Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19857e62-9f07-3d4f-89e2-1efdbba9b82f.roa
File:                     19857e62-9f07-3d4f-89e2-1efdbba9b82f.roa (raw, json)
Hash identifier:          D1yNK1zPBKjqUCXg2VydAXoRBoYNRX0N543saJqMKbg=
Subject key identifier:   07:29:8C:90:8F:FD:3C:EF:0B:07:E6:51:5C:83:F0:5C:E3:7B:D9:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED007B37486523D4AE8D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19857e62-9f07-3d4f-89e2-1efdbba9b82f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.206.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:00:7b:37:48:65:23:d4:ae:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c7eae4ab-2239-44b5-a3da-2b6ce47b67bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:f7:74:dc:08:44:35:c1:84:30:07:04:60:
                    3e:c0:f3:03:87:e7:f8:d0:db:9d:0b:8d:45:32:2b:
                    ca:08:a4:c2:19:e5:a9:93:74:d7:1f:ab:21:86:a2:
                    5b:2b:a0:34:18:be:ba:01:2e:0a:44:09:42:af:19:
                    75:fd:9e:ac:0a:fc:82:52:3d:92:47:c9:52:26:b4:
                    72:9d:a3:9a:22:db:49:a4:05:2e:dd:de:b2:aa:a4:
                    41:09:52:7f:73:10:37:43:1e:bc:4c:88:5a:46:e0:
                    07:e8:7e:bd:db:7d:ee:e6:2b:f3:66:c9:8b:5f:ee:
                    ef:b6:5e:78:79:a2:a9:45:6f:f5:0a:c4:b0:3d:df:
                    aa:1d:52:10:a8:59:46:dc:d9:1d:26:aa:3a:65:5e:
                    f5:48:fb:dc:3b:d0:63:6c:d5:c2:fe:34:18:7b:63:
                    97:86:5b:47:4b:0c:88:f2:77:3f:4f:dd:f9:73:1e:
                    ec:49:38:ae:3a:75:07:04:c4:2d:e7:cf:a4:50:a3:
                    8a:2c:ce:99:44:a7:f6:e4:d0:90:80:f2:fd:17:70:
                    6b:b1:74:32:55:89:8b:aa:4a:cd:37:04:f0:6f:6e:
                    46:67:a0:f5:cb:77:d0:c9:9b:22:b4:ae:ea:26:76:
                    68:de:5b:e2:df:2b:98:71:56:21:e5:56:8f:37:55:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:8C:90:8F:FD:3C:EF:0B:07:E6:51:5C:83:F0:5C:E3:7B:D9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19857e62-9f07-3d4f-89e2-1efdbba9b82f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:ce:7c:50:1d:20:73:5d:fe:de:a9:22:02:0e:12:61:35:
         d1:f5:79:8d:1c:f8:9b:ca:b5:5c:23:4d:b9:1b:b3:5f:2f:a0:
         fb:48:5f:ab:32:0a:33:12:99:ae:fc:d1:4c:a4:1b:2b:8c:1a:
         73:8f:e4:5f:3d:52:f2:5f:eb:13:9e:04:32:30:f3:ab:39:ec:
         b0:bb:0b:62:bd:20:fd:73:12:c2:48:73:7f:6c:98:81:92:1a:
         54:85:ca:e1:c5:db:9c:fb:10:88:b7:dc:34:97:9f:e8:21:eb:
         47:cc:41:ed:fe:2c:16:de:ca:63:92:c0:c1:d7:ed:1d:71:d1:
         97:c9:6e:87:e7:52:dc:40:c3:2d:e2:0e:52:9f:ee:ce:32:0a:
         95:41:aa:30:a5:34:9d:4b:ad:ad:95:28:bc:48:e3:08:f0:c1:
         ef:10:4c:ad:8a:13:61:63:8d:45:66:db:05:7b:ae:b4:46:b9:
         19:84:bf:74:97:db:be:f0:c3:90:b6:df:24:81:4a:3e:33:75:
         18:e7:19:a7:7f:05:88:13:c3:ad:e1:b1:70:8f:e4:30:a4:a6:
         5e:6b:bf:7a:9e:8d:48:d2:52:19:a5:a6:f0:56:0d:4b:de:f5:
         09:7a:c8:3f:fe:51:c0:a5:d7:66:b4:d4:51:45:e1:1e:b9:86:
         83:26:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:33:48 2025 by rpki-client