Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa
File:                     9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa (raw, json)
Hash identifier:          mruenf3toOJd8qQjhvTbZVIuHscp4tjiZE1U53N5tLQ=
Subject key identifier:   0E:3B:80:CD:65:7C:43:67:69:1C:3F:73:8F:7E:82:F3:2A:30:C7:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDFAFC1DD3D84DB1B31580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.249.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:fa:fc:1d:d3:d8:4d:b1:b3:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ed160f63-9f70-4241-9468-0e2a61a042bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:22:1c:5e:92:c5:e1:7b:96:4f:12:e4:24:
                    64:fe:07:bf:41:13:b6:6b:90:70:e3:c4:87:bd:49:
                    b9:8a:b4:27:1e:3b:1d:8c:2e:d8:23:fb:9d:e6:38:
                    65:78:15:a9:ba:45:ef:82:7d:c7:c0:81:48:a6:72:
                    62:d6:d1:c0:ec:a6:9a:79:10:f0:a3:c7:ba:80:ce:
                    93:19:cc:8d:d9:d4:fc:ca:a8:71:d0:a6:89:d1:ea:
                    e2:a0:e3:20:3c:18:d2:11:98:b0:e8:4c:74:ea:f2:
                    2a:39:87:c1:48:ca:07:c2:96:95:52:13:a6:df:2c:
                    6b:b4:7c:59:6d:b8:1d:79:3f:9d:3d:35:87:1d:d3:
                    26:ad:be:a2:d1:d8:99:f1:2b:a8:5b:cb:71:e8:cf:
                    fa:da:b6:f0:57:16:fd:25:bc:07:58:9e:82:dc:b6:
                    6d:d8:d6:ae:b8:26:cc:0b:4e:e2:9f:e7:eb:7d:62:
                    cd:36:d0:1f:fb:ee:e2:0a:b3:4a:47:de:82:cd:f9:
                    7b:cf:35:1b:d8:a6:7a:d8:3f:58:6e:d8:8b:85:de:
                    bb:3a:7c:75:57:16:ab:4e:ca:cf:68:f0:8c:59:63:
                    35:b7:ae:90:20:f8:2a:2b:01:10:75:39:83:39:e0:
                    4e:b1:22:c2:7e:70:83:f3:8f:30:36:3d:f6:7a:58:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:80:CD:65:7C:43:67:69:1C:3F:73:8F:7E:82:F3:2A:30:C7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.249.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:44:c4:7b:5e:4f:96:5d:6f:9a:77:b5:01:1d:f8:0d:4d:
         7c:17:ad:fa:66:6d:86:db:7f:59:e4:bc:9b:65:ca:25:97:a4:
         ed:d7:df:9c:f5:32:3b:56:5b:20:4f:04:92:50:4d:17:72:04:
         83:94:a3:8e:45:d4:49:18:53:1e:10:fa:72:46:3d:68:e9:48:
         65:6e:43:27:43:8c:4f:3d:66:a9:a4:be:6f:49:a1:37:3d:75:
         24:0f:0c:7f:e4:ab:fa:84:9f:89:2f:12:2e:88:96:cb:bd:4c:
         b8:13:7c:d5:eb:5e:13:e5:3a:a0:e3:ae:9c:38:66:45:e3:78:
         37:ca:7a:f5:2a:d6:b7:0d:8f:30:94:d0:64:e2:e9:f3:70:43:
         91:56:cf:c5:3d:0c:b9:96:9b:ae:03:06:2c:e0:d8:15:6b:2d:
         59:18:82:82:80:5c:85:ab:1f:8c:60:05:fc:69:4f:c8:90:43:
         56:b0:6d:e2:8a:04:98:4b:53:d1:35:c4:19:55:35:90:e4:85:
         34:6c:a2:8f:e2:b6:1d:12:68:42:a8:1b:b3:d3:18:7c:78:52:
         b2:b7:b8:7b:08:c2:43:76:cf:8e:1b:5b:c7:00:2e:b0:f0:5d:
         e3:43:8d:00:f8:7a:a2:22:13:27:9b:67:ad:8e:c9:3d:96:c9:
         a0:3e:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:24:33 2025 by rpki-client