Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa
File:                     e6feb917-89bb-37c9-856a-4f4684a56f4c.roa (raw, json)
Hash identifier:          6gRe5VCHfjVs59TVyy0YtHkfby+drqwcQ/aDk4a8CCk=
Subject key identifier:   38:C4:4F:18:C5:9F:E8:87:2D:D9:15:DB:2A:4E:D7:C7:BD:08:9B:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEB8F407B5502C3184A180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        73.32.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:b8:f4:07:b5:50:2c:31:84:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=83bebb8b-92f0-4cb9-bfc1-ff37b3ee5f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:f6:cd:0f:55:72:b8:04:ff:c6:4c:20:72:
                    5e:cb:f2:45:c5:c4:9a:75:b4:82:87:70:42:6b:42:
                    fb:94:8b:be:de:40:8d:e3:d8:a3:8c:03:49:f4:e0:
                    bf:d3:33:de:f6:32:f6:15:45:f3:49:ee:24:80:60:
                    59:e5:6d:d5:4f:0b:5f:42:20:7f:63:f4:92:5d:0c:
                    81:c0:fa:bf:20:d4:68:2e:2b:f6:61:f7:4b:44:b6:
                    b4:45:93:f4:15:34:c9:34:21:a1:f4:8e:f7:2a:f2:
                    f3:1f:57:7a:3d:d1:f4:16:0a:cf:84:c1:44:03:7d:
                    df:30:68:dd:d4:2e:06:6b:23:4d:66:5a:3e:27:f3:
                    c5:de:15:49:74:72:79:aa:39:73:c7:ad:9c:ad:57:
                    f7:b4:1e:a5:2a:32:89:f9:86:14:7d:c6:4f:15:fc:
                    e3:ae:5f:54:91:10:55:47:2a:5e:c5:5e:4d:be:40:
                    92:ad:f2:0c:66:a6:72:80:76:52:56:ba:83:af:64:
                    b6:3a:ca:17:a4:5b:ce:4a:f8:0b:11:9d:a7:52:14:
                    32:bb:0d:bd:f2:06:1f:e8:23:d9:79:1b:c3:05:8d:
                    39:a3:22:02:29:9a:bb:b0:9b:a6:7f:8e:58:33:81:
                    64:6a:a6:97:e0:12:b1:16:ba:71:7c:c2:31:ab:f0:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C4:4F:18:C5:9F:E8:87:2D:D9:15:DB:2A:4E:D7:C7:BD:08:9B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:67:78:a1:a7:53:52:56:ef:5d:24:86:58:c4:8c:21:91:65:
         c5:e0:ef:dd:96:62:97:ce:80:b3:2e:f1:51:08:43:74:b2:49:
         c8:c3:93:93:15:7a:17:04:04:b1:67:3d:97:1d:fa:6f:43:83:
         4f:24:b2:cc:4a:26:8a:bd:26:a2:21:d2:26:87:6d:03:ff:12:
         35:ae:18:de:33:66:3e:dc:f1:f0:d2:6b:c6:fe:7f:77:4a:5a:
         ec:db:b6:57:0f:1a:13:d9:2b:0f:77:df:bf:ae:93:4d:34:df:
         ca:24:a6:02:0e:b8:d4:22:59:68:79:b5:81:18:b5:b1:de:8c:
         16:1a:e6:8c:9b:2f:e0:7b:70:00:d9:95:3e:35:ef:d9:f3:1b:
         66:0e:3f:69:c5:09:42:bb:3c:c0:07:a1:59:0d:5f:16:f6:76:
         f8:83:a5:6e:e0:54:a2:51:0c:10:82:4e:1f:d5:32:f2:72:fe:
         57:ef:60:f1:d7:a1:c5:6a:6e:0b:fd:8a:91:aa:ba:86:3e:d3:
         dc:b7:d5:f1:4b:af:76:39:4c:a9:7d:cf:c8:53:34:aa:c5:c5:
         66:4f:77:56:2f:f9:8a:35:d4:76:ee:d6:b7:5f:45:93:0b:35:
         de:77:65:11:67:76:ca:ce:85:1f:63:e1:32:b8:36:1d:ab:70:
         9a:99:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:35 2025 by rpki-client