Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa
File:                     e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa (raw, json)
Hash identifier:          qJp4Rs/IBUWQDMFHRrvQc+wRwaKab2UkUcuIJdAqyDE=
Subject key identifier:   85:F1:36:10:01:31:A7:B2:79:3F:C5:ED:75:26:30:9F:DC:72:25:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED6B410282A40BD035E480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        73.240.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:6b:41:02:82:a4:0b:d0:35:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9e799af3-492e-49c4-9951-6a80e1758d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:c0:6b:eb:81:66:b0:00:1e:86:95:15:46:
                    75:59:9b:f6:be:3f:6b:ff:14:2d:5c:a7:00:a4:5a:
                    47:3d:57:0d:e2:ed:47:ae:81:74:24:fc:eb:db:69:
                    29:ea:10:d1:01:26:fd:cb:a1:2a:df:bb:45:4c:88:
                    10:a0:8a:57:05:92:3d:b0:57:35:31:bc:7b:04:c0:
                    bc:e0:00:7f:3c:05:8e:b5:01:2f:8e:9b:34:92:44:
                    fe:62:fb:df:5f:80:65:fb:84:7b:a5:2f:66:f9:b7:
                    5a:d9:c6:58:ef:24:a6:46:63:e0:13:ac:b7:6b:fa:
                    b0:85:44:8f:9f:a9:ac:4b:c0:df:bc:d7:01:9a:2f:
                    41:f8:04:8d:22:ea:71:ea:95:4e:b9:28:e9:50:0d:
                    01:8a:f8:c0:93:a4:c2:ed:14:98:25:e5:08:72:e1:
                    bd:33:7d:21:8b:e9:82:ee:7d:6e:d3:58:30:92:7d:
                    98:98:8a:95:c0:72:24:f2:10:da:2a:81:e6:be:13:
                    80:09:65:6e:a7:e5:bd:09:aa:7b:b0:2c:89:54:69:
                    36:10:d6:ef:2d:a2:52:09:f1:80:8f:f6:91:40:7e:
                    5a:33:63:d6:b5:77:82:fd:60:5e:da:68:b8:83:0a:
                    0a:32:63:b6:5d:b1:e8:b2:1e:d1:70:c3:c0:e6:59:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:36:10:01:31:A7:B2:79:3F:C5:ED:75:26:30:9F:DC:72:25:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:78:1e:25:ba:98:a7:1e:61:69:ff:87:6c:54:0a:90:5e:
         3c:5f:e8:9a:29:07:93:f2:07:13:30:8d:ec:98:ca:91:41:cb:
         3b:b4:21:e7:a0:d0:c4:34:1b:f4:d0:aa:7b:95:9c:53:b4:eb:
         36:bb:a3:ca:69:82:66:a2:7c:d1:ce:65:35:47:90:4f:a2:28:
         82:6a:c3:94:92:59:f8:99:7f:84:49:69:7c:ab:15:7c:ea:2a:
         ae:04:fb:92:55:c9:e4:6f:4b:c5:49:c7:4a:3a:bc:cd:00:d5:
         a6:2e:e5:38:bc:67:85:6b:59:29:6e:46:09:0b:e6:c3:52:07:
         52:4c:9b:2d:70:7c:89:a6:db:3c:aa:19:a2:09:27:6c:46:e1:
         df:18:b2:6f:c7:2c:68:be:1c:73:75:5f:c5:7a:fa:c3:bd:44:
         9c:01:8b:57:2c:29:cd:ee:f1:08:a8:ca:0e:b4:d1:50:cb:97:
         6c:a3:b1:fe:0a:e0:58:6a:4e:f7:ca:f7:03:0a:06:f6:2b:52:
         13:3a:0a:5b:c6:6d:43:7b:31:bd:50:8b:41:23:92:1a:3c:df:
         fe:2f:c4:28:f9:77:cd:e9:22:55:6b:3b:f1:a9:b1:4b:8c:2e:
         41:64:94:52:bd:c0:e7:6f:b4:89:26:09:8c:55:cf:ce:e5:a9:
         54:11:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:20 2025 by rpki-client