Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caf424e-759f-396e-9213-c4a88301d20b.roa
File:                     5caf424e-759f-396e-9213-c4a88301d20b.roa (raw, json)
Hash identifier:          60cd1ahk/6XHTRdTAAc+rHcHhDO7qGSUT1zsZ18tGYI=
Subject key identifier:   F1:2F:92:D4:4E:1C:96:88:DE:5A:71:9C:B6:D1:28:7D:7C:7C:82:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBFD40CDDFC122CCF043C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caf424e-759f-396e-9213-c4a88301d20b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        71.232.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:fd:40:cd:df:c1:22:cc:f0:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=95a6009b-3165-4bbb-9d19-6ec945ee3d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:fa:70:20:1f:3b:9e:78:37:fb:78:2e:1a:
                    78:28:4d:a3:88:73:e4:cc:cb:c7:de:c9:51:14:86:
                    71:63:f5:24:a5:16:12:66:1b:2e:64:9b:e7:01:56:
                    fc:73:43:29:fb:89:89:42:33:57:3b:f6:c1:6d:1c:
                    40:97:2c:c4:c0:4e:f4:82:f0:69:6b:0f:2f:6a:7d:
                    95:b4:40:e2:76:6a:56:65:e0:19:58:39:99:96:99:
                    2b:3d:a5:b4:c9:8a:6f:c5:67:bb:a6:92:78:e8:79:
                    76:eb:14:34:50:48:b2:62:b8:ef:d6:9a:52:6b:c9:
                    5e:27:7c:b2:e6:4b:64:d6:74:16:46:e8:08:51:18:
                    86:e0:9d:17:2e:0f:e6:af:67:19:9c:ed:e5:f9:1e:
                    88:29:94:e1:22:a7:98:6c:05:9c:20:03:63:ad:0a:
                    11:68:bc:5d:cb:9a:87:2b:da:d4:46:48:74:c6:1d:
                    b4:db:91:ec:86:b4:20:3f:f1:76:c8:e9:ad:e8:f6:
                    c1:25:f4:ee:e3:00:5e:af:ed:58:fb:6e:b6:7c:57:
                    2a:4a:f5:f6:3a:f1:08:bf:0e:67:41:a6:32:28:06:
                    27:a5:76:ad:94:b3:38:07:fb:c4:9a:cc:05:cd:20:
                    b5:cc:93:80:e1:ee:51:eb:2e:8a:07:75:8a:2b:44:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2F:92:D4:4E:1C:96:88:DE:5A:71:9C:B6:D1:28:7D:7C:7C:82:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caf424e-759f-396e-9213-c4a88301d20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:fb:e1:6b:63:51:a3:95:7c:65:5a:0a:cd:60:ee:2b:97:5f:
         cd:4c:df:6b:e1:f8:1a:9b:9d:bc:77:79:c0:f7:78:ac:fa:f6:
         2a:77:c3:c2:df:58:70:3a:6b:e8:fb:25:bb:40:fc:57:78:51:
         a2:8e:dc:bc:da:f0:20:c4:ca:c1:cd:60:b1:48:21:f7:62:39:
         69:2b:9c:0e:d1:aa:72:59:e6:7f:7e:76:c8:2f:3c:51:76:68:
         a1:95:e5:2f:2c:93:7f:c3:56:7a:b2:88:56:51:40:3f:20:de:
         ae:63:f8:0a:b9:c9:a2:d8:78:3c:c2:a6:1e:d6:38:98:db:f1:
         22:51:2d:52:95:8b:3d:93:e5:7c:fa:bb:f7:9d:bf:58:6f:8a:
         8e:00:3b:b9:df:d1:1f:79:f1:d1:94:2e:97:8b:bc:37:95:9b:
         6c:0e:42:1f:d4:c8:b4:d5:95:dc:4d:7a:51:84:42:5c:fe:7c:
         ea:4c:6b:03:03:1d:df:7f:c5:d8:f8:f8:18:fb:4e:17:92:2d:
         1e:ac:3e:7d:23:e6:22:31:ee:c9:a4:ea:31:09:3d:29:65:2b:
         8b:3e:08:6f:f8:78:5e:27:2b:dd:18:86:b1:ca:92:c9:64:15:
         8a:6b:1d:59:62:e5:83:bd:0b:a4:bc:93:5a:42:aa:5f:0b:21:
         52:c6:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:23 2025 by rpki-client