Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29a1c23-843e-3a67-8f04-05f3e010fd59.roa
File:                     c29a1c23-843e-3a67-8f04-05f3e010fd59.roa (raw, json)
Hash identifier:          +wtzP817CxeQI062L3TcxBJZwT73X1W3e8XhR9bSB4o=
Subject key identifier:   EE:3F:0D:6D:FA:DA:0F:05:4F:B0:52:73:DF:23:E1:D4:2E:73:D2:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC61A42D59BC407E13E0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29a1c23-843e-3a67-8f04-05f3e010fd59.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.89.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:61:a4:2d:59:bc:40:7e:13:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8038274e-4076-41c2-80f9-b953b81fda9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:53:d8:e5:e0:73:46:53:f4:24:77:44:52:
                    77:54:41:6a:9b:88:51:63:3c:0e:f5:aa:23:d1:54:
                    ff:0a:d0:55:46:a4:90:34:8e:ba:a2:07:5d:63:87:
                    12:1f:dd:71:2e:1f:9d:8d:92:11:56:85:63:1a:7c:
                    c7:18:b1:53:7b:57:27:c8:19:55:45:92:75:59:3e:
                    51:ce:2c:9e:d2:69:56:e8:55:e8:d5:79:97:55:47:
                    5f:a1:5d:63:51:1a:83:a7:76:07:0e:e7:df:81:64:
                    c9:3b:24:db:8a:ad:15:ff:65:9c:06:1e:69:6a:ac:
                    44:44:f1:9c:63:68:d0:01:41:81:22:39:2e:96:0c:
                    21:ed:78:6f:3e:1d:1d:fa:76:b9:0e:15:05:04:02:
                    d1:ff:b9:c5:d4:c3:8c:a8:89:e5:b1:e9:48:6f:55:
                    31:38:aa:ad:0b:94:e6:f5:64:70:dc:53:f6:c6:d1:
                    d8:fb:fd:b3:c2:b4:bc:c0:a5:a8:a6:3f:f0:11:e3:
                    32:cc:a6:89:b3:7c:bb:c6:8d:86:86:9b:0a:47:4f:
                    26:ea:49:53:17:c2:eb:b8:c4:e9:90:6c:08:82:9b:
                    28:51:5a:d6:ea:4e:64:da:97:e8:98:f3:47:77:0f:
                    ac:cc:8f:cc:d4:3e:f2:7b:11:ae:e7:ab:64:c4:23:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3F:0D:6D:FA:DA:0F:05:4F:B0:52:73:DF:23:E1:D4:2E:73:D2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29a1c23-843e-3a67-8f04-05f3e010fd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.89.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:fd:6a:16:6c:71:f0:9b:7d:52:db:16:c6:b1:67:ec:a6:2f:
         31:d4:9c:b9:61:df:7e:80:8f:9c:02:18:54:7f:a8:74:66:c8:
         ea:a4:37:f7:98:e0:e5:51:31:20:81:10:e6:0c:cc:a2:26:c2:
         41:46:3d:7b:ac:7f:69:6b:08:50:a3:4b:33:54:a1:61:09:73:
         a4:94:48:5f:90:e4:ae:92:4e:af:fe:83:b5:f6:bf:7f:a6:cb:
         a3:99:fc:95:a1:26:65:a4:8f:62:b6:06:8d:9a:ca:eb:23:e5:
         c5:c8:56:42:67:b4:f9:d6:2b:00:5c:82:1b:fb:ac:9f:8e:57:
         ac:73:18:de:69:bd:0c:f1:02:12:ef:07:fa:e7:50:ab:c0:40:
         42:fa:42:18:b5:b0:2e:76:f5:93:bc:12:e8:22:24:25:e5:c0:
         c3:57:06:e6:da:33:12:11:c0:a7:aa:ae:7d:13:f1:9a:9b:55:
         c7:88:a4:2b:ac:04:69:11:04:f5:08:69:ec:94:23:e5:c6:65:
         e3:1a:34:0e:87:87:b0:f7:c7:9d:37:62:d2:16:71:2a:87:df:
         3d:25:94:99:54:06:33:98:c3:99:21:2c:de:91:de:3f:c3:ec:
         96:1f:bf:d0:ac:eb:bf:61:e7:c6:8b:69:09:6f:3b:10:ee:4e:
         b8:03:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:20 2025 by rpki-client