Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdc86a6-e9bb-3305-8ca6-82566fdae9a6.roa
File:                     6bdc86a6-e9bb-3305-8ca6-82566fdae9a6.roa (raw, json)
Hash identifier:          4AEN401jPJIHTirSpv2OHxw5KjJ9JlBn6VXiD+/nPJs=
Subject key identifier:   3C:DC:1F:22:62:50:22:F5:F1:F1:D4:59:93:F1:A9:6B:71:E8:B8:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC553AF0541E04B595B880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdc86a6-e9bb-3305-8ca6-82566fdae9a6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.61.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:55:3a:f0:54:1e:04:b5:95:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d75109c3-6805-4b76-b043-57ba86acb6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:a3:b3:61:58:9e:c7:43:a1:6b:94:cf:0b:
                    49:73:9e:bd:2d:91:ab:38:f0:24:4b:13:19:d4:f7:
                    7f:74:e6:89:91:1e:09:c6:22:13:1f:e8:81:62:1b:
                    32:b1:be:43:5d:ee:88:b2:c2:3d:0a:5f:1b:bf:3f:
                    57:4d:06:fd:e0:d7:1b:83:1c:0f:7a:ad:10:c0:89:
                    48:81:90:7d:66:49:f3:12:20:a2:0b:e9:06:3a:fc:
                    d0:11:ee:3f:35:26:48:f2:87:b1:fd:c8:39:f5:44:
                    c4:10:44:bd:9b:9f:5e:c2:a8:dd:f7:92:b4:ca:53:
                    e6:ed:03:5e:a7:1f:ad:3b:c9:00:fb:66:06:48:0a:
                    a2:cb:0f:5a:be:87:e7:7e:c9:05:73:6a:06:8b:f0:
                    ff:43:7b:39:42:11:c9:15:70:5e:2d:eb:58:ad:bf:
                    4b:ff:ac:2f:67:76:eb:a1:5c:62:83:90:09:5d:0e:
                    17:2f:54:06:97:93:6d:a3:2f:da:17:6d:61:e7:2f:
                    4a:c4:5e:20:09:3c:ba:d1:ff:65:af:44:e5:93:27:
                    3c:ed:93:be:e5:30:fd:9d:0a:77:7a:a1:d7:0f:ec:
                    31:09:82:60:b9:a4:f7:04:a9:32:a4:99:11:9a:ee:
                    6a:0e:7a:5d:d3:f5:6d:87:17:c9:a7:7c:ca:c0:41:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:1F:22:62:50:22:F5:F1:F1:D4:59:93:F1:A9:6B:71:E8:B8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdc86a6-e9bb-3305-8ca6-82566fdae9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.61.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:40:ed:bc:fc:87:ae:86:8c:d9:8d:9d:a9:bf:4b:ff:c5:
         97:3a:ea:30:e8:32:23:0a:70:16:e2:c3:20:20:22:93:96:25:
         83:f6:df:aa:4f:5c:22:67:e8:77:6a:37:25:e2:5b:2e:d7:8e:
         7a:df:19:10:18:5d:58:cb:89:00:f1:85:06:6b:c2:c3:7b:6e:
         d9:8e:a4:a0:2d:53:f5:d7:bb:27:e3:4e:12:14:7a:2b:2a:61:
         21:88:dc:8f:43:fd:19:b2:08:dc:6e:a6:01:cc:40:30:9f:9b:
         33:67:9b:85:d7:72:c2:52:34:7e:ec:67:29:7c:83:20:25:d7:
         db:a4:c8:8d:89:32:0f:e1:6a:8a:90:8b:a5:b5:91:ae:fb:58:
         8f:fa:f2:55:65:d3:12:99:c6:90:4f:5e:ea:d2:c5:6c:a5:8e:
         c7:67:11:47:da:51:89:96:4d:11:92:cd:fb:c9:e1:80:19:7d:
         10:55:7e:80:79:fd:d7:ba:5b:9f:19:2a:b2:8b:0d:9a:70:c3:
         45:b5:26:64:31:5d:96:10:d6:59:90:da:fb:f5:15:f0:9c:02:
         d9:4b:2d:5e:60:69:b7:ec:26:6e:01:84:0d:90:30:b4:b8:88:
         20:d0:5f:22:4e:75:ab:3c:a9:c5:1b:49:7f:2d:c2:db:b2:f3:
         4e:97:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:18 2025 by rpki-client