Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdb88a4b-ee19-3227-a01f-d3240ef1ab46.roa
File:                     fdb88a4b-ee19-3227-a01f-d3240ef1ab46.roa (raw, json)
Hash identifier:          qAh1XIvrvGdbBfxnwvD7Yf7Bik3+ndGdoYZAPUb+88U=
Subject key identifier:   7E:07:86:2C:78:2C:40:3C:6C:D7:5F:C3:9D:62:4E:73:BE:48:A1:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB4537C066811F36CEB050
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdb88a4b-ee19-3227-a01f-d3240ef1ab46.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33491
IP address blocks:        73.168.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:45:37:c0:66:81:1f:36:ce:b0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=37df22ba-eb33-441c-9e15-b5bda030bfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:e4:29:87:c5:23:a6:cf:09:db:30:f8:c4:
                    df:63:dd:78:a3:db:72:d2:01:42:c4:e7:0e:ba:c9:
                    b5:1b:c5:9f:73:bc:00:b6:e3:50:d1:a8:11:a4:27:
                    be:a1:02:b8:97:5a:24:0d:1f:55:53:ea:a4:d8:ad:
                    7b:bb:73:38:ad:fd:45:5b:81:d7:47:17:b8:00:a7:
                    61:44:09:77:15:f3:4c:e1:e1:d8:96:4f:c7:b2:a2:
                    92:70:11:92:a6:85:7d:c4:eb:d3:ee:13:cf:23:a3:
                    9c:bf:36:19:37:9c:6e:18:52:44:90:53:1c:b8:5d:
                    0a:60:36:7e:f4:27:a7:f6:3a:e5:3f:09:0b:85:2c:
                    0c:19:4d:2a:79:64:bd:1a:37:25:7f:65:33:6c:cb:
                    95:63:ef:49:3c:ae:7e:b2:70:91:e3:57:93:dd:8d:
                    62:fc:c1:6e:9e:2f:03:3c:c4:17:dd:b7:26:1f:b0:
                    5d:53:64:ac:5d:51:34:6c:2c:f3:29:75:4d:ae:07:
                    b3:8c:8e:ec:ee:ae:f5:90:29:c6:dd:59:51:7e:74:
                    f0:2d:26:3d:63:e9:b2:39:b4:15:1e:a9:23:e7:f4:
                    31:ac:90:56:74:c0:70:48:49:83:cd:63:01:7e:82:
                    a6:6b:a8:b7:3e:1c:ed:53:ca:5f:6f:02:31:01:3c:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:86:2C:78:2C:40:3C:6C:D7:5F:C3:9D:62:4E:73:BE:48:A1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdb88a4b-ee19-3227-a01f-d3240ef1ab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:73:96:89:51:98:68:82:4f:54:55:f8:f0:f3:06:b8:9b:
         d9:7c:d5:cb:02:14:7d:03:11:2e:83:f6:16:64:97:aa:51:da:
         3b:e6:62:23:73:ab:d8:b7:38:51:b6:23:ef:10:9c:ee:bb:6c:
         69:10:27:31:df:18:07:47:ce:cc:94:95:cb:44:60:2c:56:cb:
         d7:37:eb:71:66:4c:12:d2:57:57:4b:d6:ac:a5:c6:93:2d:30:
         50:86:b3:96:9c:be:3b:81:8b:5f:c4:d2:40:f1:79:9c:fc:0d:
         0a:6c:b2:c9:c1:8c:2e:1d:6a:9b:c7:a9:aa:f1:65:55:2a:be:
         0b:7b:7d:01:ff:83:9b:fd:ad:f2:75:73:49:c5:79:b5:af:47:
         d7:ac:68:b6:67:f0:3f:ad:d3:db:34:cd:c8:77:68:aa:7e:1a:
         97:38:eb:3d:10:cc:cd:19:5f:51:60:ae:5a:c0:08:59:26:b4:
         14:37:62:6d:f8:6d:52:19:4d:7e:20:41:10:ca:5c:3f:c7:d5:
         e9:c0:47:6c:10:f8:0c:28:b5:d6:8f:40:1e:d3:04:e5:49:f5:
         c9:9a:28:a1:52:e0:63:1d:40:07:78:d9:18:ab:84:5e:a2:70:
         0a:32:ca:67:17:1d:fd:f6:18:f8:bd:15:63:37:b5:d5:5a:ca:
         f9:bf:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:21:54 2025 by rpki-client