Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12bc92b-1bdb-3b85-a54f-fc3f1f9dc236.roa
File:                     c12bc92b-1bdb-3b85-a54f-fc3f1f9dc236.roa (raw, json)
Hash identifier:          657nFJWcmjuzjWfkym9b1MEvVp21Z8CdEXqF929qzYA=
Subject key identifier:   6C:A1:38:39:E0:A5:8B:43:58:E6:9E:64:03:49:D0:88:A9:0A:3B:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC086324DA0C6EEAB92FD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12bc92b-1bdb-3b85-a54f-fc3f1f9dc236.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.114.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:08:63:24:da:0c:6e:ea:b9:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b2b284d1-60f2-4c3b-926a-590ddc878f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:ac:29:a8:43:2b:c6:91:20:80:dd:5a:93:
                    71:7a:f0:d2:c7:f5:be:ff:85:44:a1:dc:06:a9:f6:
                    36:5e:a0:ea:4a:2c:cd:ed:4f:09:c7:af:13:af:c5:
                    ee:e1:6b:29:fe:30:f7:91:29:2a:d1:98:93:ef:9b:
                    ef:8e:bd:07:2d:1b:3d:08:b8:00:35:0f:66:40:08:
                    99:ae:dc:d6:0b:5f:78:6e:e9:da:dc:45:e6:7b:86:
                    b1:8c:97:01:46:cf:35:10:84:d5:8c:be:21:4e:bb:
                    7d:60:c6:4d:57:87:90:45:76:08:43:c4:ce:d8:36:
                    bf:47:00:2c:15:8c:ef:dd:35:62:a9:51:cc:c9:cf:
                    dd:f2:b9:92:4d:b4:c8:e0:50:73:97:02:1a:f3:a9:
                    20:3e:5c:12:d4:34:b5:2f:89:7e:ae:25:10:fb:84:
                    87:16:87:25:b2:07:55:93:dc:3f:29:c3:f1:2d:69:
                    4a:e7:f7:84:eb:65:56:ae:96:c7:89:2a:e8:0c:f0:
                    f2:db:f1:35:0c:64:e7:f2:bc:bc:f4:60:4f:b8:ba:
                    0c:8b:f8:e5:c4:70:9f:df:f9:9c:08:79:ca:18:05:
                    79:d1:eb:b8:f9:98:af:39:32:a6:a4:9a:72:85:7d:
                    d7:06:f2:bf:7d:35:0d:59:de:e3:92:3e:9e:de:9a:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:38:39:E0:A5:8B:43:58:E6:9E:64:03:49:D0:88:A9:0A:3B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c12bc92b-1bdb-3b85-a54f-fc3f1f9dc236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.114.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:db:15:a4:80:86:90:7f:c5:3a:e2:ba:c6:c4:9d:5d:2c:
         de:c4:c7:4f:02:b3:dd:70:44:8e:8c:f5:37:05:10:f2:8d:96:
         9c:75:cf:91:92:f0:ee:76:ee:eb:4a:a7:eb:2b:41:c1:50:2d:
         60:51:30:85:07:b7:61:e7:0f:7d:10:da:6a:67:42:39:25:8e:
         c1:57:90:0c:aa:b3:be:26:7a:9d:32:cc:52:f5:c9:52:fa:81:
         34:88:af:3c:4f:bc:3a:76:86:c8:a2:46:07:a6:0d:55:d5:6e:
         2d:dd:89:b0:db:32:28:93:5f:a1:bf:74:6e:25:69:dc:95:de:
         60:2c:2d:91:e0:bb:3b:c3:20:71:9e:21:90:2c:ad:63:25:30:
         26:fe:7f:66:c7:a2:c2:7d:9d:0f:c5:ab:7f:a1:5b:d7:9d:6b:
         75:6b:6c:d2:0e:07:98:7b:ee:fe:dc:2f:a6:5a:65:bc:cd:b1:
         19:64:27:71:31:64:85:0f:59:f1:20:ba:59:33:ac:07:c4:32:
         03:d7:83:37:75:0f:3b:73:a1:75:ca:fb:25:2e:14:c3:a2:35:
         63:72:8b:b2:47:fd:e5:a8:4d:d7:00:07:36:b2:c2:91:ef:b7:
         7f:b7:c3:db:2e:3a:d8:5b:c4:2d:6f:7d:79:0e:99:e8:03:d9:
         c0:d0:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:43 2025 by rpki-client