Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
File:                     36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa (raw, json)
Hash identifier:          0oQzN4WF/3t/qmNKsyWAtFGtLtN+GRuiBMT/VrNAQCc=
Subject key identifier:   4E:40:3E:62:9F:31:B9:0E:3E:8C:1E:07:7E:58:CF:6F:24:FC:B5:55
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584AB220BD5DA5BBEEAE6984DBD0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     55002
IP address blocks:        166.73.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:bd:5d:a5:bb:ee:ae:69:84:db:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=0a289975-1ab2-41ef-93de-b13e7346c1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:1d:b5:51:e6:d8:03:f2:5f:88:e9:4c:4a:
                    75:68:80:bc:9b:df:a4:4e:de:ec:76:85:c0:3d:f7:
                    c3:83:07:e0:f5:5c:04:6b:1b:fd:6a:6b:9b:61:4a:
                    5a:45:fd:05:8f:32:19:be:f6:a4:54:c3:32:48:c1:
                    2a:75:84:8b:e8:8c:71:73:11:1a:dd:41:b6:7a:9c:
                    52:01:a5:bc:0b:42:56:13:b4:e9:f0:64:d7:5f:e5:
                    7d:9a:55:70:2f:ca:dc:52:d7:ab:4e:8a:d0:64:db:
                    c5:b0:7b:54:6b:01:6a:6d:4f:d2:c9:3b:c0:90:f8:
                    74:eb:0c:06:e5:ba:00:01:08:35:4d:a3:0d:0d:7a:
                    7e:c2:83:72:b6:e5:9f:da:7b:20:7e:0d:35:46:b3:
                    4b:f4:b2:4b:1f:3a:fc:f1:e5:47:26:98:48:00:cd:
                    e2:91:96:6f:80:c4:1d:d7:3f:20:39:18:62:86:94:
                    2d:2b:15:f5:55:3a:de:22:a3:28:db:f0:fb:19:65:
                    34:1c:cf:d8:13:39:9e:9c:a0:6c:e7:d4:24:4e:07:
                    4c:21:f1:47:92:df:8f:14:f2:cb:da:6d:fa:d7:2e:
                    03:3e:cf:0d:e1:77:06:fd:91:c9:4c:7b:eb:d2:15:
                    e8:19:d1:1c:ac:97:be:8f:c9:e4:70:b1:52:e3:89:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:3E:62:9F:31:B9:0E:3E:8C:1E:07:7E:58:CF:6F:24:FC:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36c18aaa-19cf-3b78-9172-8f2e7f69eae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.73.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:96:49:06:d5:3c:67:89:98:2b:72:31:0b:91:5d:50:3a:
         ac:13:fa:20:32:9a:01:f4:08:42:ed:7f:c9:21:66:a3:af:af:
         62:34:c8:d5:02:e8:49:34:9a:cc:15:17:26:9e:13:d3:95:91:
         84:d7:e2:04:86:14:26:a8:de:f3:da:07:85:79:eb:90:d4:33:
         3a:78:16:35:26:21:b2:16:f0:87:1b:67:ed:35:59:55:c0:4c:
         f8:00:12:9b:11:6e:31:5e:9a:cf:61:57:db:0d:87:97:3c:c9:
         00:26:ed:25:05:38:d2:84:d1:a2:48:a7:ef:8e:ef:99:cc:06:
         69:d6:4d:d6:f0:03:4d:82:96:5d:dd:38:e7:ab:5e:1a:ea:32:
         97:9d:3a:e4:62:56:ee:8e:6f:fa:cd:87:bd:5e:e0:b8:ad:11:
         97:56:da:a5:e0:e6:2a:1e:d4:96:0a:a3:b0:c2:60:00:33:b2:
         45:9f:bc:b5:90:e4:75:ca:c2:95:7d:1c:cb:80:83:25:f0:fa:
         6a:b4:0b:05:53:35:5a:de:2b:81:5d:4c:e4:ca:22:fd:2b:32:
         ed:67:6e:1f:bd:9f:66:1f:4d:a2:4d:17:1c:ad:db:c7:46:40:
         df:d9:25:c1:15:00:e3:d0:33:7d:ca:13:5d:b2:b8:15:15:ac:
         52:67:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:32 2025 by rpki-client