Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ea8ed04-dc27-35c8-a0a2-a8b7996288ce.roa
File:                     1ea8ed04-dc27-35c8-a0a2-a8b7996288ce.roa (raw, json)
Hash identifier:          8YD3VaqLemr9BYL/AoIENvBHjIPK0mqoPAlhcjvtIxs=
Subject key identifier:   57:51:3E:9E:0D:54:F0:9B:74:07:63:47:BE:C5:93:73:20:C1:F5:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDAD4954AE1D12668F2A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ea8ed04-dc27-35c8-a0a2-a8b7996288ce.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        71.232.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:ad:49:54:ae:1d:12:66:8f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=5e5a1785-f019-479b-b6e0-5453ef6ccfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:b7:e5:da:d8:85:06:f8:83:94:c3:99:24:
                    91:2a:95:f1:cb:7e:0f:a5:68:8f:0c:58:01:8e:a5:
                    90:a3:48:87:6e:6a:7a:74:dd:1f:3e:db:e3:0c:a2:
                    2e:99:f8:61:61:f4:25:4a:3a:1b:90:d1:ac:7e:1b:
                    e6:52:6e:a5:e0:a2:66:29:31:19:94:2c:55:1a:f7:
                    a6:49:b8:f1:72:ce:f5:f5:f4:24:34:db:b2:0c:00:
                    14:7e:cd:be:40:93:61:3e:88:c2:3a:fe:ce:32:57:
                    6c:ea:fe:e0:78:4c:de:c5:d8:bd:e0:78:11:75:d8:
                    75:09:1b:ed:15:69:5d:1b:bf:d8:84:e4:73:29:97:
                    60:52:32:cf:31:65:a8:07:77:bd:f5:4d:a4:27:5e:
                    c0:52:28:03:50:71:bd:79:34:f8:25:6e:7a:ab:ca:
                    79:f2:49:9a:d5:23:34:8d:2a:f9:6b:7e:cd:38:b7:
                    f5:f8:ff:34:1e:01:b0:fa:d7:0c:01:16:ff:65:11:
                    59:f2:e9:71:13:2d:00:95:9b:87:cb:68:0d:ee:32:
                    85:26:bd:67:90:3e:10:e6:2b:30:48:87:59:a2:70:
                    fb:45:b6:f0:e1:cb:8e:73:5c:77:bf:c9:fe:a8:8b:
                    34:6e:6e:9f:f3:78:be:e6:b2:71:23:6f:7a:81:91:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:3E:9E:0D:54:F0:9B:74:07:63:47:BE:C5:93:73:20:C1:F5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ea8ed04-dc27-35c8-a0a2-a8b7996288ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e0:86:40:ba:e3:30:65:5c:f3:53:12:1a:08:32:43:fe:bd:
         ab:b0:88:95:aa:8b:50:e3:77:85:bd:dc:91:56:f7:17:e1:ff:
         1f:68:dd:5d:d5:54:ba:fd:75:92:04:82:bc:c8:53:04:02:14:
         54:f6:18:17:f7:48:4e:b0:c9:8b:48:48:19:c1:15:c3:9e:d4:
         36:6a:6d:85:54:f9:b4:40:71:48:63:38:77:3a:d7:96:08:ea:
         cb:82:a0:34:9a:83:08:66:c5:51:28:57:67:7a:05:24:c0:37:
         5d:00:99:42:d4:d5:d2:3f:f7:a2:32:6a:73:18:e8:8a:e7:51:
         d2:ca:d7:00:1c:a3:02:de:80:2f:2c:25:42:9b:1c:10:1a:1d:
         22:f9:49:9c:e3:65:68:c7:f6:34:50:68:e7:c0:2d:ed:73:fd:
         7f:81:6c:82:13:79:47:5b:87:ba:2c:dc:a0:7d:66:5c:18:32:
         39:9d:a3:aa:01:78:ae:79:ac:7c:68:67:22:5d:55:02:20:9a:
         94:be:3a:83:ab:fa:13:df:d0:c1:cc:38:0b:59:02:26:d5:86:
         8e:bb:74:d0:24:35:f3:a3:93:ab:1f:3e:7c:08:71:91:36:10:
         87:a6:04:ee:8a:d1:1c:67:8f:d7:23:59:7d:89:43:a7:6b:58:
         a6:26:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:09:23 2025 by rpki-client