Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78155fa3-8dc6-3b81-b759-e873c5fb9220.roa
File:                     78155fa3-8dc6-3b81-b759-e873c5fb9220.roa (raw, json)
Hash identifier:          JgiIPBhNEJkT//brU+yzpqQRSc7QINyeIq2XBvQxJU4=
Subject key identifier:   8E:E0:8E:37:9C:7F:83:9A:12:48:52:BD:F7:33:D0:D7:DB:17:6F:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC5B8FD49E7D64B8F4DD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78155fa3-8dc6-3b81-b759-e873c5fb9220.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.69.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:5b:8f:d4:9e:7d:64:b8:f4:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7e197c99-b5ff-401b-a321-4c8c4ac91fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:76:63:70:67:99:bb:26:69:a5:4f:b8:24:
                    53:46:e7:4f:19:c2:bb:50:47:7f:6b:7b:62:76:47:
                    be:d7:6b:10:86:70:6a:e0:48:7c:14:83:cc:1d:ac:
                    64:9c:af:42:33:7d:ac:0a:0c:af:a1:f6:77:d1:21:
                    09:24:40:5d:36:55:40:6c:41:a0:44:61:4f:9e:8b:
                    b4:e7:ea:8a:40:c4:c6:b8:76:6a:68:12:6c:39:7e:
                    7d:ed:16:dc:4a:af:67:b9:b2:08:ac:32:c2:a5:70:
                    37:61:3f:2c:91:1d:86:5a:c5:c1:17:fc:8a:8c:7c:
                    01:e6:16:82:9b:9e:80:e0:50:2f:18:94:7f:ec:1c:
                    00:73:c9:19:7f:d2:82:9b:92:59:08:3d:50:b9:34:
                    2e:96:a1:64:6a:a3:b0:29:eb:b2:66:fb:ba:95:56:
                    79:3f:ef:36:de:9c:9a:60:fa:b7:61:06:e7:a0:54:
                    aa:3f:c1:89:7d:f2:f7:50:a3:6c:93:6d:70:d9:43:
                    e8:b2:9a:fa:8b:9c:6e:29:e2:4d:a0:78:63:45:41:
                    0a:b4:9a:de:df:ee:09:be:cf:97:39:3d:0f:12:a1:
                    9a:0a:b9:1b:3b:8f:10:c1:90:71:97:9d:f7:12:ab:
                    28:d4:24:eb:02:ef:dd:94:7b:49:02:88:28:0c:3e:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:8E:37:9C:7F:83:9A:12:48:52:BD:F7:33:D0:D7:DB:17:6F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78155fa3-8dc6-3b81-b759-e873c5fb9220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.69.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:c3:af:48:66:e0:61:12:79:9b:04:a7:31:93:4e:28:1d:
         ab:43:fc:3f:d5:b0:5c:40:fb:40:7d:26:03:07:4c:65:93:15:
         b2:20:84:06:04:19:c2:2f:53:6c:d3:d8:32:74:63:ff:cc:de:
         c6:c2:ca:f6:09:11:89:07:87:55:f6:34:e6:00:8c:d0:cf:b6:
         f4:f7:fa:4b:d5:83:a0:04:88:6a:53:b7:4e:3b:d4:9d:17:06:
         d5:5b:fc:a9:c3:96:7a:bc:83:e6:92:cf:b0:b7:ce:54:01:ab:
         7e:36:55:87:9d:7f:75:ac:9d:23:b7:8d:af:d4:e7:79:43:c7:
         97:74:c8:27:49:20:c7:3a:d4:c2:98:c3:bf:b7:ae:c0:a1:bb:
         8d:79:cb:66:d0:66:26:f4:d9:16:d3:34:12:5a:d8:f6:ba:96:
         46:29:74:74:4d:50:6c:4a:4f:fb:73:64:92:98:f3:b3:85:71:
         75:56:ad:1a:21:c0:18:07:c4:a0:2e:ff:d6:ed:3e:d0:3b:da:
         d8:8e:21:d4:3e:e3:13:ba:a9:ec:84:ae:93:1a:a1:3b:f8:ae:
         cb:5f:e8:b9:75:a7:82:f6:00:b2:10:44:87:ce:78:63:ab:f7:
         69:4e:37:ac:9c:42:33:1a:a8:fd:ee:c3:ab:67:20:4a:92:3b:
         e7:ff:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:09 2025 by rpki-client