Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa
File:                     fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa (raw, json)
Hash identifier:          yb7lI5kQZWoKTUc1KvJFwTchl3vXrkLTwUeXLYJGyw8=
Subject key identifier:   B8:61:48:4D:E2:FC:37:F8:33:87:43:37:C7:3B:29:A8:69:42:CB:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EB9BD8B35E45402708B280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        71.238.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:9b:d8:b3:5e:45:40:27:08:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b6f4771c-eb59-4297-998c-f9a94d9df69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:64:b9:1c:ed:2b:36:83:fe:37:fc:95:ed:
                    27:d6:96:f1:9a:61:a4:81:93:18:3c:ae:3b:ab:2a:
                    b7:e5:fd:49:c4:10:99:06:2a:34:e4:dc:11:8e:e8:
                    83:60:60:b9:00:b5:ab:7a:52:9a:e7:95:ed:4e:4c:
                    56:9a:c2:4e:f5:a4:dd:6e:4f:d2:9a:69:e8:46:d0:
                    42:51:47:cf:0a:5a:3f:5c:e2:3e:1a:9d:b7:c2:a2:
                    a3:14:8a:23:21:0d:f1:af:8c:51:a5:87:d7:fb:ef:
                    fc:e6:c5:6d:ba:56:e9:82:e7:49:d8:60:90:ba:cc:
                    45:eb:d1:23:7d:ed:69:a5:c7:32:b1:2e:5d:4a:8e:
                    7c:62:96:b7:8b:d0:c5:cd:74:44:05:c3:ed:8b:be:
                    c0:c3:d6:60:40:3a:9e:00:22:64:5b:b5:e4:61:b0:
                    61:e1:4c:6c:d5:71:4c:37:b0:2c:a3:76:ca:2d:cc:
                    a5:e6:10:d0:e6:00:74:58:3c:eb:ee:c3:ee:df:5c:
                    6f:12:89:09:75:e6:59:02:35:87:4e:34:6f:a5:74:
                    40:5a:82:74:2a:f8:3f:03:1a:54:fa:93:65:59:86:
                    f9:23:52:17:95:ee:60:4a:78:c1:53:9d:ce:58:31:
                    b9:ee:5f:e5:8a:a2:45:ae:45:7a:ca:6e:61:1c:ae:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:48:4D:E2:FC:37:F8:33:87:43:37:C7:3B:29:A8:69:42:CB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:b6:c4:67:87:bf:25:43:41:41:19:f5:86:fd:cb:82:b0:
         13:a7:a1:f2:c4:af:a4:17:72:b2:cc:08:5b:a3:09:8c:8a:81:
         84:ff:76:4d:b4:74:a4:b4:e8:43:ba:97:02:f2:23:60:45:07:
         1d:cc:b1:15:6e:cd:57:d6:47:79:bc:34:43:e5:cc:bf:72:37:
         18:7c:de:99:94:72:0d:a1:17:42:5b:88:d8:be:42:f6:85:e2:
         d5:bc:9c:48:8e:c7:b4:f4:9b:3c:4b:5e:7e:68:8b:91:83:a7:
         27:6c:c8:fc:45:a9:68:cc:e2:c4:db:98:2a:7d:e0:cf:da:70:
         d2:34:ac:b0:47:9d:40:7d:77:3c:0e:e3:da:95:d4:93:cf:be:
         c9:e2:8e:09:cf:ea:66:72:2d:a8:88:b0:69:20:a2:c0:1d:96:
         80:47:02:57:a4:f1:41:68:52:9f:55:04:9c:87:62:39:94:ab:
         70:71:ec:3d:80:0d:47:07:30:4c:bd:39:d1:88:6d:08:f9:c5:
         24:56:e2:bc:20:5d:c2:70:71:a0:02:67:0f:ab:8d:11:32:96:
         4e:b2:67:a5:85:7b:00:74:4c:ed:5c:5c:5f:e4:d9:59:50:17:
         2a:81:ed:1a:0f:a4:2c:4d:3e:95:86:33:7e:c8:ad:13:bb:ea:
         82:36:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:42 2025 by rpki-client