Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1e28ee7-d70a-3988-95b2-a3bf166d5528.roa
File:                     e1e28ee7-d70a-3988-95b2-a3bf166d5528.roa (raw, json)
Hash identifier:          jdMKUvOQc3V+kIZQvfSLXDvHnpyp8cYv42Yny6y+ZbU=
Subject key identifier:   BD:68:76:E8:01:E8:4B:8F:B6:5F:B2:66:B6:90:41:DD:DE:AB:14:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDD727BF44FF13B0A1A3F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1e28ee7-d70a-3988-95b2-a3bf166d5528.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        73.167.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:d7:27:bf:44:ff:13:b0:a1:a3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=79c8c775-28af-43e3-af4c-8d50f12ace74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:2a:cb:18:bf:e2:86:6d:17:9c:e5:a0:1c:
                    2d:bc:71:bf:9c:ed:87:e3:33:db:ba:71:73:ac:08:
                    00:3f:16:63:5a:40:05:f2:09:c6:3c:79:2e:cf:7d:
                    95:c8:b5:06:8c:b2:82:e6:01:d7:d2:55:9e:57:37:
                    37:f1:bb:3f:b6:cb:ea:27:85:2b:19:3f:01:0e:3a:
                    cd:e2:22:b9:50:fd:df:83:c1:1e:88:d6:9a:3f:96:
                    4c:d1:ad:bd:8a:a7:db:1f:b7:9f:83:a5:64:75:9f:
                    38:f8:95:6c:5d:6f:5b:24:6b:fa:7a:20:fd:af:43:
                    32:7d:8b:ed:71:f3:72:a3:ce:8d:0c:84:be:0e:fb:
                    1b:61:10:a8:4a:7a:47:10:53:21:05:5c:5e:50:27:
                    78:ee:99:0c:fa:96:13:dc:bd:4b:13:1f:29:27:0e:
                    4b:e4:28:ea:77:3b:2d:48:97:b4:0d:77:b5:47:4f:
                    a0:ba:25:c5:ec:ef:8b:37:c1:68:e4:aa:bc:46:c7:
                    56:08:01:97:1c:e1:38:02:16:4e:e2:2f:2f:07:41:
                    6a:82:36:81:01:e6:5f:1f:7b:f5:7e:ee:d8:2d:ad:
                    a4:3a:d6:ec:77:f2:40:fd:49:60:18:16:b3:2e:9d:
                    5b:2d:5e:34:6a:d1:ff:02:76:38:b2:8e:1a:c2:cb:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:76:E8:01:E8:4B:8F:B6:5F:B2:66:B6:90:41:DD:DE:AB:14:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1e28ee7-d70a-3988-95b2-a3bf166d5528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:27:98:90:62:f5:87:86:6a:49:4f:a8:cd:57:4d:f9:62:dd:
         31:0a:81:00:f1:d9:fc:80:43:f0:e4:6e:e5:b9:1c:33:75:ab:
         74:be:02:19:a5:bd:8b:e6:0c:e3:47:87:dd:83:86:a7:8b:d0:
         0e:53:af:dd:e5:0e:b0:f3:c7:5d:78:82:12:aa:96:4c:91:c8:
         55:61:2d:e9:20:82:c4:a6:e7:a6:13:f3:1b:63:38:78:cf:f9:
         1f:50:3d:da:b2:ff:c3:c5:81:86:b3:0d:f8:1c:cf:56:c9:24:
         01:46:0a:22:07:05:ee:90:2e:7e:f5:ca:c5:b5:46:c1:2f:8a:
         a4:ee:91:a1:1e:bd:30:c4:1e:0b:73:1f:7b:d5:08:2f:51:52:
         d2:36:19:68:5e:74:5b:02:99:89:6d:67:9f:4b:ed:68:22:74:
         4f:e8:d6:8d:f5:97:41:31:70:b4:f5:34:a4:1b:45:10:29:82:
         89:83:a6:94:89:f1:7f:51:76:61:88:4a:fc:91:fc:1d:72:b6:
         fc:25:6d:98:7a:51:49:99:b1:b6:96:b0:0d:73:37:b9:9e:84:
         e9:a7:f1:90:20:93:0a:00:d9:c9:a0:ce:78:95:4a:b1:5a:86:
         30:5c:83:77:70:98:95:a3:5a:92:6f:87:32:8e:15:1d:bf:21:
         a1:3a:28:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07dcnv0T/E7Cho/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzljOGM3NzUtMjhhZi00M2UzLWFmNGMtOGQ1MGYxMmFjZTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxoqyxi/4oZtF5zloBwtvHG/nO2H4zPbunFz
rAgAPxZjWkAF8gnGPHkuz32VyLUGjLKC5gHX0lWeVzc38bs/tsvqJ4UrGT8BDjrN
4iK5UP3fg8EeiNaaP5ZM0a29iqfbH7efg6VkdZ84+JVsXW9bJGv6eiD9r0MyfYvt
cfNyo86NDIS+DvsbYRCoSnpHEFMhBVxeUCd47pkM+pYT3L1LEx8pJw5L5Cjqdzst
SJe0DXe1R0+guiXF7O+LN8Fo5Kq8RsdWCAGXHOE4AhZO4i8vB0FqgjaBAeZfH3v1
fu7YLa2kOtbsd/JA/UlgGBazLp1bLV40atH/AnY4so4awsul/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1odugB6EuPtl+yZraQQd3eqxRlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTFlMjhlZTctZDcwYS0z
OTg4LTk1YjItYTNiZjE2NmQ1NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSadUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIInmJBi9YeGaklPqM1XTfli3TEKgQDx2fyAQ/DkbuW5HDN1q3S+Ahml
vYvmDONHh92DhqeL0A5Tr93lDrDzx114ghKqlkyRyFVhLekggsSm56YT8xtjOHjP
+R9QPdqy/8PFgYazDfgcz1bJJAFGCiIHBe6QLn71ysW1RsEviqTukaEevTDEHgtz
H3vVCC9RUtI2GWhedFsCmYltZ59L7WgidE/o1o31l0ExcLT1NKQbRRApgomDppSJ
8X9RdmGISvyR/B1ytvwlbZh6UUmZsbaWsA1zN7mehOmn8ZAgkwoA2cmgzniVSrFa
hjBcg3dwmJWjWpJvhzKOFR2/IaE6KHk=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:06 2025 by rpki-client