Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293d2216-42b0-3531-8d07-8019f9ae1676.roa
File:                     293d2216-42b0-3531-8d07-8019f9ae1676.roa (raw, json)
Hash identifier:          eAxySp8/GQv5xBoHE6QSuO7GMR80jfaXA77p7x/GOeQ=
Subject key identifier:   C8:CA:03:30:8F:A5:F3:EB:73:A7:86:B0:63:E6:03:9A:A9:B6:31:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC596AA47E566DB5F61F90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293d2216-42b0-3531-8d07-8019f9ae1676.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.68.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:59:6a:a4:7e:56:6d:b5:f6:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4d841eb2-81b3-46f7-a440-0f54f71029d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:eb:fe:f0:2e:ee:b1:e6:26:db:22:d7:83:
                    74:c7:5a:cc:51:70:0d:d0:9e:9b:e8:07:7e:f7:42:
                    ee:e5:32:8a:81:c8:2f:74:2a:fa:8a:af:31:e1:8c:
                    de:22:ee:28:b7:3e:db:06:63:09:67:11:74:78:c9:
                    8f:33:e9:ba:c7:bf:87:d6:5e:82:75:25:91:6d:c4:
                    f3:a5:69:2c:ce:7b:ff:3b:8a:a3:9f:d5:ed:b9:14:
                    ce:45:c9:84:ee:60:72:61:1d:1d:77:2d:ff:c9:f4:
                    db:98:69:3f:86:34:53:1d:3e:f0:52:20:f3:d0:45:
                    cd:24:a4:3a:0d:f9:fb:0a:0d:06:6e:77:4f:4e:c9:
                    93:6d:24:c6:49:eb:e0:fb:9b:44:ed:a5:4d:46:09:
                    fe:4a:a3:ac:fa:f2:7d:f9:ee:73:34:55:e5:b3:b7:
                    4c:8f:eb:e9:a5:ad:7b:b8:80:f9:ae:43:2d:ad:bf:
                    89:f5:13:62:41:9e:9a:09:86:85:0e:5e:b4:cc:f3:
                    42:4d:bc:78:82:95:1c:b4:7a:9a:cf:41:53:2a:3d:
                    a0:6a:43:b7:ca:60:f3:6e:7e:e4:b9:3f:88:cd:18:
                    ac:c4:35:74:b4:1b:6f:4b:79:7f:c9:63:51:5c:4d:
                    d3:44:1f:55:1f:0f:0f:cc:90:4a:fe:5d:96:fb:64:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CA:03:30:8F:A5:F3:EB:73:A7:86:B0:63:E6:03:9A:A9:B6:31:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293d2216-42b0-3531-8d07-8019f9ae1676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:e6:6a:96:40:f9:ad:6d:c5:09:f5:e9:2c:53:cb:95:16:
         84:c3:50:d3:1a:99:66:d3:36:d9:00:a6:7a:18:50:99:3f:b2:
         7e:29:f2:3b:a7:88:b8:eb:08:69:7e:e9:f0:4b:91:14:7b:1e:
         7e:6e:f5:6e:22:66:b1:53:6a:19:42:91:ec:66:0c:dc:33:8b:
         0b:a9:98:d0:08:8e:14:ce:ca:6f:4a:eb:70:8f:60:85:c7:57:
         a6:9a:db:b7:83:13:a9:e8:d2:e1:5d:47:9d:1f:c8:4b:cf:d1:
         4c:78:4e:25:ce:fb:16:0c:59:b7:09:80:bb:7d:92:02:54:f4:
         33:75:21:fe:4c:6f:06:24:4c:d1:f3:bc:e1:69:b0:57:31:75:
         8a:61:14:bc:d1:40:20:38:20:4e:dc:02:92:c1:39:4d:fd:9c:
         28:05:40:bf:ae:24:22:7e:15:ed:be:c0:24:b8:ac:72:19:5a:
         5a:53:5b:5a:7d:32:39:08:6e:64:53:dc:c3:6e:7d:9a:66:9b:
         1f:1f:54:ca:21:c6:aa:d3:a7:25:67:be:59:31:ff:7a:02:14:
         11:0a:dc:ab:f0:3f:7e:af:52:23:e9:38:24:8b:0d:b7:65:63:
         1b:fe:6f:4d:de:ed:ff:66:de:1f:6b:ff:04:f7:af:d8:87:f1:
         42:33:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:29 2025 by rpki-client