Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b13b98-2d9b-39e5-8bd4-74f1f46b6c68.roa
File:                     45b13b98-2d9b-39e5-8bd4-74f1f46b6c68.roa (raw, json)
Hash identifier:          XuBXdkxobWkDH0u415bl9lOmeWXuz7gZk8uA6vHDCIU=
Subject key identifier:   DF:22:08:52:2C:F4:53:75:24:4A:18:9D:75:4A:CA:36:C0:BE:21:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECF75919BAF6EE6DB34100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b13b98-2d9b-39e5-8bd4-74f1f46b6c68.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.155.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:f7:59:19:ba:f6:ee:6d:b3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7e00689b-fc43-4d22-ba4f-e68c270bf5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:0c:06:35:5b:cc:19:94:48:f5:ea:3b:a0:
                    84:70:77:93:9d:68:8e:34:d7:08:cd:92:e8:f3:82:
                    7a:80:9c:28:41:d6:5a:b3:67:8b:79:8f:93:33:9a:
                    b9:66:24:ae:85:e0:8f:d1:49:8a:ba:14:e8:69:e9:
                    eb:cb:1d:3d:39:8b:11:af:5d:b7:23:9f:c8:df:13:
                    de:e7:7d:f7:f6:b6:84:59:6d:b4:7c:75:b2:46:fd:
                    25:86:68:65:1c:3b:24:7b:2d:27:a9:2d:2c:a7:cc:
                    23:85:46:b2:29:d0:76:36:43:17:8b:ba:ba:7d:08:
                    5f:2d:a8:b4:0d:47:ef:a4:49:6c:bc:7d:64:67:5b:
                    bc:0c:f7:bb:a0:4e:bb:4e:59:ca:3a:45:85:a8:1d:
                    9c:84:dd:9b:9e:de:53:d4:df:60:7c:6b:55:dc:56:
                    b5:d7:14:79:9b:11:64:1d:71:29:9f:53:66:02:b4:
                    4b:2f:f6:72:e5:0b:fc:1a:24:aa:64:f7:d3:26:80:
                    3d:39:3c:3c:fa:25:24:90:f4:c4:ad:64:8c:d2:34:
                    77:4b:59:cd:7a:3a:2e:3d:9d:88:6c:d2:de:4a:23:
                    ec:0e:93:6d:1c:fa:12:ac:b2:63:c1:fc:94:4c:47:
                    61:1c:f8:7a:8a:9f:25:db:0e:94:dc:3b:2d:46:e2:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:22:08:52:2C:F4:53:75:24:4A:18:9D:75:4A:CA:36:C0:BE:21:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b13b98-2d9b-39e5-8bd4-74f1f46b6c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:54:ba:c2:aa:ca:ff:d0:f9:f2:b4:1e:64:45:6b:5d:28:
         f5:2d:1a:89:3f:5f:c3:59:80:2a:f0:d8:6e:50:18:ab:b0:bf:
         c4:d9:8f:d6:fe:07:ee:fc:24:b9:1d:06:d9:7c:de:3e:7b:1e:
         a2:3f:c1:1d:34:64:e8:90:ba:c7:15:4d:83:f9:db:23:0b:ee:
         41:37:3c:3c:de:b7:68:bb:4f:44:2e:8c:f7:91:19:fc:ff:85:
         d0:69:d7:34:f1:49:1d:7c:4c:b4:69:96:ca:51:4a:89:49:71:
         b0:6e:e8:c8:78:62:c2:f5:96:9d:bf:68:63:5d:7d:ac:a1:2c:
         d5:d3:81:b3:0e:cd:be:55:7c:95:ea:0e:c1:42:25:13:63:63:
         ba:d0:34:43:99:04:94:8b:eb:cc:2b:c5:26:7b:c4:d7:5f:2e:
         c2:90:a5:3c:9b:f2:62:db:aa:ce:c7:c4:b6:d3:ff:23:be:1e:
         6b:c6:a2:7f:66:b8:85:7e:91:ef:35:35:5d:73:88:52:cf:2a:
         b5:42:bc:a9:94:02:06:08:c5:95:c8:7c:91:fe:38:14:af:14:
         6f:bc:b7:22:f4:f7:e4:9e:12:a2:00:c6:c6:b0:84:99:5e:20:
         24:b3:7c:ba:8e:3d:2c:a0:60:9f:ed:ad:94:7a:a7:6a:2b:c4:
         ba:0f:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:33:03 2025 by rpki-client