Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a6b84d-77b4-3140-8c7e-19f59efb5ff6.roa
File:                     62a6b84d-77b4-3140-8c7e-19f59efb5ff6.roa (raw, json)
Hash identifier:          677oAkjBPl8pZHHrt6FtXAl/QjpIWnQFHjZq5jZoRFY=
Subject key identifier:   49:5A:71:8D:12:7B:33:79:E6:BE:1A:FA:C4:16:13:A8:52:4A:45:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC1FE732184F3BD8B1C9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a6b84d-77b4-3140-8c7e-19f59efb5ff6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.16.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:1f:e7:32:18:4f:3b:d8:b1:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=678876e4-9977-4813-a219-157b3d3f9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:e4:e6:56:93:f0:46:17:97:9e:13:25:b6:
                    f9:6d:47:65:fa:d2:30:23:c1:f7:e7:87:b8:5b:95:
                    12:83:6b:f3:3b:7c:73:04:98:11:51:37:6e:01:c9:
                    a6:e4:29:da:e5:fe:51:8a:52:77:a5:65:4b:10:90:
                    9a:8a:2b:03:2d:ae:ff:8d:2f:e9:b8:0b:5c:56:23:
                    d9:00:b3:bb:0a:10:5f:11:d2:49:32:2b:7c:43:99:
                    c7:34:01:c4:fd:82:c4:ce:bb:c2:c1:a7:a8:24:b9:
                    91:2a:2c:2d:9e:50:fe:9c:98:cb:78:2d:96:87:01:
                    b6:49:54:d0:5c:03:3c:64:37:87:89:50:da:c6:68:
                    75:70:b4:62:b4:3a:ad:82:7e:47:43:a3:b0:94:8a:
                    4c:d7:74:ae:83:d3:05:b4:08:98:88:73:f5:03:ab:
                    ec:13:7e:b9:ee:86:57:e9:1e:9b:2a:1b:79:fb:79:
                    a1:09:64:5f:0c:9a:a7:c7:b5:a4:81:d2:ee:9b:d0:
                    bc:ad:24:74:93:33:5d:9d:3c:c0:31:f4:14:25:02:
                    bd:4b:17:3b:98:0b:54:43:2e:62:2e:66:26:e1:f3:
                    5b:fb:cd:7b:ce:75:4a:70:c0:3b:32:52:1c:02:e7:
                    6a:74:8d:b2:eb:1f:97:10:94:14:77:b4:0f:bc:ce:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:71:8D:12:7B:33:79:E6:BE:1A:FA:C4:16:13:A8:52:4A:45:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62a6b84d-77b4-3140-8c7e-19f59efb5ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.16.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:35:b0:6c:a4:d8:08:83:94:27:5e:37:3e:60:00:12:5f:67:
         48:9f:3a:63:0d:59:7f:65:23:c5:3b:21:31:5e:66:8a:9f:98:
         cc:c1:a4:4b:94:48:d3:30:fc:d1:67:5c:a4:5b:ed:51:29:b2:
         c6:ba:03:82:88:95:2e:04:4a:f2:97:b1:3c:46:46:5e:93:fd:
         1d:cc:22:c9:1e:72:17:c3:40:56:63:0f:a1:a3:1d:33:7e:7b:
         30:23:90:fd:2f:60:a5:66:5b:4a:41:e6:b2:19:81:66:ea:fb:
         f5:65:84:07:d4:d4:5c:9f:2e:68:5f:7a:ec:8d:c3:2e:a3:0f:
         92:88:16:06:91:ff:84:73:19:5f:19:8d:78:54:5e:fc:d6:fa:
         85:96:09:78:68:cf:44:35:02:93:eb:5e:47:d2:54:31:9f:05:
         1c:13:7d:d4:01:42:26:a5:6d:f6:b2:87:57:07:0b:39:3b:4b:
         59:48:52:cb:cb:37:60:ed:c0:15:ab:ce:9f:3e:20:66:d9:7f:
         96:df:52:46:b5:55:f5:ac:4c:d4:c2:d1:73:6a:a0:a4:42:37:
         8e:94:61:63:bf:83:b7:10:a9:2c:77:ab:cb:5b:9e:8f:ab:19:
         1b:fd:2c:c3:2e:9f:43:bc:59:98:02:b7:cc:7c:cd:ff:c8:e5:
         f6:d1:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:19 2025 by rpki-client