Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8140cc11-4088-3bea-b121-0661d1dcfde6.roa
File:                     8140cc11-4088-3bea-b121-0661d1dcfde6.roa (raw, json)
Hash identifier:          CVMRJnpTlNWSOcYs/notWMsB2fC70G57rHSOT6dzDd0=
Subject key identifier:   CE:51:4E:87:3F:77:29:5B:7D:D8:02:E4:6E:3F:1C:6B:10:13:E9:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECC20E96F4CCBC63634440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8140cc11-4088-3bea-b121-0661d1dcfde6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        71.197.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:c2:0e:96:f4:cc:bc:63:63:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4eb2c7af-aa37-44a4-a4ba-857f10defca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:24:bd:ab:a8:08:88:75:f7:e5:7e:0f:17:
                    82:39:08:a9:79:01:ea:ce:6e:18:ed:ba:31:04:e0:
                    68:38:b9:b5:82:e5:af:ee:7e:8c:f2:f4:d0:24:d7:
                    5a:17:fa:ca:e0:71:19:87:2f:dd:7c:41:87:2a:06:
                    86:a2:62:11:d9:b1:cf:84:fe:2a:16:45:52:5a:2e:
                    c9:15:43:1c:41:0a:ab:23:0e:8f:94:8b:27:fc:55:
                    93:e9:78:61:4f:91:f1:83:7e:f3:1a:f5:42:04:dd:
                    e8:47:0c:00:48:54:2c:0b:a4:94:6c:2f:d2:76:ba:
                    35:cc:ad:d3:be:af:c0:09:cd:cc:8f:ea:ca:8c:4c:
                    87:7a:58:e3:e4:0b:a7:ad:a8:49:8f:46:1a:17:a5:
                    56:24:9b:59:f7:81:75:14:f8:b8:32:2e:92:94:67:
                    29:23:04:3b:7a:3f:9d:f4:01:84:8c:06:a5:e0:f3:
                    f8:9b:90:10:5e:ca:bd:7b:5a:2b:1e:1c:7f:70:57:
                    65:c0:97:cb:59:1d:3f:75:c7:f2:71:0b:1a:08:96:
                    70:b8:17:20:75:56:1c:29:16:da:98:bc:c1:73:ce:
                    1b:2c:3e:80:9b:61:a5:ba:97:b7:35:1c:6e:2a:df:
                    ec:b9:b3:6e:a1:4f:e5:74:52:f6:b2:d5:5d:1a:bd:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:4E:87:3F:77:29:5B:7D:D8:02:E4:6E:3F:1C:6B:10:13:E9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8140cc11-4088-3bea-b121-0661d1dcfde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.197.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:f0:f0:4a:53:d1:a6:7c:86:3b:67:29:04:95:9d:26:4e:aa:
         23:93:57:47:31:2b:2d:01:fc:46:75:ba:a6:71:cb:7f:1e:9e:
         e3:e3:89:59:17:1e:4e:92:e6:85:2c:1c:4d:49:c6:6d:85:55:
         a3:e8:ea:8d:cc:ad:74:67:c5:7a:8f:9a:08:c0:a7:32:fd:bc:
         e2:fc:6d:ed:88:a2:ca:61:7e:d7:e5:5f:29:6d:27:06:c4:fe:
         15:74:9a:6f:c7:48:9d:f5:38:6f:eb:fb:c7:68:b6:38:1a:e1:
         7c:b1:ac:f2:ba:1d:db:69:c4:54:d9:ca:e4:1a:10:30:6a:4b:
         a0:82:3f:6c:59:63:09:48:23:c3:35:7a:9b:e2:3c:ab:c4:bd:
         50:f4:c6:ad:23:74:bf:66:4a:b6:2f:ee:fb:70:f2:40:2d:d4:
         d2:d0:f0:74:16:fd:3e:53:ab:c0:5c:b5:8c:87:14:61:09:fb:
         b7:fe:26:20:1f:67:80:b5:3a:9c:22:82:c6:10:93:9b:fb:40:
         ca:cd:45:4d:5e:45:69:25:96:8c:d0:f0:ef:37:f3:00:6d:91:
         bd:19:04:e7:3a:ca:61:7f:7f:bf:85:bc:43:c2:d4:22:6c:59:
         5c:11:ff:83:de:92:4f:6a:4a:69:e3:5c:f6:a2:81:02:e7:5f:
         19:95:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:35 2025 by rpki-client