Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d55e4d-fdf5-3c0a-b0b5-35dd22a107ce.roa
File:                     e0d55e4d-fdf5-3c0a-b0b5-35dd22a107ce.roa (raw, json)
Hash identifier:          aDKCaDSiE32md0g33wrtD7JxLk2IfcdEo2uWd22ZD/0=
Subject key identifier:   32:0F:9E:B6:55:49:B4:8C:94:99:6E:EA:BA:ED:33:86:4F:69:CA:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4802E8C322E9EE3E87C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d55e4d-fdf5-3c0a-b0b5-35dd22a107ce.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.211.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:80:2e:8c:32:2e:9e:e3:e8:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=34572e2f-82bb-4e88-9970-9096ebae6ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:42:b0:52:95:77:72:9b:ce:e7:49:2e:6e:
                    47:fe:41:dd:3b:e8:ab:ef:e6:65:71:f9:22:48:d1:
                    9f:21:97:d0:b9:04:f9:de:86:da:8b:0b:3a:46:98:
                    9b:bd:65:1a:d9:93:a5:db:e4:7e:87:90:b5:a9:54:
                    ea:4b:85:72:2e:e9:0a:ce:ec:d8:df:d1:93:91:e4:
                    c9:4f:5e:88:b8:bf:78:d9:47:8c:37:7c:ab:b7:ca:
                    cf:fa:99:b1:d6:43:ef:2a:3d:3e:da:5f:6f:bb:69:
                    5d:3a:b5:68:e9:ed:7d:97:aa:22:16:5d:d1:ef:cf:
                    26:72:4d:6f:4b:f6:b6:36:e3:34:f3:1e:d7:6f:5b:
                    1b:cc:eb:78:5b:5d:3e:af:57:1b:05:a1:b2:b6:8d:
                    05:77:fe:16:de:8b:d5:c5:c6:1c:72:96:02:08:f6:
                    1a:0d:98:7f:cb:58:83:24:2e:b6:49:b8:75:1e:78:
                    bc:f5:c4:af:fa:5c:d3:0e:ab:c7:93:42:55:7b:8a:
                    92:2a:40:6d:52:95:bd:9d:d9:c1:48:19:36:a7:26:
                    5e:4f:f0:cf:ac:5d:52:ea:7e:ec:34:cf:f1:46:d4:
                    a1:ec:19:62:e4:a3:e2:ae:be:3f:d3:4a:df:d6:12:
                    a3:22:1a:61:f1:4e:19:92:d3:dc:50:03:dc:fa:fd:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:9E:B6:55:49:B4:8C:94:99:6E:EA:BA:ED:33:86:4F:69:CA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d55e4d-fdf5-3c0a-b0b5-35dd22a107ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:3c:5e:2b:fd:99:de:9f:7d:7e:57:e7:34:79:c8:ad:01:
         6d:83:f9:62:01:61:4c:fb:f7:84:77:d5:70:20:4a:45:5c:bd:
         8b:41:e1:c7:f0:c8:7c:7a:ea:b5:85:47:35:be:6d:65:2d:0b:
         00:41:e2:95:94:7f:ef:d5:c4:77:b8:36:cd:be:1c:21:de:7e:
         a4:c2:fb:69:24:0b:4d:bf:5a:10:1f:46:dc:5c:cb:b3:45:e0:
         59:ec:ae:bf:47:c3:57:ed:c4:30:ed:a9:08:23:f4:77:0e:92:
         99:02:55:4c:a7:d6:e8:0c:78:fe:5a:c4:cb:dd:4c:5e:21:bf:
         be:2b:74:c0:6b:85:5e:f2:bc:aa:e3:92:34:a0:0b:86:9f:82:
         21:41:e3:27:6b:c2:05:d5:b6:e3:2a:ea:8a:af:95:4c:ca:95:
         cc:bf:f1:84:86:5d:3b:5e:84:a7:47:da:50:48:2b:03:94:4f:
         b0:d7:92:1d:d7:fd:ab:22:d0:83:14:67:23:9d:2e:c0:71:41:
         04:5b:99:d7:55:76:1c:f7:86:39:8e:d0:6f:26:98:98:c1:ff:
         22:d1:0f:50:7d:dc:de:df:15:54:d6:62:a8:32:d8:ce:d5:cd:
         d7:f6:59:0b:c9:5a:c1:d2:89:12:62:ea:7a:55:21:33:41:7c:
         b5:df:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:08:20 2025 by rpki-client