Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d838feaf-2357-3a98-b977-8536f5dfec4c.roa
File:                     d838feaf-2357-3a98-b977-8536f5dfec4c.roa (raw, json)
Hash identifier:          ypfbC8T7hnhSQrL7mAHLsk7irbc/j9TB/ryC5RUMcZI=
Subject key identifier:   29:91:3F:B0:F4:2F:E3:C6:02:6F:58:82:C6:1D:44:8A:C1:5D:31:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220FB198F455650E8E54880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d838feaf-2357-3a98-b977-8536f5dfec4c.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        73.177.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:fb:19:8f:45:56:50:e8:e5:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=221925e2-2b1b-4232-b4af-838ea95e6dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:28:3e:a0:4d:8b:c4:25:bf:31:18:dc:d1:
                    5b:e2:85:9f:12:d6:47:f0:d5:60:dc:93:91:59:58:
                    2c:e7:c4:93:b9:90:ee:27:6e:dc:3b:d6:9d:1e:d3:
                    10:03:91:63:9f:dc:4b:4a:49:bb:8d:6c:8d:f9:70:
                    0e:bb:20:66:a4:1a:71:89:21:2f:e1:27:5f:88:a2:
                    b0:ac:6b:a9:92:c0:28:bc:46:3c:fe:bd:a5:d3:ff:
                    f5:db:76:e4:ff:c6:fe:09:ee:cf:4f:45:81:9b:eb:
                    2d:bd:9f:1f:46:01:fb:92:2e:25:91:56:91:0e:8b:
                    f4:de:49:d5:20:d9:00:ab:e2:c9:5a:32:25:65:b3:
                    ea:1f:fc:87:cd:30:a9:96:3b:22:13:5c:b4:99:dc:
                    28:4b:9a:d1:5e:44:e2:b9:85:f1:3e:7c:9f:b7:f1:
                    61:0f:a3:93:4f:87:ff:00:c9:e6:9b:e6:3f:13:ea:
                    d0:47:ad:7c:54:7a:6c:49:f4:a6:5b:16:70:bc:a0:
                    01:f7:89:6a:0d:79:d2:bf:56:21:13:b3:4f:d9:42:
                    e0:62:d6:0a:4a:93:87:6b:78:24:9a:38:21:b4:92:
                    f4:1c:f1:4d:35:4a:d0:83:f0:54:ca:41:ec:55:c0:
                    9c:bd:b8:58:09:af:48:13:bc:30:b2:3a:d1:d4:8c:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:3F:B0:F4:2F:E3:C6:02:6F:58:82:C6:1D:44:8A:C1:5D:31:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d838feaf-2357-3a98-b977-8536f5dfec4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.177.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:d6:da:d7:a4:18:d7:df:3f:a4:7a:8e:39:d2:36:f6:69:
         de:78:d1:e4:a8:44:12:5e:fb:40:d6:9b:3e:ec:9d:93:a6:4d:
         a2:b9:cc:55:aa:4d:87:bd:ac:2d:6d:97:91:c9:95:8d:99:10:
         b8:5f:29:cf:ce:7b:91:83:e2:ab:e4:4b:a8:bb:d7:99:75:89:
         0a:0e:48:de:39:a4:b9:aa:8e:22:ae:94:e3:01:57:22:9f:9f:
         37:27:ba:0a:48:3d:dd:29:dc:bb:74:0c:0f:e1:4d:28:5c:34:
         5b:7c:6a:5d:4a:e1:ed:24:69:0e:8f:95:f1:78:a6:f5:c6:a8:
         dd:6d:9d:85:6c:a3:9a:da:0c:ee:93:c9:8f:dc:8c:44:4a:2e:
         b1:36:3f:8f:0f:e8:bb:4b:61:74:7a:ed:71:52:0f:0a:65:3f:
         34:58:26:e9:26:74:e1:3a:c8:4e:3a:04:3c:67:22:9a:0d:ac:
         f5:06:ae:9c:1d:fd:00:6a:8a:ae:33:2d:9a:90:2f:13:ea:e0:
         0a:2a:2d:8f:7f:77:d4:dc:21:a4:91:c4:ec:7c:38:b5:76:a7:
         36:56:79:d4:df:12:56:f1:72:03:d6:dd:68:6d:7d:f7:a3:52:
         91:ef:8f:0b:6e:38:ac:e7:24:52:2c:bf:70:28:f7:31:fd:b8:
         8e:fb:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:40:20 2025 by rpki-client