53:dd:d2:ac:d5:6e:1a:87:c0:66:8e:
                    71:2b:2b:47:c7:4f:14:c5:3a:20:60:b6:be:fd:b7:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:BA:2D:A2:70:14:AC:4B:98:66:4F:3B:51:E9:B7:20:D9:D5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc548876-738b-3728-b965-d7732323803b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.182.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e4:d8:7b:4f:18:72:63:36:28:3c:3b:6a:3e:e9:cf:88:7c:
         86:af:ac:80:39:eb:e4:6b:67:81:44:08:3a:7c:fe:6f:b1:ed:
         ab:af:0f:3d:2c:c3:70:25:68:f3:9c:de:d9:c7:f7:56:98:fb:
         78:5d:ef:f5:62:be:ed:5b:75:50:3c:0e:84:6a:97:8c:56:54:
         a9:c0:75:e3:95:e4:59:c2:c4:fc:5e:76:31:0b:25:bd:92:ca:
         c6:13:8f:18:50:13:25:8c:5e:4e:27:1a:04:b2:20:5a:ea:0b:
         7b:fa:40:16:5e:ae:52:76:94:8e:7c:11:09:e7:de:aa:af:a7:
         3d:6c:67:da:aa:26:e7:12:b2:64:eb:4b:5e:e7:9b:45:af:5a:
         7a:33:57:fd:6f:f4:b4:60:0b:a9:c6:e5:be:6e:78:15:c3:21:
         d7:75:ec:1b:a2:07:d0:ac:66:38:ea:9d:b6:20:1f:7c:ad:17:
         7c:c1:69:e2:1f:64:e2:fb:03:3b:19:75:fe:ed:ec:f2:d0:e1:
         b0:31:51:0e:8f:f6:87:20:38:ce:83:c9:f3:b5:38:3a:26:ba:
         0f:19:91:dc:1c:44:8b:d3:bb:fa:10:80:6e:ef:79:06:df:69:
         41:c1:cd:d7:86:9f:1a:aa:09:f5:7b:7a:e0:88:02:46:79:64:
         30:bb:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:26:56 2025 by rpki-client