Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe21c8cd-9981-33f3-ac71-97a0ced42404.roa
File:                     fe21c8cd-9981-33f3-ac71-97a0ced42404.roa (raw, json)
Hash identifier:          qoW3s2+kIBjBZNNNbnmve/icU5u5nsVdtlpR0fAxrHo=
Subject key identifier:   16:48:C2:05:AE:9F:79:0A:41:21:54:6E:A8:2B:7E:D7:9D:C5:62:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1DDFCEE852461A4F8A400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe21c8cd-9981-33f3-ac71-97a0ced42404.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        73.13.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:dd:fc:ee:85:24:61:a4:f8:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=b0a6ca03-8cc7-4ad0-8632-667bd8e04fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:e8:79:ad:ac:99:03:5a:9a:b2:f6:35:3d:
                    11:1a:ef:30:d4:f5:25:28:41:9f:5e:ad:0b:c2:49:
                    6b:2b:33:99:5a:70:33:80:ae:88:40:c6:e8:f5:64:
                    29:b8:3f:fb:59:16:43:f7:0d:e4:49:b6:b8:2e:6e:
                    62:ff:9f:71:c3:33:81:2d:02:fa:6f:1a:de:5f:1a:
                    25:d1:6d:13:30:c4:a2:a5:f6:b7:e9:28:fa:c5:eb:
                    1e:df:9c:31:3f:a4:79:a5:12:05:a6:a8:d0:92:44:
                    27:c2:b4:d8:f5:2d:b6:45:4b:bf:5f:e9:ca:c3:71:
                    14:2e:48:8e:4b:b7:cc:a8:02:14:c7:13:fa:44:35:
                    16:94:6e:d1:23:02:e8:74:2c:be:61:ba:5a:f1:ff:
                    ec:0a:58:c6:c0:f8:9d:fd:7f:b3:b2:70:01:61:6f:
                    a0:a0:2c:f0:44:fc:ab:04:b1:3e:98:94:62:ec:90:
                    14:7d:d2:30:4f:09:23:4d:e2:2d:13:f7:c8:2e:c6:
                    af:a2:04:f0:02:68:0e:50:f0:a2:57:05:49:20:03:
                    74:71:5a:45:64:63:17:bd:da:3a:6f:f7:b7:9b:5f:
                    c2:39:a8:2b:b4:ef:33:b9:b8:47:06:37:37:77:f5:
                    6a:33:ba:c6:4b:a8:6b:4d:d2:db:ed:53:bd:11:2a:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:48:C2:05:AE:9F:79:0A:41:21:54:6E:A8:2B:7E:D7:9D:C5:62:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe21c8cd-9981-33f3-ac71-97a0ced42404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.13.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:c5:e8:3a:aa:92:61:76:d8:c6:5a:86:65:8c:f7:de:1b:da:
         04:41:59:5c:f9:e9:b5:4c:98:31:a7:8f:53:29:0a:19:66:f8:
         6a:f4:e3:be:24:53:46:36:a6:33:e2:1d:8d:9d:ee:d6:be:c4:
         41:b5:fb:e1:6a:a9:13:01:92:b4:06:73:54:d4:f0:a2:98:89:
         82:a7:65:12:92:29:ff:ba:95:6a:1a:b4:84:e7:1a:ec:9d:87:
         04:8d:f4:c4:05:85:a9:31:84:b2:f3:a1:cc:5c:1a:2a:a4:66:
         c5:6a:bb:87:e2:6c:76:25:4c:5f:1c:24:80:6b:16:5d:39:28:
         c8:93:8f:36:4b:6f:57:fe:8b:23:55:c1:33:d5:38:cd:97:f6:
         44:77:ea:8a:0a:e1:ff:00:58:8a:44:0e:a9:5b:19:6b:a8:af:
         13:4c:9c:84:05:b3:17:9b:51:3b:ea:f6:e0:e7:70:f7:83:0b:
         b9:53:38:72:c9:c9:cc:e9:03:89:76:30:f3:c8:9c:5f:09:b9:
         85:6b:ae:f2:a6:c6:05:df:80:04:b4:41:21:1d:c4:01:76:22:
         06:da:29:7b:62:59:4c:4d:95:c4:fc:36:ac:5e:b5:ed:c2:85:
         a1:65:d8:cc:9a:03:0e:5e:c0:b9:45:4f:42:51:5f:44:7c:8c:
         65:53:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:59:44 2025 by rpki-client