Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198f4588-6174-3d19-b54b-ba7c5c78c001.roa
File:                     198f4588-6174-3d19-b54b-ba7c5c78c001.roa (raw, json)
Hash identifier:          Xs7HBmlSgUlhVlz0/9//u1HvQh0s/EcQ4FYcpNmzwn4=
Subject key identifier:   05:4C:C7:D6:9A:D2:97:3C:55:68:DF:54:E1:48:A5:D9:0B:13:9D:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED101AD303CC58BFC70080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198f4588-6174-3d19-b54b-ba7c5c78c001.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.6.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:10:1a:d3:03:cc:58:bf:c7:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8162804b-7d4f-4114-898e-52abda0c6f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:1f:35:11:5c:91:df:52:d9:a7:25:35:00:
                    04:40:f5:77:71:ad:09:d7:e3:72:a8:e3:cd:7a:56:
                    e4:72:74:94:aa:3f:dd:e0:a3:0f:de:6b:30:af:40:
                    7d:9e:70:72:85:37:89:9e:4b:5e:3c:21:d6:76:a6:
                    5e:df:6e:e7:6b:47:84:73:c8:54:6c:f2:77:29:4e:
                    93:20:97:42:cc:56:56:f2:83:7d:8a:2f:af:a9:19:
                    54:fa:29:02:99:09:f1:ab:7f:a7:f2:56:f1:a3:1e:
                    7e:14:4e:5e:64:d1:2a:22:b0:40:98:ad:d1:a5:70:
                    12:9d:a6:c0:da:94:fe:7a:4d:07:0c:80:63:a9:b7:
                    00:72:61:dd:73:3f:5b:04:7a:b9:7c:1a:58:00:7e:
                    43:a9:f8:5f:d4:37:9f:4f:a4:a1:06:95:61:58:6d:
                    5a:2b:13:30:b4:da:47:51:b8:e2:ee:66:3a:a4:64:
                    2f:7a:20:4b:12:d4:c5:c9:86:bc:08:6d:1b:d7:cd:
                    ce:56:4e:ab:91:10:48:e8:d2:40:4a:49:e8:c4:93:
                    09:f4:65:c5:51:f0:08:f6:5f:b0:eb:98:22:87:3c:
                    16:99:f3:37:6d:14:fa:0d:81:bf:0b:02:db:4d:18:
                    b3:55:7d:16:b2:85:8e:14:bd:dd:a1:18:e5:66:0f:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:C7:D6:9A:D2:97:3C:55:68:DF:54:E1:48:A5:D9:0B:13:9D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/198f4588-6174-3d19-b54b-ba7c5c78c001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:64:65:53:0b:be:51:84:1f:6d:e3:d0:af:64:7a:19:b3:fa:
         49:4d:bf:1a:92:a3:bb:3d:a8:bc:df:be:25:f0:47:f8:41:d4:
         c2:51:f7:51:8e:3d:6a:cd:45:98:e2:ae:1a:b5:bc:cf:09:45:
         1e:5e:7e:36:89:65:77:3f:47:37:65:cb:bf:ea:87:72:ef:02:
         a3:43:86:31:f8:ea:d4:0b:ff:62:0e:96:5f:fc:5b:14:57:b9:
         50:30:5c:63:98:a8:f5:45:68:61:8e:5a:9d:8f:8d:a5:4a:3d:
         b1:9d:6f:d6:5f:24:36:2e:94:68:6a:9c:f4:cb:74:d7:3c:28:
         90:8d:29:ca:59:fc:6e:57:06:6e:ed:bf:f3:06:73:a5:c5:b6:
         5d:6a:4e:1f:6d:7e:1d:a1:c4:bd:c5:02:1e:dc:16:c2:52:22:
         55:f3:bf:5c:57:f2:70:ad:75:1d:5e:f9:05:36:3b:f5:31:88:
         4d:b8:2d:17:8e:3a:29:16:1d:49:8b:72:c0:c1:26:1d:17:be:
         09:f9:97:c0:49:21:fc:56:1f:7b:df:f9:61:60:76:86:7a:24:
         60:04:4e:3a:d4:14:90:1b:70:d8:dd:78:3b:c3:88:f0:35:0c:
         0a:5d:b3:cd:81:f6:15:c7:37:eb:3a:ed:4b:06:66:62:af:ed:
         bb:15:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:01 2025 by rpki-client