Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa
File:                     7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa (raw, json)
Hash identifier:          IS8Tle8zL1otLQvRk9jeJTBo8ojk8lU5uJAgOmCbshQ=
Subject key identifier:   38:67:ED:B2:6E:D0:09:B4:0B:4C:22:A8:D5:27:19:6D:99:9B:AC:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDB36CE17EBEC13459B1A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        71.234.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:b3:6c:e1:7e:be:c1:34:59:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=056ba82c-2b48-445e-87f2-974aa76f8853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:d8:a5:13:c9:2c:af:ae:c9:42:b4:dc:43:
                    29:22:b6:49:6f:02:ea:d0:02:07:0f:36:36:83:cb:
                    24:26:04:b4:33:45:53:46:9e:82:5a:fd:da:66:1e:
                    ee:d4:11:b4:3d:42:a1:f4:1b:17:2d:d0:45:df:67:
                    0a:7f:b2:6e:04:53:06:2d:c7:42:7d:0f:5d:9a:6a:
                    51:49:02:66:0c:48:b0:77:f5:0f:54:e7:72:93:36:
                    88:ba:b5:03:68:cb:48:7f:1e:d8:6a:e1:e2:89:25:
                    40:82:eb:6d:f6:10:b0:2f:f9:ff:4e:ec:bb:90:9c:
                    04:55:b8:b0:7b:fa:49:de:2e:7e:62:e2:ef:b3:6a:
                    04:e0:62:6a:2f:b5:fc:50:6d:8f:b7:57:d8:11:47:
                    bc:52:2a:69:d5:b0:8f:91:2e:97:7b:0f:e8:19:17:
                    f8:b5:95:7f:07:61:3b:53:57:1c:4a:a3:4b:25:f6:
                    1d:80:95:cc:03:c4:94:ea:6a:b8:f4:a3:f3:d7:e4:
                    79:b0:79:8e:9b:e8:8c:3b:eb:52:06:f4:b1:15:ae:
                    8f:7d:af:42:27:0d:19:df:92:bb:d5:80:f3:32:d5:
                    f2:da:1d:3c:55:12:20:e3:3a:eb:9d:32:f8:84:67:
                    4e:7a:13:87:3f:be:8b:9e:36:1f:48:c2:9f:54:72:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:ED:B2:6E:D0:09:B4:0B:4C:22:A8:D5:27:19:6D:99:9B:AC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:11:db:08:f4:bc:cb:19:0a:74:3e:a1:65:79:ab:26:0e:8f:
         18:06:cc:9e:99:ff:fe:c2:08:f8:d2:71:44:9d:36:d8:54:2b:
         09:f2:c9:72:96:ca:35:99:74:f8:57:68:f0:ab:1a:9d:5c:79:
         42:ef:08:7e:b2:45:94:50:2b:0a:89:c7:f4:32:b0:25:3b:56:
         5e:b2:e7:87:cc:ef:5f:d5:17:b3:35:f7:f3:18:a5:42:8b:53:
         b1:9e:ba:21:92:9a:be:8c:c6:de:b7:05:81:b2:82:00:91:32:
         a1:b9:25:a6:b1:26:25:a0:cc:42:f4:92:4f:4e:78:39:5b:e8:
         20:c0:a5:2f:61:f1:48:af:47:dc:49:61:05:25:44:d9:7b:86:
         db:3d:60:32:00:45:b3:82:03:7d:0a:c5:a1:6f:20:18:5b:74:
         23:b9:00:b5:39:d0:7d:79:fd:5d:96:55:bf:14:00:f8:80:9c:
         c2:7a:9b:58:9a:bd:62:8e:32:f4:61:55:5f:4e:5f:aa:f9:22:
         fb:97:84:ab:89:07:f6:56:66:34:a1:78:23:db:8a:bf:09:a4:
         09:08:6a:dd:33:1b:24:02:34:13:20:bd:c9:52:60:1f:69:2b:
         a2:9d:47:62:21:48:b4:bd:68:28:d9:59:46:ab:f1:9e:5b:17:
         07:2d:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:22 2025 by rpki-client