Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a627037b-020f-388a-8356-a66532db2608.roa
File:                     a627037b-020f-388a-8356-a66532db2608.roa (raw, json)
Hash identifier:          jnhjqMRTc7nVYfsSwzc+H7n3XOTAB5dWvB1ETjo1xuc=
Subject key identifier:   C9:C6:F3:64:54:A9:C4:A7:C0:E0:D5:78:95:9E:8A:3A:3B:F1:EE:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE35BC2AF9320F60EE3200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a627037b-020f-388a-8356-a66532db2608.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        107.4.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:35:bc:2a:f9:32:0f:60:ee:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=566f9373-be30-43d0-911d-e6697788d5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:99:73:9b:0c:7a:05:26:af:61:80:8e:f2:
                    cc:6e:6e:07:7f:1c:22:9b:f7:65:db:5b:45:3e:55:
                    ec:07:6c:94:f3:f1:0e:49:17:de:ff:2a:ea:d9:55:
                    a2:45:55:86:fe:ed:22:ae:d0:84:e1:e6:dc:be:12:
                    ec:6d:2d:d7:62:9b:c5:a0:d9:6c:7f:66:19:b3:e4:
                    07:32:a5:7a:55:ad:95:74:5c:ec:94:c1:b4:e5:8c:
                    90:eb:81:bc:c4:8b:82:bd:fc:ed:60:bd:75:2a:56:
                    d0:7a:3a:98:f2:e0:99:29:27:50:91:71:38:36:43:
                    22:3f:3e:af:e9:bb:59:b4:b0:60:38:43:88:9e:5d:
                    9a:28:f7:55:43:cf:88:9a:24:8b:11:6c:1b:db:03:
                    04:91:ee:7e:81:37:5b:31:a7:e2:3e:ec:49:7a:9a:
                    de:d3:fc:71:8d:fd:28:92:95:fd:9c:cb:0d:2e:74:
                    6e:2a:60:40:49:43:ee:49:02:f9:cf:1b:75:11:df:
                    cc:9d:0f:3c:8f:d4:20:b9:49:86:16:1b:29:8d:02:
                    dc:4b:0a:51:a8:f3:c7:e3:61:23:fe:e2:7e:9d:7a:
                    af:e9:e7:b1:07:08:d2:05:8b:73:b5:f8:97:30:97:
                    87:c5:2d:05:2e:f4:27:e8:0a:d2:51:be:5e:6a:4d:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:F3:64:54:A9:C4:A7:C0:E0:D5:78:95:9E:8A:3A:3B:F1:EE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a627037b-020f-388a-8356-a66532db2608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:67:4d:ed:b9:0d:d2:3a:55:45:03:de:a6:66:b3:64:5b:
         4d:fd:3e:72:36:2e:db:d0:9e:68:f2:ae:dd:89:de:97:72:91:
         77:49:fc:ae:c3:47:a4:a8:b3:2f:16:1b:25:20:8b:95:f0:a5:
         ff:42:c6:fd:15:86:1d:17:3f:f2:86:c3:b9:c3:39:06:cc:9f:
         e3:ce:b4:98:33:71:88:25:b0:67:e2:dc:b9:c0:70:fa:dc:2c:
         ce:17:74:7e:36:b4:43:c6:c8:0b:d2:73:b7:12:40:f6:aa:f7:
         76:bd:76:29:a7:79:96:7f:05:6c:05:6f:49:39:ea:bb:29:56:
         df:c8:37:5e:96:d3:1e:25:25:fc:6f:a8:5e:0e:36:98:fc:30:
         d0:48:3d:d1:94:3a:5b:8f:4c:b5:03:df:7d:28:a4:92:ca:6c:
         95:2c:48:26:7f:8c:00:87:97:ba:ef:a5:05:a9:40:5d:1d:07:
         59:44:5d:96:19:6b:69:ab:d8:d2:15:96:17:93:6c:53:a3:d7:
         71:8a:bf:8f:7c:8b:c6:2e:15:cf:34:45:dc:24:cf:53:54:17:
         36:c8:9f:52:7b:45:44:1e:75:96:f8:ca:5b:6c:98:11:88:3e:
         44:7e:3c:44:95:9f:1f:e7:85:b4:02:68:55:23:53:b1:9d:28:
         7c:ed:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:12 2025 by rpki-client