Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e983acb8-2c68-3ea0-8c06-46c2550cfbd9.roa
File:                     e983acb8-2c68-3ea0-8c06-46c2550cfbd9.roa (raw, json)
Hash identifier:          VtuZkyprFCy1LDKHw+/R4CZi8HwC4ByaO7HXUEOYEgE=
Subject key identifier:   A3:B4:0F:9F:6A:8C:B2:D4:D9:FE:E4:3A:D5:4F:93:AF:D6:6E:D3:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC27C64D026B0F370A40900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e983acb8-2c68-3ea0-8c06-46c2550cfbd9.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        73.247.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:7c:64:d0:26:b0:f3:70:a4:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=3d0db456-2311-4013-b5fc-86096ee2b44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:38:60:af:53:7f:85:6d:b9:12:6b:af:48:
                    9c:ab:25:8e:0e:0e:8f:6c:fa:91:fd:bd:1d:86:d5:
                    5c:9c:81:df:ab:eb:d4:75:36:1d:20:95:87:5f:e0:
                    88:81:21:27:78:b4:43:22:bf:a4:19:d1:d8:bb:9a:
                    50:08:ee:75:fe:60:5b:1f:d8:3d:33:b1:28:21:63:
                    73:b6:11:28:2e:92:6e:1d:3c:e0:a5:29:bc:9d:7d:
                    49:4f:44:38:45:c3:00:36:29:bf:7b:02:bb:72:4d:
                    a8:3d:60:70:9c:e6:15:1c:30:b0:50:a6:c3:67:b0:
                    34:af:97:47:82:86:64:26:f3:d5:ac:bb:5a:d1:c8:
                    a3:46:0b:7e:ff:17:bc:4c:34:6b:cd:93:77:aa:4b:
                    60:5d:79:ab:54:40:f1:57:aa:56:6e:18:1a:b1:7c:
                    97:f1:ac:cc:b2:32:08:a2:8e:d2:5b:64:51:da:d3:
                    d8:de:a1:a2:ed:1a:2a:9f:c3:70:00:8a:96:74:ac:
                    d6:f6:20:4e:13:e4:d7:58:6f:56:41:da:3d:09:ee:
                    d7:67:cb:17:6d:12:34:21:38:24:b5:b4:7b:35:dc:
                    7b:39:26:6e:af:de:4d:c5:81:4b:60:1d:ab:0e:bf:
                    38:8f:b6:06:be:9b:3f:bd:75:2d:1e:67:19:1d:cb:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B4:0F:9F:6A:8C:B2:D4:D9:FE:E4:3A:D5:4F:93:AF:D6:6E:D3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e983acb8-2c68-3ea0-8c06-46c2550cfbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:2a:28:5d:2f:1c:65:ac:e2:13:eb:d7:bc:4a:f8:be:4d:
         ce:05:d4:12:f6:92:03:3d:68:b4:0c:f7:a9:ce:60:5f:d6:54:
         ee:56:1a:31:e3:80:4f:d9:2e:e8:90:8a:44:e3:87:13:2e:e5:
         44:9d:e0:80:0f:96:ee:aa:be:6c:91:ee:17:95:95:14:8f:65:
         e4:8e:d7:19:3a:1f:3d:ea:3f:79:80:e4:b0:72:87:f3:96:0c:
         f0:0d:2b:57:79:c8:56:a9:c8:96:0c:55:60:0c:0b:87:b9:e6:
         2d:af:c4:d5:94:2a:4e:ff:e6:43:d7:91:ef:ff:e5:d8:5c:5d:
         26:73:37:00:e2:16:48:df:93:2e:6c:56:b7:15:88:e1:f8:9c:
         ed:10:6f:b2:5c:93:a9:3f:c8:80:ab:22:87:72:3c:ec:60:1d:
         db:ab:28:d9:8d:db:76:2f:3e:1b:f4:dd:09:ca:cf:41:47:f9:
         b3:09:02:86:0b:83:3d:54:d1:a8:22:30:4d:ff:3d:ac:95:5b:
         d9:c8:43:c6:ff:fb:ec:05:a8:b9:24:2a:2c:3d:a1:eb:70:f5:
         b1:4f:8b:a6:dc:50:89:91:e6:a3:4a:73:90:4e:71:30:dc:fb:
         16:7d:79:f0:2e:a1:35:2d:ba:73:3d:90:6b:c5:34:2d:e4:41:
         bf:03:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:14:46 2025 by rpki-client