Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c482bfee-7f23-3889-b907-4d2877f3f6e3.roa
File:                     c482bfee-7f23-3889-b907-4d2877f3f6e3.roa (raw, json)
Hash identifier:          fxSdBRuiMOzWnLhYHJ784rpNOuSdlNFJc8/xIP2+nJw=
Subject key identifier:   93:B7:28:EC:68:CC:7E:03:90:A8:49:A0:FB:88:B9:06:D6:9E:FE:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDD696802CF2789DA65D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c482bfee-7f23-3889-b907-4d2877f3f6e3.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.167.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:d6:96:80:2c:f2:78:9d:a6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=5e66f289-d98c-44ca-beee-dd812de57eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:a1:82:41:0a:b1:2b:68:aa:de:bd:2c:ee:
                    1d:17:91:d0:e2:19:00:10:05:ce:1e:60:ce:b6:0e:
                    b3:e6:67:de:a7:f3:e8:9d:31:12:3a:1e:d2:ac:9a:
                    57:9b:e7:4c:3a:2d:5d:d1:a6:65:8a:15:2b:5c:70:
                    d4:5e:6e:ed:5e:0b:9c:b7:5a:d0:0f:dd:85:5e:ad:
                    15:68:ef:35:db:49:75:4c:a9:43:99:bc:dd:30:98:
                    ba:a6:c0:44:e0:10:42:15:a3:74:fc:92:ee:db:57:
                    16:9b:66:6d:01:32:c0:9e:3d:fc:3e:8d:4d:84:0a:
                    de:44:29:ce:bb:5c:2f:91:25:d7:87:9a:17:76:17:
                    e6:7d:ce:1c:d7:11:cd:3b:da:a2:73:09:41:f6:14:
                    17:a5:6b:2c:c6:1c:64:78:f2:ac:0c:f9:e5:bc:aa:
                    26:6d:2d:cb:9f:fc:9a:49:3c:53:be:ca:8c:6b:f9:
                    f8:05:1b:bc:fd:8f:d0:73:39:e4:42:55:ff:fd:b3:
                    e3:55:89:91:27:af:07:ec:2a:04:dc:47:12:c8:4a:
                    49:8f:00:d5:f3:83:ce:d7:b5:23:75:59:7a:f6:43:
                    f1:01:e1:4f:c1:5e:bf:fa:f4:37:9b:04:e8:3f:73:
                    03:b3:67:c8:a9:c8:1d:b0:e8:41:5c:86:56:57:b5:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:28:EC:68:CC:7E:03:90:A8:49:A0:FB:88:B9:06:D6:9E:FE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c482bfee-7f23-3889-b907-4d2877f3f6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:0f:6a:ac:19:cc:f6:77:25:48:d1:d7:aa:cd:04:58:64:
         1b:ed:f7:9f:9e:07:99:a9:ef:78:c1:29:9d:27:37:7f:99:39:
         1b:d8:f8:d1:4a:5b:bd:22:4b:ac:5e:db:9a:9c:05:40:2d:7e:
         60:e6:51:41:bc:c1:85:84:37:c2:af:f9:eb:39:64:76:05:c0:
         9d:4d:63:d0:ad:7a:e7:41:6b:91:87:ce:42:a1:c0:77:6e:fa:
         02:cf:c3:2c:67:93:9e:d9:ba:68:9a:86:eb:93:7f:ec:e5:c8:
         26:af:34:f3:2f:74:c3:ff:d3:3e:9b:ec:aa:4e:2b:fa:51:4b:
         f8:e7:2f:34:41:00:d8:80:63:5b:32:21:d9:2a:8c:34:2e:70:
         6e:46:7c:0f:a0:22:52:43:d9:0b:b5:f9:18:03:da:bb:5b:6a:
         c8:cf:ce:86:89:42:96:2a:88:1b:0c:c5:d4:a7:2f:45:6f:ec:
         a7:b0:95:ee:03:a1:a3:25:e6:6e:a0:e4:fb:73:60:db:d7:24:
         e3:cb:4f:2e:71:c3:a3:94:f8:12:b2:19:77:57:9d:d9:10:72:
         8e:b0:09:3e:27:4f:23:57:e3:ff:ae:2c:d9:4a:85:5b:8a:08:
         69:55:53:03:d0:2b:91:f6:20:0f:67:93:4d:27:ae:1b:72:73:
         1c:55:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:48 2025 by rpki-client