Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aecd039b-85f7-3a55-ae83-13d1d6210913.roa
File:                     aecd039b-85f7-3a55-ae83-13d1d6210913.roa (raw, json)
Hash identifier:          Qo4vOUJxQN6O9RlJeLkXuvj4aq5w6f7sFyGe80E0QEs=
Subject key identifier:   C2:ED:4A:82:47:8D:40:FD:20:E0:B2:86:61:CD:BC:14:25:DF:F4:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEA7423208892B5250D860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aecd039b-85f7-3a55-ae83-13d1d6210913.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.155.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:a7:42:32:08:89:2b:52:50:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8ac0421d-d22c-4565-a917-75a3d2bb0135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:8e:49:ce:02:96:57:4e:15:24:ae:b1:2b:
                    d2:4a:2a:e0:6e:c6:78:92:c8:d6:fe:3c:3e:27:4a:
                    0d:16:39:de:59:3f:5f:3e:0f:05:8e:48:9b:17:f3:
                    87:da:1e:87:b6:7c:58:66:11:a1:7a:2d:b8:61:50:
                    aa:e7:50:06:81:d9:7c:ed:f4:36:73:85:cc:2f:ed:
                    75:3c:fb:ed:1b:48:59:2a:9e:15:8d:88:73:be:d9:
                    4e:e3:4c:7b:83:a8:68:72:31:23:b9:88:cf:85:ed:
                    d9:be:6b:75:8a:4d:46:ef:76:e0:0e:95:f9:75:c5:
                    16:3e:23:4b:4f:d4:37:72:7f:67:fb:4c:c2:c0:42:
                    a8:02:06:5e:8f:8e:b4:65:e0:3f:59:32:e0:60:73:
                    05:b2:37:0c:5c:84:32:f6:cd:35:36:fb:da:49:a0:
                    ab:85:ec:2c:d7:74:6f:9f:a7:f8:7d:78:d6:33:ea:
                    3b:d3:da:dd:17:01:78:e8:45:ba:ce:bf:99:25:de:
                    1a:4f:d6:d9:9d:13:71:a1:bd:2a:95:f7:79:fd:8b:
                    9a:45:5a:92:5d:87:83:18:0d:4c:ad:c9:4c:c2:c1:
                    dd:1a:e6:54:72:cf:c1:3b:d7:2d:43:d1:76:d4:5a:
                    5b:5f:4e:1d:8e:7d:0c:dc:05:e7:ac:7d:78:98:58:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:4A:82:47:8D:40:FD:20:E0:B2:86:61:CD:BC:14:25:DF:F4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aecd039b-85f7-3a55-ae83-13d1d6210913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:2f:c2:72:77:73:ad:37:fd:df:99:46:c0:b1:28:50:8b:
         3a:42:f4:07:78:17:33:ec:2f:19:06:98:05:e6:5c:d5:fe:c0:
         05:9e:86:e3:cf:b0:aa:e9:9a:dd:37:77:a6:98:2d:d2:6f:b9:
         a3:2a:8c:c5:c0:dd:4e:40:51:ba:b8:6f:df:50:e8:3e:5c:3c:
         2a:0c:e3:9b:56:0b:a9:18:82:08:99:0d:b3:d0:12:57:15:6b:
         bc:a3:65:8f:ec:c1:75:82:3f:75:1f:b9:0d:db:77:70:ed:01:
         61:4b:bf:e5:70:98:95:e6:32:f3:be:6f:a0:3a:f2:ed:9d:85:
         7e:8a:74:f4:29:32:63:0e:3f:1f:ff:e0:4c:dd:b0:9b:c9:07:
         27:50:1e:2a:97:b1:f3:d9:e0:d4:f4:d0:a2:c8:70:4b:dd:b5:
         0a:44:db:ed:24:bf:42:90:bd:74:ae:4b:4a:4f:d8:bf:00:bb:
         1d:41:69:fe:cf:a4:c8:aa:73:32:cb:fd:56:b3:fa:ea:46:ab:
         b4:e8:6f:fa:69:a4:49:1c:d7:2e:fa:51:f0:21:47:7b:bf:f6:
         f7:5f:93:9f:cd:b0:01:d3:97:2a:f8:63:fe:80:de:cb:29:08:
         10:11:29:0c:c9:87:d9:9a:d1:6d:59:d1:18:f9:b4:bd:29:75:
         c4:2f:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:38:42 2025 by rpki-client