Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa
File:                     3fd232c8-b5ed-3a39-8546-1596f217baa4.roa (raw, json)
Hash identifier:          R3l1gM607auymumjD1uZtm1e7l+Q0hYdplXw/EXNDWw=
Subject key identifier:   BC:A5:8F:B8:A6:A6:C8:F5:53:6D:07:6C:67:35:81:FA:47:54:FD:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC22A0DEF1001AE735F600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.167.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:22:a0:de:f1:00:1a:e7:35:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=3095506d-db07-4fa7-8016-47ce5f454d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:37:27:76:c3:bf:4c:6b:ab:7d:48:09:66:
                    b4:90:57:02:d5:c1:18:f5:a4:97:6f:a2:a0:bb:df:
                    e8:2c:17:e0:41:a2:07:35:0e:d2:a5:3c:0a:ed:f3:
                    e4:26:f9:3c:77:c1:67:c9:76:e5:e7:cd:25:1a:df:
                    07:4e:9d:aa:ce:46:28:f0:41:46:70:7c:9c:11:5e:
                    17:63:98:ff:0a:7d:5a:1f:9f:4f:a8:fb:30:5b:0a:
                    75:23:54:32:99:f9:23:1e:1c:35:14:9d:f3:b7:4e:
                    d0:ed:4d:fc:0c:29:ee:2a:ac:50:ce:73:7c:b2:74:
                    8e:6e:f2:58:62:a5:aa:75:1b:c6:11:29:36:63:ae:
                    25:06:c9:47:ec:ce:52:0e:8f:ee:0a:d9:e4:f6:5e:
                    dd:28:9c:be:d6:0c:f3:88:d7:c9:23:23:d9:01:a7:
                    d3:5f:60:b1:89:e8:01:e8:03:e6:4a:52:dc:6a:be:
                    ff:ec:cc:26:49:b9:f8:01:47:d0:1d:c9:b9:c5:d9:
                    aa:d7:05:b2:ad:74:28:6d:ac:13:7c:2d:e6:17:9c:
                    8a:d1:cd:70:5a:8e:f8:38:d8:3f:a1:28:70:0f:f4:
                    ac:6b:62:6f:2d:cd:fe:6e:12:00:11:33:c5:73:ea:
                    61:a8:b9:7e:bf:bd:ec:09:a1:d9:9a:68:4c:dd:39:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:8F:B8:A6:A6:C8:F5:53:6D:07:6C:67:35:81:FA:47:54:FD:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:41:ae:0b:57:2c:13:81:1f:7d:2f:9c:6f:2e:63:4e:ed:
         b8:8c:d3:e1:24:ca:38:95:60:21:e9:60:ea:10:8e:a7:a6:3d:
         3c:ea:79:62:5b:26:80:bf:35:be:4a:0a:dd:80:24:66:bf:82:
         4c:02:1e:eb:31:dd:7d:0c:e1:ee:11:2f:60:77:48:8f:dd:37:
         0e:0c:5f:4c:e7:dd:9f:b1:86:55:7d:48:fd:9c:4b:6f:32:22:
         fb:fe:a1:54:81:5c:0f:c0:c4:d6:e2:cd:91:0f:00:35:0b:41:
         6f:7f:5b:8c:95:53:7b:c9:43:34:17:a9:ca:95:e6:d0:c8:a9:
         94:82:cf:be:fd:2d:eb:cc:5c:f4:76:78:ed:80:f4:83:cb:c3:
         77:72:be:c5:85:b0:78:8b:3d:54:65:f9:55:6a:f2:d4:b3:2e:
         9c:ef:58:a8:5d:ea:01:f8:98:2e:f7:8b:b8:17:78:cb:f3:66:
         b8:20:de:4d:ff:52:5f:6c:8c:38:59:c9:a3:e2:c4:70:12:59:
         47:24:a0:87:1f:e8:00:ce:b1:94:73:6d:c9:33:12:55:47:94:
         57:f6:5d:74:54:be:b1:1c:33:c4:b3:40:3c:ae:f1:81:d1:71:
         cb:17:71:fd:3b:c4:7d:92:08:48:87:c5:d7:e5:30:23:9b:c0:
         2a:b4:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:40 2025 by rpki-client