Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d47b765-d567-3452-87dc-bc7818ba5b0c.roa
File:                     4d47b765-d567-3452-87dc-bc7818ba5b0c.roa (raw, json)
Hash identifier:          j5hJlXSL+YD9uSAIDLlM5/cyP5FrFcI2ejLjis93+a4=
Subject key identifier:   1A:6B:F3:CF:4E:D8:F8:E0:FD:47:68:B3:82:7F:E8:CB:5F:D1:A9:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBA013D16E3F9FC5CE5100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d47b765-d567-3452-87dc-bc7818ba5b0c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        71.63.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:a0:13:d1:6e:3f:9f:c5:ce:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=667ef280-9521-467f-bfc8-db17fde0b55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:b9:8f:bd:91:18:c4:07:35:b8:25:89:af:
                    74:8f:84:f1:b7:38:34:28:54:ab:e9:30:3b:ea:df:
                    5d:dd:3b:b9:7f:fd:0c:87:99:5e:49:a2:44:71:48:
                    ac:19:fc:2b:66:61:6e:c6:ae:e4:7e:69:24:4b:b9:
                    12:c9:8c:7c:ae:9d:98:c3:88:da:b3:d3:55:cb:54:
                    17:78:0e:82:94:62:1b:fc:00:56:e3:5b:84:83:2a:
                    f2:44:b9:b3:d1:7c:df:f4:78:ec:70:9a:b5:70:24:
                    ec:94:ee:0f:be:e8:4d:3a:1c:ac:79:3f:2a:8c:53:
                    8a:62:ef:5c:6d:9d:e9:6e:3b:e6:69:fc:d2:24:6d:
                    67:3e:1f:6e:b7:8d:d7:94:f4:32:60:bc:1c:12:56:
                    56:9b:d1:a0:c9:d7:e6:a6:6b:cb:5e:d5:43:ff:04:
                    c9:c2:8c:f0:ab:ed:17:72:17:85:bc:68:77:66:49:
                    8b:cf:84:c3:ef:7a:7b:01:4b:b0:27:b3:dc:99:16:
                    1e:88:03:ad:ba:53:96:12:14:58:40:02:60:cd:22:
                    2f:45:ca:37:44:ff:c4:e5:43:4a:67:68:a1:07:89:
                    1c:7e:20:95:3d:41:70:b6:36:1a:f2:23:9d:f3:97:
                    51:69:66:8c:0c:54:70:32:2d:e9:67:b6:59:e4:99:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:F3:CF:4E:D8:F8:E0:FD:47:68:B3:82:7F:E8:CB:5F:D1:A9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d47b765-d567-3452-87dc-bc7818ba5b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:39:09:2b:63:d3:30:eb:94:41:dd:66:77:26:34:75:38:
         b4:26:e1:d7:86:39:f2:aa:99:81:f0:60:27:06:c9:ac:73:c1:
         83:e5:0e:4a:8a:27:8b:58:7f:51:1a:31:51:d0:f1:38:dc:59:
         cf:49:08:a0:92:76:f7:db:0e:d6:38:fc:77:65:53:71:0f:2e:
         d5:df:aa:71:01:99:1b:1f:58:7c:93:ef:fa:71:03:33:16:c1:
         31:19:a3:54:73:9a:b8:f7:0e:a3:87:85:b7:16:4b:ce:85:ba:
         40:79:08:d3:6c:f5:2a:32:d2:63:92:74:8d:c7:e6:db:8e:e4:
         2b:f4:03:a5:4d:10:d2:f3:c9:39:9e:56:68:39:7e:02:ae:09:
         47:50:51:dc:09:98:0e:a0:4b:39:29:07:c8:cc:ac:3b:82:4a:
         36:a0:11:73:09:e4:ba:6d:5a:22:b8:ea:8d:2e:03:33:8f:8b:
         c7:e2:4a:db:17:4e:fc:63:5d:1c:08:d3:57:56:6e:ce:e7:43:
         0e:98:54:e0:e9:3f:af:cf:de:a8:f0:42:b5:7e:b2:0b:78:20:
         16:fe:38:a2:32:6b:b6:4d:e9:6e:74:85:47:d4:03:59:e5:79:
         c5:98:96:dc:4e:51:f5:81:90:39:c6:1a:26:23:0b:27:4a:15:
         7c:27:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:08 2025 by rpki-client