Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870d4e55-53e7-372d-b260-ed5929ba076e.roa
File:                     870d4e55-53e7-372d-b260-ed5929ba076e.roa (raw, json)
Hash identifier:          QIr80BsYaS7erjctmWffxsIbTTnV+nl+EZKTlVvv+wM=
Subject key identifier:   DB:14:2F:15:7D:05:7F:52:0F:44:33:BA:AF:14:F3:EF:C9:F5:70:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE95B20987C00B6460DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870d4e55-53e7-372d-b260-ed5929ba076e.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        174.170.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:95:b2:09:87:c0:0b:64:60:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a9d850f0-00fb-4915-ac89-1cbe8107b577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:07:6f:53:cf:19:b3:d9:bd:8b:dc:cb:7a:
                    fb:17:97:11:2c:52:17:65:eb:fc:fd:11:4f:02:ea:
                    ef:c6:d2:eb:ef:c3:f2:67:2e:f8:3e:78:37:3a:f7:
                    1f:4f:cd:70:dc:c5:dd:61:1e:45:be:8b:9e:97:97:
                    8c:ee:60:5d:b7:23:47:29:89:9c:30:d8:25:02:c6:
                    8d:43:8f:ce:16:c2:27:ac:61:cf:0d:7c:45:ae:31:
                    55:8f:a4:cc:c9:d3:c3:83:6d:29:95:79:1c:f0:f4:
                    5d:1f:21:72:9c:1f:05:9c:8f:cd:f5:ba:53:3c:fe:
                    20:30:bc:6d:8c:84:7a:45:7c:39:52:9b:92:2d:28:
                    b4:0d:3e:0a:ab:2c:34:a3:3f:34:b8:be:13:16:22:
                    5c:4b:fb:c2:33:23:20:37:9a:3a:c8:4c:58:f3:1b:
                    62:8f:23:6e:93:30:55:1a:87:6d:f6:44:23:ce:1c:
                    50:c7:fb:9b:b9:f2:1a:38:e5:54:78:8a:f1:90:c6:
                    1f:78:13:39:b0:e2:d1:23:a0:04:e7:4b:d5:9f:c0:
                    d4:a9:75:36:24:19:ad:67:76:d4:64:a2:ba:3c:36:
                    50:c7:fd:e4:5e:76:40:d0:c6:c4:a7:cd:80:ca:fc:
                    3c:df:e3:b1:5a:4f:d1:0c:70:ca:48:3f:09:3d:25:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:2F:15:7D:05:7F:52:0F:44:33:BA:AF:14:F3:EF:C9:F5:70:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870d4e55-53e7-372d-b260-ed5929ba076e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:c3:37:1d:67:8d:45:0b:10:d0:80:12:17:3c:77:62:46:
         51:82:92:3f:53:b5:a0:fe:af:fa:44:a9:7d:ff:a6:da:67:94:
         cd:5f:64:9b:d3:e7:8e:6c:cc:0b:1e:bb:32:4c:83:ca:a1:3b:
         68:6e:c3:e9:60:53:af:ab:09:bc:3e:79:58:04:fb:99:79:ee:
         6b:18:8f:35:2d:cd:5a:f1:19:7b:8d:93:56:99:33:02:79:be:
         b6:c5:ef:2c:66:6d:28:ad:22:62:76:df:06:27:92:06:e5:b2:
         7b:5d:5b:03:0e:4f:dd:87:0c:4c:4c:d7:de:5e:f1:9c:81:a1:
         4a:85:ac:a9:19:df:85:74:06:7a:8f:e7:46:83:3d:d6:54:0c:
         aa:07:44:34:87:47:79:5a:00:dd:fe:14:17:24:f3:7a:6d:68:
         4e:2c:ef:9e:d2:2f:5d:1b:bd:f9:ec:e9:31:7a:aa:fb:b1:fd:
         33:91:4d:08:01:24:85:27:b6:3c:26:21:01:a0:2d:dc:2f:48:
         65:97:1e:6e:b7:b3:cc:36:af:62:ad:71:4b:d4:b6:bb:b2:48:
         d1:15:84:a9:4c:9e:2a:8d:2a:09:c0:f9:a0:e0:eb:4e:fa:a8:
         bc:e8:15:cc:76:aa:3d:ee:ee:05:84:ed:3c:95:85:a6:3b:76:
         b0:6c:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:24:34 2025 by rpki-client