Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa
File:                     fd64b5fb-b725-310f-ac4d-a10b64feec18.roa (raw, json)
Hash identifier:          UUtx9wClRMaYqpGRk8fQYhxMYHXrkA7UYmHOC8JUHVo=
Subject key identifier:   8D:79:04:41:CB:A2:99:09:DB:74:78:4E:63:66:F6:07:12:BD:53:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3E4ACC30070A0BF245528
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        71.225.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:e4:ac:c3:00:70:a0:bf:24:55:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=446066cf-c6c4-459a-82c2-7e629c51e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:a9:2a:53:86:8e:d1:fd:77:d5:b2:6a:de:
                    ab:1d:27:4c:a8:fc:69:98:d8:40:ab:f5:0f:0a:b2:
                    92:0e:78:60:47:75:a9:49:9d:e9:9a:09:17:98:2c:
                    02:41:95:8a:93:f2:6f:6c:6d:ec:fc:a7:6d:e8:84:
                    ce:28:c6:b7:f3:11:27:4c:b3:5b:1a:97:fb:e3:5e:
                    bf:4e:14:52:d1:79:4d:2c:e0:e5:be:93:cb:9b:22:
                    92:16:33:0c:3a:8a:b2:9d:2c:d8:4a:70:88:cb:a2:
                    1b:76:5f:fb:59:e9:82:76:0d:74:6b:d6:d3:d1:03:
                    a8:63:90:9e:ca:1a:dd:1c:b5:0b:63:67:5a:77:64:
                    48:ad:00:f8:e8:da:20:d8:57:c5:29:2b:a9:b9:50:
                    60:11:1a:1c:0d:d3:b8:76:c7:be:d3:2d:78:30:57:
                    12:b7:71:be:1b:f2:e1:41:ce:61:e8:87:8d:23:78:
                    91:30:b8:f9:7f:1a:29:2c:c7:73:d9:4a:48:33:92:
                    29:fc:5d:d7:25:01:91:e0:d7:10:fd:3d:d1:5e:bd:
                    ee:33:15:1b:cc:28:30:e7:8b:dc:53:a4:51:eb:6c:
                    b1:c9:4f:2b:11:7d:58:66:1e:96:a0:1b:cb:da:bb:
                    38:45:04:8d:d3:35:3e:5a:63:ed:72:3f:5a:4e:17:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:04:41:CB:A2:99:09:DB:74:78:4E:63:66:F6:07:12:BD:53:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:63:f9:dd:3f:59:b5:39:1f:f6:9a:f5:c4:3b:27:79:59:
         89:63:8e:f6:a6:ac:ec:9a:67:57:ac:21:00:1a:a2:fe:b7:05:
         65:ea:52:b3:1a:f0:10:8f:aa:1c:74:ca:3b:3b:1c:d8:d3:ee:
         d4:d0:00:bc:c1:cf:c0:b2:ec:ef:14:65:4f:eb:c7:40:1f:44:
         78:d7:00:f0:b0:89:7c:e8:82:51:0b:c0:f2:b4:54:32:ee:80:
         a3:60:c1:6d:cb:f2:8b:23:4f:82:e7:99:c5:f8:2d:3d:66:64:
         41:e8:e8:c8:df:98:ee:c4:ae:2a:d9:2d:41:e8:83:9e:4f:7a:
         28:9d:88:b1:f3:9d:31:ce:09:93:ce:4b:8a:c6:ad:00:c4:84:
         4d:f2:a3:ad:c9:f8:25:0c:38:38:63:4c:02:f3:9d:09:7f:fd:
         aa:b3:c4:d1:d6:be:ee:bd:c5:4c:1c:1e:35:77:ca:e3:e4:44:
         e9:ed:a9:cc:f8:fc:cc:f4:c5:7f:c8:93:01:bf:4f:96:03:0c:
         2a:61:5a:0f:31:84:d0:38:15:db:a7:55:c3:3e:62:16:f2:a5:
         a7:94:5f:d7:de:8f:74:21:f3:82:a2:c8:ea:25:2d:e1:9a:30:
         42:2b:c3:7d:1a:54:bc:48:52:7f:1d:42:fd:b8:7e:37:04:e2:
         5c:be:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:45 2025 by rpki-client