Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c6740b-2299-3cbf-93cd-ea595f20306c.roa
File:                     e0c6740b-2299-3cbf-93cd-ea595f20306c.roa (raw, json)
Hash identifier:          BfuwochYR0YRB3H1RdyPcqBLGV5+3xYlwt/g9dkWqgk=
Subject key identifier:   3A:E6:22:EA:98:3C:36:3B:81:12:43:40:60:99:BE:EB:7C:CC:C5:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2585C680D1B4F6607E480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c6740b-2299-3cbf-93cd-ea595f20306c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.111.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:58:5c:68:0d:1b:4f:66:07:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e309315e-2df1-4ed9-a36e-a2a6fbda7542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:99:c0:af:7b:57:9e:09:a0:50:1f:72:ba:
                    d0:80:7d:37:96:1b:9d:1c:8f:6c:54:a0:c6:3c:d3:
                    99:8d:e5:cf:1d:b4:33:34:6b:36:e9:e2:06:cd:7e:
                    64:e5:f0:9e:59:19:96:ce:35:3e:ca:ec:df:6e:0c:
                    78:fe:c4:48:02:1b:9a:95:38:bd:6b:2a:71:84:6f:
                    0c:cc:ae:40:6a:b4:c9:78:6c:45:40:8e:68:90:4e:
                    1a:27:be:bc:e4:8d:e7:a6:b5:87:13:d2:79:62:96:
                    1a:c7:16:fe:b0:56:e3:b1:d0:f5:0e:c4:00:7f:fb:
                    0f:30:6f:bf:85:93:40:d1:eb:1e:9e:89:6c:97:71:
                    dd:c3:b6:df:e7:2f:d1:94:c6:16:d6:30:99:e6:82:
                    41:36:c5:9e:57:ce:b9:c4:96:1a:71:16:80:8d:da:
                    00:fb:1e:fc:28:7e:65:65:7e:d9:21:83:28:7c:c1:
                    0f:89:ce:da:e3:29:d6:d0:f4:82:58:83:8d:34:4a:
                    69:8b:cf:d9:ab:9f:8a:31:6d:4d:ce:c3:3a:13:f2:
                    9a:de:d7:b4:1a:f7:0f:23:be:f2:ce:4c:4c:b0:54:
                    72:d5:68:cc:a0:e3:f3:80:6a:76:42:b3:89:29:d6:
                    d8:23:f8:85:67:31:fe:e0:05:a1:ca:b8:4a:de:dc:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E6:22:EA:98:3C:36:3B:81:12:43:40:60:99:BE:EB:7C:CC:C5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c6740b-2299-3cbf-93cd-ea595f20306c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:c8:43:01:ec:fd:73:2a:93:8b:4f:b6:23:3a:20:14:18:
         5b:46:09:a2:e3:66:04:b0:0d:b8:68:a6:5f:01:0f:46:7f:f9:
         ce:fb:7e:d9:7a:9f:26:46:14:7a:44:64:92:b1:1d:2f:08:52:
         79:f4:39:c2:f8:62:30:9f:e1:41:9c:06:33:cb:1b:11:47:90:
         cd:d9:e9:37:69:df:a9:3c:21:7d:31:95:d2:e5:c7:cd:77:d2:
         b4:c7:9b:63:a5:72:db:41:8e:b5:84:5d:3e:e2:70:27:77:84:
         05:0a:a1:da:cc:95:f4:72:98:57:57:18:4a:97:78:c1:c8:1f:
         fb:ea:39:75:a5:f2:ac:84:76:90:8a:6b:b0:a3:f9:dd:06:98:
         ad:b7:15:00:1f:e4:9d:46:d0:16:09:b8:be:f2:bb:7c:d4:87:
         8f:fc:ad:56:f0:ae:65:7b:2a:0a:99:36:cb:67:03:16:8c:c8:
         cf:86:63:35:56:6b:ed:1b:80:56:ca:3f:73:43:a4:f3:55:37:
         64:2c:e8:9e:ad:a2:9b:66:d4:d0:44:68:a0:dd:cc:bf:36:f6:
         b4:4a:9c:91:8c:94:1b:08:26:b3:b9:2e:fe:32:0f:6f:45:b9:
         6a:3d:19:aa:44:9f:9c:61:c2:05:5d:2d:54:96:c1:fb:78:83:
         67:7e:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:25:23 2025 by rpki-client