Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac2b37e-dde7-3054-81e4-1ff0f2ae2626.roa
File:                     eac2b37e-dde7-3054-81e4-1ff0f2ae2626.roa (raw, json)
Hash identifier:          oAw5fD69acqEpPZRO6oStoDUB3i7O/Xk5oo0eoFMRXE=
Subject key identifier:   F9:C9:8F:66:EF:35:87:ED:A8:2E:2F:CC:68:1F:A6:86:5E:9A:E3:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC24AE0D0A2D16A4B2313D4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac2b37e-dde7-3054-81e4-1ff0f2ae2626.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        71.201.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:4a:e0:d0:a2:d1:6a:4b:23:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=35176178-e1ef-42af-b8f6-0a56e85e05c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:62:54:74:f1:ef:9f:08:73:25:8a:1a:cc:
                    31:af:9f:ec:a1:9c:97:76:dc:45:4d:ac:1f:72:2d:
                    d2:dc:ef:68:a4:92:c7:b2:5b:10:8e:1f:de:54:10:
                    95:6d:10:c5:b5:d4:93:07:cc:a3:45:73:51:6d:29:
                    c2:a1:f9:0f:61:5f:c3:87:31:84:12:10:e2:c2:ef:
                    65:85:d9:19:a5:ca:53:b9:f6:88:9f:0c:aa:a2:06:
                    3d:dc:1b:4a:52:cd:7a:a9:41:db:96:65:34:de:08:
                    ed:4a:21:9e:16:e9:90:f7:4e:a4:05:4e:0e:f8:0b:
                    82:2f:1e:54:c1:cd:99:07:65:b7:be:45:00:e9:db:
                    b6:6a:77:25:cf:fb:97:5c:9f:28:e1:ff:a8:e8:9c:
                    44:15:ce:e9:6c:28:da:e8:08:9b:07:ec:51:4c:3f:
                    02:a9:68:a1:c2:5f:f8:d7:00:ec:f3:26:d3:72:85:
                    b6:8c:9b:fb:44:cc:55:f2:23:c2:91:28:c4:fa:0a:
                    31:12:ce:3b:ab:84:0e:50:cd:2a:74:dd:d9:6d:55:
                    2c:c1:02:d2:2d:ee:0e:f4:cd:ca:31:69:8b:ab:5b:
                    e6:9a:d5:06:32:66:92:fe:48:4d:50:2f:3f:75:9c:
                    a3:3f:e6:ed:90:5d:72:53:bc:db:4a:01:6d:fe:9b:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:8F:66:EF:35:87:ED:A8:2E:2F:CC:68:1F:A6:86:5E:9A:E3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac2b37e-dde7-3054-81e4-1ff0f2ae2626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:f1:34:cc:dd:12:12:56:9d:02:58:7a:c8:91:2e:ff:0e:
         dc:e5:a0:1b:42:1f:1b:57:5c:73:a5:7c:e2:07:d1:f2:ca:4e:
         dd:28:6b:42:ef:c8:85:19:53:7f:16:23:f7:ab:26:6a:e8:16:
         84:be:16:fd:b3:9f:79:92:56:37:da:16:56:cb:aa:17:a1:0a:
         41:af:7e:06:95:a7:12:a7:bb:ff:39:6e:6a:41:68:f2:fd:0e:
         58:cd:be:50:72:27:b4:a1:70:cb:b7:28:77:90:45:f3:10:11:
         e7:d1:cc:ca:97:e9:43:ed:20:6d:2b:ce:9d:33:e5:42:7d:8a:
         72:22:37:f1:bd:74:2d:43:54:28:52:f4:c4:4d:b5:f3:4b:97:
         69:0f:a0:36:54:ba:16:2e:cb:04:76:3a:0d:7e:61:be:7f:93:
         79:53:f9:29:82:ef:0f:39:aa:16:15:9e:6e:f0:65:28:82:74:
         e3:ff:43:6e:d2:94:55:96:8c:91:29:36:59:dd:a6:14:2c:15:
         16:c5:5f:55:bf:6a:48:2c:ab:32:45:e7:99:c1:5f:bd:62:9e:
         65:9b:b9:12:44:96:99:aa:87:5b:4f:55:8b:6e:85:6c:72:16:
         3c:06:10:96:e5:18:e9:37:48:85:05:79:84:91:3f:b3:2f:e4:
         dc:9d:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:35 2025 by rpki-client