Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa
File:                     3ade92de-8ba3-31f1-9258-3724dc26a701.roa (raw, json)
Hash identifier:          pJPbuIYSMKd/ZVYni8BNJyW0IVnsFyKx+LIjHQkzx2E=
Subject key identifier:   59:58:E3:A8:66:C7:B4:6A:6E:76:30:95:A3:AD:F8:3F:3F:9C:F5:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEAEFC5765739E734BE940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.206.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:ae:fc:57:65:73:9e:73:4b:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=21057ae2-c861-4302-8a1d-cce2e5f4da94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:73:b3:7d:98:4c:02:4a:dd:bf:99:33:19:
                    32:8a:f8:c2:6d:b7:c4:3b:2b:39:86:9a:1d:09:01:
                    9f:0b:72:85:f3:1d:63:17:fe:f7:e0:db:61:34:48:
                    40:8d:ab:d9:34:bd:13:1d:02:63:88:b8:a8:db:13:
                    2e:c3:4d:42:0e:99:13:28:ef:5d:37:04:a3:65:6a:
                    ef:bd:c1:1a:62:3f:4a:ac:74:6c:fd:23:06:3f:3e:
                    c0:6c:4b:04:c7:31:88:fb:82:8f:95:ba:81:db:4f:
                    ed:4a:b1:82:86:fd:8a:3e:85:0a:30:29:e3:75:67:
                    44:a6:62:95:8e:d5:79:8a:1b:7a:a3:a7:47:64:3e:
                    44:85:63:8c:4b:bf:67:b7:a2:c3:2f:fe:e6:d3:26:
                    39:a1:0e:82:20:66:23:7c:a0:59:d5:f8:59:a5:37:
                    45:e4:f5:66:93:f7:b7:a8:9b:b2:94:11:f0:f8:d9:
                    90:e7:90:d8:9c:a6:45:9c:b0:66:aa:05:33:b8:9e:
                    4c:69:61:26:2d:48:9e:47:d7:c2:0c:d3:b4:14:4b:
                    fc:1d:f8:b0:47:a1:b8:bb:a3:90:ff:fe:fa:66:f8:
                    e1:15:55:2c:41:18:82:6a:b6:c6:9c:d7:f9:a3:2b:
                    af:34:5f:0e:e4:4b:28:22:79:e6:c8:dd:c2:ea:c3:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:E3:A8:66:C7:B4:6A:6E:76:30:95:A3:AD:F8:3F:3F:9C:F5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:06:b8:d1:e6:6f:80:64:39:d7:da:42:bf:5c:33:3d:38:51:
         b9:79:f1:b4:50:39:e2:e8:2e:5b:5b:1c:c0:41:a7:87:b0:9c:
         e8:c7:bc:bd:d9:bf:6e:11:d3:43:2e:9b:83:0c:fb:54:08:fa:
         d0:70:9a:ce:68:bc:a8:e3:a2:be:08:72:bb:5e:2d:cc:de:03:
         e6:93:61:85:55:20:7c:7e:b3:d1:df:1c:64:6a:a7:cc:af:1f:
         95:39:d9:46:8c:97:89:2c:f6:3a:5e:23:e6:75:2b:63:01:b3:
         fc:45:44:c2:26:18:c0:86:55:bb:78:c6:74:05:84:ba:62:11:
         a0:6c:1e:22:47:ef:c0:99:c7:7b:c0:53:dc:36:d8:90:64:89:
         95:45:56:1c:97:07:d1:ac:f0:2a:de:f2:ad:0a:a5:b4:86:8c:
         68:b2:7c:3d:8a:b4:d8:be:a4:48:d2:4b:99:bb:88:bc:39:43:
         17:34:bf:d8:e4:49:d5:4c:58:de:2c:87:66:5b:c4:a1:af:7c:
         8b:d8:d3:82:69:63:16:91:51:20:10:12:f8:2f:47:68:93:4f:
         ef:74:50:e9:d7:76:ad:d1:61:4f:96:b8:58:50:81:f1:5a:2a:
         80:6f:c3:5e:0c:ca:22:66:bd:d6:24:5c:77:3e:34:6a:79:5b:
         83:e9:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:31 2025 by rpki-client