Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa
File:                     f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa (raw, json)
Hash identifier:          te3au8EUl+ketnor60C33xRJh4oUEcUl9ZFpAom+n6g=
Subject key identifier:   15:19:64:04:D6:5B:AC:66:3D:96:C6:4E:63:BA:1A:13:64:BA:8F:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED6C7352B160ABF108E280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        73.240.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:6c:73:52:b1:60:ab:f1:08:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2ca882ad-991e-4393-bff0-9f7a8a0836b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:39:ee:32:d3:3f:d4:69:96:b9:1a:63:00:
                    b0:8a:c1:36:e2:86:7d:06:b4:d0:0e:c8:ef:b1:52:
                    7b:eb:57:73:5f:24:1a:96:7c:fc:39:30:06:00:6e:
                    a6:76:5f:d0:28:49:31:6b:16:2f:5b:71:df:4e:70:
                    a8:a8:d0:1d:dc:86:3a:ee:24:f5:0d:a6:e4:83:02:
                    94:3a:ee:c2:7d:b4:e1:f1:3a:27:ba:85:32:f7:d4:
                    ec:dc:0f:fb:a2:2e:87:16:ae:5d:71:30:6e:6e:63:
                    a1:bd:15:ca:80:ce:b8:dc:b6:09:a2:64:00:5f:d7:
                    9f:af:03:8a:e7:9a:a9:ef:87:55:40:b7:15:6c:f2:
                    9c:2d:a9:c6:41:39:7d:5d:c2:d7:49:1b:49:26:30:
                    93:a6:0c:de:9c:09:0e:bb:19:b6:07:10:f7:09:69:
                    18:fe:78:8e:7d:cf:84:54:08:ed:b1:64:78:95:71:
                    79:df:76:9f:7d:75:67:66:33:e3:e9:98:80:e3:6a:
                    68:c1:ff:8c:8d:91:c2:30:87:92:3f:13:21:16:50:
                    64:17:e9:fe:ba:9c:45:ef:08:42:e9:6d:a8:1c:00:
                    54:0f:34:10:94:2f:8c:0f:6f:11:20:74:7d:52:44:
                    15:ae:4f:3b:3a:46:f7:4d:e0:4b:ee:e7:29:98:ed:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:64:04:D6:5B:AC:66:3D:96:C6:4E:63:BA:1A:13:64:BA:8F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:60:1b:0f:63:c4:a8:d0:b9:3d:5a:3d:dd:22:07:a5:38:
         19:8a:90:fd:7e:97:9a:31:4f:15:42:a3:ce:a4:6a:1b:18:d7:
         83:e2:ca:2c:6b:bc:43:f8:2a:b5:83:f3:d8:ad:be:5e:8a:14:
         bd:9c:0f:2a:0a:00:dd:f5:ba:06:d2:c8:b5:12:65:0d:77:5d:
         e3:cf:83:17:ef:36:f9:df:d7:5a:f4:91:2c:32:3d:42:2a:f0:
         1a:e7:bb:b8:a3:f3:f7:a2:14:b2:ad:a3:0f:eb:9a:5e:2c:7b:
         ba:92:a1:61:d8:a1:45:72:56:ec:2c:19:0b:16:79:af:08:c1:
         f7:f9:e8:f5:29:19:81:e8:a8:03:73:5b:d8:7a:e1:cc:f7:74:
         bf:70:b9:98:10:7e:68:e5:79:3d:4b:bf:1f:9a:9e:56:d6:cc:
         7b:5c:eb:c7:45:fd:3d:e9:88:f5:83:64:62:65:a9:23:8b:82:
         cb:28:fb:df:8f:d9:67:6e:4f:59:1c:dc:2e:e1:fe:23:f5:73:
         81:ed:c1:ec:e3:15:7c:c3:93:42:2a:d0:0a:1f:02:2d:90:8a:
         8a:7f:93:a6:c4:61:47:d0:74:d4:4f:b2:d2:0f:49:dd:6a:13:
         a6:ec:47:c3:7e:f7:9a:2d:8f:8c:e2:dc:da:d1:39:ed:ee:20:
         a9:80:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:19 2025 by rpki-client