Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/190f8218-6ef8-307b-859f-285338b4144f.roa
File:                     190f8218-6ef8-307b-859f-285338b4144f.roa (raw, json)
Hash identifier:          hF2D94T/NQPxOg15MVcD10rgQQs6/ZdtoWNnm/nCXh0=
Subject key identifier:   14:41:A4:0F:65:01:A1:DA:2F:BF:2E:67:7C:A8:E9:F1:3C:6D:A5:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED0A7142AF71D8CEE06880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/190f8218-6ef8-307b-859f-285338b4144f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.32.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:0a:71:42:af:71:d8:ce:e0:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=01b892a9-ed43-48c3-85e2-d5db0cf1a773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:50:19:8a:64:ec:82:83:fb:27:f5:60:dd:
                    a2:f4:f7:be:f3:77:4a:4b:01:41:79:f2:98:b9:14:
                    54:eb:c4:4b:16:d7:30:da:48:3e:6d:12:6c:99:88:
                    24:fe:8e:58:9f:ea:66:9d:8f:39:37:91:5b:44:3d:
                    67:ee:0e:af:6c:6e:a7:38:ba:0d:b5:20:98:2c:cd:
                    e0:a0:95:7f:cc:c0:40:88:c2:96:99:6e:ce:32:3a:
                    65:ed:4e:1d:d1:8d:1e:a8:6e:62:6e:1f:f8:8f:f8:
                    24:0d:ae:74:ad:e5:a1:99:8d:c0:21:3a:74:c0:53:
                    f1:8f:42:7f:b5:90:45:a8:5d:7c:bc:14:65:0d:14:
                    8b:c3:27:a1:50:78:be:ba:0e:06:72:6c:eb:87:93:
                    1a:74:1c:84:43:aa:92:67:be:13:a4:bc:09:a9:d3:
                    46:23:91:53:58:5f:8d:90:bc:fb:5f:b2:5f:e2:7a:
                    0a:bb:f7:5e:ca:d7:f2:41:ed:f4:b5:c1:74:4b:d1:
                    9a:68:5f:27:7c:9d:fa:29:5e:da:47:42:8e:2a:99:
                    6a:ac:88:19:f7:0d:b0:b4:0b:e0:d0:77:04:23:37:
                    50:37:58:7b:33:74:36:c6:ce:cc:93:a5:08:27:6c:
                    8b:f9:d1:18:a8:32:37:a2:90:b7:8e:6d:a4:b2:10:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:A4:0F:65:01:A1:DA:2F:BF:2E:67:7C:A8:E9:F1:3C:6D:A5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/190f8218-6ef8-307b-859f-285338b4144f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:83:68:5f:88:29:0f:82:d5:6b:e4:5d:2b:27:f9:c0:7c:a0:
         30:e2:b9:90:b9:1e:9b:64:98:9d:c3:2a:3f:8c:e7:9e:42:29:
         bf:40:46:48:47:56:10:b5:c0:57:db:d1:c5:ab:1a:fa:c5:4a:
         4e:e4:21:74:90:d3:a0:51:b3:35:35:cf:45:50:ae:0b:d8:53:
         2b:16:18:29:84:c2:47:72:88:96:e2:d9:1e:82:d5:26:f0:6a:
         d3:b6:6f:88:7f:d0:33:e4:9d:b7:a4:3f:33:ce:2d:80:5c:6b:
         4d:8c:90:e1:76:7c:9a:9d:09:01:3f:65:8b:83:f8:8b:68:2d:
         b4:bb:ee:da:81:65:c0:a4:ac:55:8a:3d:6f:61:5e:08:d9:82:
         ca:b9:11:83:55:63:37:7a:0e:6c:d5:d3:29:cd:a7:b3:fc:88:
         34:3b:3a:cb:d7:7b:5a:cc:b6:82:fe:d6:2d:88:8b:e1:9b:eb:
         e8:14:a3:35:65:38:6d:c5:40:e4:c0:99:1d:4d:52:d7:e9:aa:
         96:57:04:fc:f0:a5:ac:cf:cf:f6:03:ba:c2:8c:47:a7:df:e1:
         6d:48:af:e1:1b:5b:93:9c:a8:95:55:c1:b3:33:cf:55:80:43:
         ec:c1:b3:bf:a3:f2:ba:5b:e6:c1:5b:37:27:de:c6:44:46:fc:
         b6:8c:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:07 2025 by rpki-client