Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1475406-cbd0-3fbc-8fc5-fb1abf0cbb34.roa
File:                     d1475406-cbd0-3fbc-8fc5-fb1abf0cbb34.roa (raw, json)
Hash identifier:          5d3+MYl6F7E8sNvkMvfmiZRRgC6907oc3jNCrlik714=
Subject key identifier:   0B:70:B9:B2:52:06:70:1A:86:53:0F:37:80:78:D0:E0:0A:8F:18:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE08099C70EC5D15130240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1475406-cbd0-3fbc-8fc5-fb1abf0cbb34.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.4.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:08:09:9c:70:ec:5d:15:13:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4d1250e8-e970-44c4-97d9-c37bc1ced3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:02:1b:da:4e:81:57:96:34:e7:b1:4b:98:
                    2a:26:ef:5d:eb:04:1b:32:8d:85:66:12:7d:91:5b:
                    9a:54:77:dd:2f:0a:c1:38:f8:be:7f:62:e1:9e:3e:
                    3a:43:ea:c4:1b:45:08:2a:bd:40:80:a4:41:78:e3:
                    ac:35:91:af:5d:d1:f8:7c:03:63:86:b5:fd:b3:24:
                    20:bb:7f:71:cd:8e:40:67:95:45:3e:14:10:46:05:
                    90:2a:10:67:52:67:96:c7:d9:5c:47:2d:54:46:43:
                    09:fc:a6:cd:2b:62:df:1d:d1:91:7c:f5:f7:ce:ea:
                    50:99:34:96:14:fc:a9:33:bb:0b:ca:ce:9a:92:b7:
                    f4:4b:60:0b:e0:cc:4c:fe:4d:3b:41:d5:8e:fc:ea:
                    28:3a:5c:67:8e:96:4b:06:93:27:02:97:93:64:66:
                    28:fb:11:46:6c:2c:d8:a8:7b:0c:55:64:0a:23:7e:
                    a6:1f:d7:5d:aa:05:fd:9f:ef:ee:27:29:ec:a0:49:
                    41:8a:3e:1d:fc:be:3d:d6:6a:38:1c:0f:21:43:a2:
                    22:ad:67:6a:8f:cf:83:0b:d9:9e:32:6e:4f:3c:bc:
                    62:e0:24:96:2f:ae:b7:fe:49:1d:fa:62:48:89:75:
                    d6:73:5f:94:5d:41:58:4f:19:17:d0:da:c9:01:ec:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:B9:B2:52:06:70:1A:86:53:0F:37:80:78:D0:E0:0A:8F:18:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1475406-cbd0-3fbc-8fc5-fb1abf0cbb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.4.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:91:c9:43:f9:0b:eb:92:91:25:b9:9c:ca:b3:69:a4:dd:48:
         c8:82:8b:f3:9d:9d:8f:f7:6e:5c:19:2a:90:d9:d2:e9:93:74:
         51:40:af:6b:28:31:e8:e3:45:3e:0b:0a:0a:c1:99:ee:69:e2:
         a6:b6:07:95:a0:80:52:78:7d:94:fb:a7:2f:a2:75:33:c8:27:
         f7:11:60:a3:2a:65:ce:58:05:6d:74:32:97:b0:2b:52:88:a8:
         af:e9:3e:38:76:ea:f1:3d:69:d9:ce:3c:82:98:6f:9e:03:18:
         96:08:9b:b1:34:cd:93:58:fa:f0:f2:25:f9:7d:a3:06:54:9b:
         35:34:5a:ac:14:40:52:cd:16:d4:c0:dc:4d:06:b8:12:34:40:
         9c:b4:6b:bb:25:41:56:47:12:41:c0:fd:28:85:4c:c1:2a:5d:
         41:7e:fc:0f:72:df:f8:a8:83:30:9a:77:ce:91:5b:84:26:b0:
         0c:f5:a0:4f:9e:43:8f:18:5b:16:36:34:9c:9c:0b:eb:2c:8f:
         8a:46:9f:c0:1b:1f:b7:52:a7:65:0d:e9:94:d9:74:62:9a:58:
         c6:1d:da:df:c3:c5:6a:7e:61:5c:6f:dd:78:d4:a8:49:a0:28:
         2a:bb:0a:07:2d:e7:2d:9c:1d:47:4b:96:9e:41:08:c2:bd:13:
         88:d1:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:45 2025 by rpki-client