Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d5f103-3d88-31b3-9f7e-1a7f86a1ecf1.roa
File:                     32d5f103-3d88-31b3-9f7e-1a7f86a1ecf1.roa (raw, json)
Hash identifier:          LLij+qTYcFF3Y/nJXRlrmuKJlvczU2p5nRd9MoKUZdw=
Subject key identifier:   07:33:FF:B6:49:FE:BA:18:D1:5F:BE:23:ED:4E:75:F2:59:94:5D:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC5EC031D4C01D6CBE2A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d5f103-3d88-31b3-9f7e-1a7f86a1ecf1.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.89.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:5e:c0:31:d4:c0:1d:6c:be:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2ecb6952-4bd3-45d0-886b-aac8e3cd3c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:f6:1a:8c:b0:98:74:f4:e6:b7:7f:a7:f2:
                    22:8a:cd:5f:49:5d:0d:4d:85:eb:c7:7b:13:cb:40:
                    9f:0a:19:8b:71:11:d6:45:1f:fa:44:71:60:40:92:
                    41:dc:9e:11:aa:f9:32:26:71:60:9d:45:63:aa:4f:
                    61:8a:fb:0b:cd:c6:23:31:85:a7:7c:c2:54:f9:ce:
                    9a:cf:b9:db:9a:b0:50:a3:7f:99:8b:f8:03:a6:8f:
                    8d:a1:df:f6:16:2a:32:b3:63:fe:4d:ad:6c:9e:bc:
                    11:e5:d0:24:2e:09:e7:59:56:8d:f4:b7:e9:ee:7e:
                    0f:70:56:b6:e2:bc:18:4c:76:f6:6a:ab:5e:e0:48:
                    47:85:fd:17:ec:d2:7d:53:1d:8f:72:e0:27:1f:95:
                    f5:cd:cc:86:b0:d0:e2:d5:47:d4:f7:d6:20:cf:22:
                    b2:e5:5d:7a:92:6f:73:d1:ab:ca:3c:92:b2:a3:ca:
                    55:a8:c2:33:91:e2:85:d9:19:6b:d6:c1:a4:54:c2:
                    22:c9:9a:2d:28:de:2d:26:4f:a0:6f:a3:46:3f:75:
                    63:6f:10:e4:c7:74:cc:61:7c:68:dd:a1:76:6c:22:
                    38:ee:e1:3f:a7:19:9d:8c:96:00:f3:7a:ee:19:ee:
                    2f:21:e2:e6:79:49:05:11:c8:4c:99:23:ae:66:9d:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:FF:B6:49:FE:BA:18:D1:5F:BE:23:ED:4E:75:F2:59:94:5D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d5f103-3d88-31b3-9f7e-1a7f86a1ecf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.89.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:8f:87:4a:b9:7a:5e:91:d9:2e:de:14:b6:c9:b4:d8:8f:
         b3:1c:ab:fe:30:ac:ce:38:5f:6d:a0:86:8b:8e:58:9f:67:c4:
         24:fe:2d:30:e6:8d:db:f7:91:6e:29:6d:ac:a9:d4:1f:10:4f:
         eb:4f:45:9b:62:9f:45:ba:54:f7:32:2d:31:81:2e:13:14:74:
         20:60:58:ad:fd:ad:d0:d9:eb:1a:ad:62:5c:75:58:23:43:26:
         86:5b:ea:49:3b:66:28:95:27:3f:93:c2:35:d6:aa:88:5c:34:
         1f:d3:c1:32:da:59:30:5e:23:34:14:2c:8f:63:18:5a:f4:d9:
         a6:30:24:06:80:4c:5c:09:8b:b9:35:a2:85:d3:e5:57:79:92:
         29:67:56:36:b0:12:39:92:d1:34:13:68:f5:bc:de:34:a9:9d:
         7d:d4:85:ae:b2:e8:a9:39:b0:80:67:90:dd:af:18:cb:40:c7:
         75:c4:26:85:bb:dc:d2:ce:80:d7:b0:a7:d3:d5:04:ed:d7:5b:
         98:7d:6d:06:29:4a:16:37:b7:f2:ab:25:0a:d2:ff:c8:58:fd:
         68:b0:83:77:c3:57:5f:87:f0:99:21:b7:aa:29:7d:7a:d3:b2:
         ba:b0:c2:45:f7:c3:46:59:15:18:a6:e6:c2:5c:9f:9c:a6:90:
         9d:0d:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:52 2025 by rpki-client