Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e8da7c-f44e-3190-a1e2-ef41ea0bd25b.roa
File:                     a2e8da7c-f44e-3190-a1e2-ef41ea0bd25b.roa (raw, json)
Hash identifier:          nKm3/bYggkxvkV081f+LfizHRJZhCNM9t97Fq4t7uaE=
Subject key identifier:   68:7C:FB:8D:F0:DD:B1:B7:7F:07:69:87:1C:75:A3:4A:D3:F7:DE:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECCFED6019021823DBBF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e8da7c-f44e-3190-a1e2-ef41ea0bd25b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        73.191.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:cf:ed:60:19:02:18:23:db:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e91b95f9-5f3c-469d-8063-e91de9ebd05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:72:d5:30:6a:c6:c7:58:58:99:4c:a5:6d:
                    a6:c5:88:78:1c:6e:fb:b5:bd:a0:5b:3b:50:4b:d6:
                    81:a4:bd:36:dc:11:91:76:93:a1:27:a3:c4:55:a5:
                    9a:2a:bd:bf:22:96:0a:9e:6c:fd:11:89:41:a3:03:
                    c9:85:db:6e:05:60:39:7f:04:85:ff:69:70:b8:1f:
                    7e:e9:81:4b:6d:91:44:01:21:ec:3e:93:24:b8:5a:
                    b0:f7:ef:a6:b8:44:5f:91:f3:bb:e9:27:91:da:64:
                    8f:5a:91:17:0e:57:9c:42:15:c6:10:09:07:db:5e:
                    ca:e5:77:6f:0e:99:66:59:8e:ac:7d:96:1e:f8:e5:
                    71:5f:07:e8:f9:0f:0b:f9:0e:f6:3e:6c:ea:78:0d:
                    c3:3a:6b:b5:d1:2b:8e:ab:e5:9c:47:a0:d5:25:f5:
                    49:8a:c1:27:b3:c9:f9:95:7a:74:2e:1f:30:4d:ba:
                    76:ac:62:da:02:b0:1b:e5:bd:e6:54:9f:c4:f5:fc:
                    06:e4:74:61:4f:3f:81:60:49:cc:fc:47:53:3d:41:
                    84:f9:d2:2b:9c:1a:bf:ea:23:9c:2a:00:cd:0d:46:
                    f8:1c:b9:04:33:98:e2:43:7c:06:f8:c2:1a:bd:2a:
                    ab:6d:46:67:a0:b5:b1:87:de:55:a4:e8:96:6d:53:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7C:FB:8D:F0:DD:B1:B7:7F:07:69:87:1C:75:A3:4A:D3:F7:DE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2e8da7c-f44e-3190-a1e2-ef41ea0bd25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:27:54:2a:46:34:b7:5c:45:28:97:04:69:8f:2a:df:4c:
         8d:98:d4:48:f6:07:0b:5f:ca:23:d3:17:a3:93:f0:25:c8:2e:
         e3:63:af:f9:71:3d:10:a7:d5:81:b2:d5:87:9f:88:ae:bf:41:
         e6:09:e0:f4:7a:32:33:67:af:5d:fa:2f:b6:40:61:4a:c3:36:
         55:73:ec:f1:26:63:d9:80:ec:00:7b:4d:64:6f:26:c2:44:07:
         6a:40:77:5a:63:b9:a2:9c:26:22:89:20:12:e7:45:be:93:5f:
         65:54:c0:9d:2d:fd:34:d7:62:4c:ef:cf:d0:99:0b:97:80:66:
         17:96:31:f6:38:a8:0f:b1:d3:96:28:3f:ab:cd:c5:39:34:a7:
         59:6e:7c:3f:e7:c7:0e:23:7d:ca:66:c1:4b:fc:34:8b:dd:4b:
         22:b9:11:f9:ac:ca:be:9c:22:22:72:13:68:c5:04:38:51:a2:
         55:9e:02:11:3d:e3:4b:86:51:23:83:e8:14:da:0d:21:4b:e8:
         14:76:3d:d8:34:63:07:ec:61:00:98:9e:df:4e:b4:ff:40:b6:
         c4:8d:d9:c4:a2:94:15:15:17:d5:3a:19:90:ca:fb:da:56:b3:
         44:57:26:e4:ed:91:5f:65:9b:7a:b3:db:4d:58:be:fd:59:36:
         45:fb:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:46 2025 by rpki-client