Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb54c01-0dec-316c-965e-e0d80ea50b96.roa
File:                     cfb54c01-0dec-316c-965e-e0d80ea50b96.roa (raw, json)
Hash identifier:          +Fwceg54vWJRusv9Nm88wvDFCU/hOa7bBFfOz+LRzrw=
Subject key identifier:   FB:EC:3F:86:85:A2:44:97:E0:4D:90:79:22:3B:C1:35:A9:36:84:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED6B26F77C6C937911A2E8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb54c01-0dec-316c-965e-e0d80ea50b96.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        73.240.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:6b:26:f7:7c:6c:93:79:11:a2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=969f0b4c-60fa-43ae-8e5b-3f3c44573d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:a0:2d:3d:6c:e8:e6:1b:5e:d5:ba:38:12:
                    9d:29:31:05:86:90:59:9e:51:bb:e9:7f:d9:57:2c:
                    9b:7d:e7:ce:44:1e:c2:aa:db:d4:f0:38:10:06:99:
                    3b:89:11:af:97:21:e5:94:b6:6d:68:ac:9b:b2:36:
                    40:fb:ba:2f:d4:2e:b0:42:72:f3:80:b4:64:fb:ed:
                    89:45:51:5f:57:25:bc:37:05:ca:15:21:e7:b5:32:
                    9c:52:5b:54:cd:16:ac:23:5d:c9:f5:b2:f1:d9:64:
                    88:bd:be:41:ee:29:d5:fd:8d:70:87:e9:9b:0c:53:
                    cc:a7:43:b0:bb:eb:ad:b9:06:22:16:61:f8:38:a0:
                    0f:a6:98:1c:73:00:58:f0:d2:b8:4e:8a:f2:6b:9b:
                    b8:79:0d:0d:af:2b:31:27:cc:0d:d4:f8:97:e3:cf:
                    a4:3f:8c:ce:15:14:99:0d:9e:6c:5f:8a:85:bf:42:
                    f5:99:1b:aa:9c:b5:b6:1f:7d:db:77:4b:38:52:ef:
                    fe:d1:eb:ca:16:75:51:f2:64:2e:8d:5e:dc:e6:3b:
                    ae:f4:b5:81:16:c2:05:e2:3d:9c:3e:0b:96:86:ac:
                    d5:aa:3a:07:1b:6c:5d:f0:47:77:c3:3a:cf:bf:28:
                    ab:bb:19:d0:ed:6c:cf:49:16:0d:c1:d1:24:a6:74:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:3F:86:85:A2:44:97:E0:4D:90:79:22:3B:C1:35:A9:36:84:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb54c01-0dec-316c-965e-e0d80ea50b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:33:2d:35:84:f3:ba:ad:1b:37:40:b1:27:c2:b8:cd:10:
         73:00:1c:3b:42:da:4c:db:ac:8c:69:4a:a0:eb:da:eb:2c:fb:
         c0:e2:ea:56:27:1c:ce:c7:a1:5e:fd:0e:06:81:86:a7:20:b7:
         de:77:60:94:3c:b9:1a:77:0e:a2:18:6a:1b:93:45:55:dc:29:
         50:0c:ad:52:10:de:be:6d:fa:c9:61:1d:6f:5e:f4:f3:f8:57:
         88:dc:55:88:68:7b:84:cd:77:92:3b:e9:7f:82:8e:ed:32:89:
         2b:93:0c:40:c6:de:16:b7:b9:d5:c3:ed:05:9a:f3:69:45:a6:
         52:3c:45:f7:a3:74:1d:ca:8a:6f:1c:09:74:d0:0f:18:f3:dd:
         64:16:7b:1f:8d:ae:44:44:66:eb:3d:2e:14:92:21:cf:cd:2c:
         c6:a0:1c:de:40:a5:f8:2d:0e:58:93:03:fd:f8:da:f8:5c:4b:
         bd:4a:70:72:98:f0:77:48:d9:65:bb:de:fb:2c:c4:41:df:40:
         eb:2f:8c:6a:47:eb:3b:ce:d7:d1:57:42:e1:9a:7e:01:d9:7c:
         1d:73:f6:fb:82:76:f1:79:f9:bc:e7:c5:77:9e:0a:76:75:0d:
         92:65:60:59:63:27:71:b2:c1:fb:47:fa:c5:93:c8:e2:a0:12:
         79:b7:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:00 2025 by rpki-client