Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edb59415-eb4e-3189-9a4a-4b13695b63a5.roa
File:                     edb59415-eb4e-3189-9a4a-4b13695b63a5.roa (raw, json)
Hash identifier:          3OA/4xCDBW1yjNbDZJu+XZfUqQG6N4PTIDI3fw3lkfY=
Subject key identifier:   95:6D:68:8D:C1:41:5D:58:64:6E:DA:B2:0D:C4:C6:65:F2:55:63:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B9373E9AD7B529FD46080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edb59415-eb4e-3189-9a4a-4b13695b63a5.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        73.207.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:93:73:e9:ad:7b:52:9f:d4:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=dc96503d-28f9-4bc0-9b0d-60f6e6bce923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:c1:7f:a6:eb:34:40:e1:e2:87:2e:c8:a9:
                    59:e2:8c:99:f3:f0:bd:1a:f5:0d:82:6b:6b:bc:19:
                    f7:4b:9b:97:92:11:e9:6c:dc:0f:b0:d0:0a:df:bc:
                    ce:17:db:8e:dd:43:9e:bc:ee:06:9f:ae:82:16:5a:
                    29:48:fa:77:04:3b:40:90:ed:15:d7:90:21:f2:e6:
                    77:b8:43:ac:da:d3:46:e7:41:f2:8b:70:e5:d6:53:
                    0c:5f:ec:88:93:61:9e:38:e0:6a:97:6b:0a:39:fe:
                    34:24:05:93:69:6b:7e:3d:15:a8:3a:ea:fa:e8:08:
                    d3:53:81:76:57:24:69:35:59:89:2f:b8:71:50:bf:
                    6c:b0:a2:7b:a1:cd:13:68:56:0d:42:50:38:46:99:
                    68:0e:9f:e4:16:bc:34:66:69:a2:8d:e8:89:fb:71:
                    95:1e:d7:3b:bf:b1:19:4f:e3:eb:30:bd:6b:9d:8c:
                    98:59:9f:21:a9:24:a0:a5:c1:fa:c4:9d:14:93:43:
                    92:43:f2:aa:94:72:c7:e0:24:83:cb:3e:51:82:4e:
                    4f:c2:9c:04:05:d8:c3:74:40:da:dd:09:31:2c:e1:
                    0e:2c:56:58:cc:9f:e5:9d:c7:fe:ea:a8:8a:50:66:
                    08:c0:5c:4d:1e:6c:58:f1:46:11:7c:d9:c9:e5:8f:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:68:8D:C1:41:5D:58:64:6E:DA:B2:0D:C4:C6:65:F2:55:63:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edb59415-eb4e-3189-9a4a-4b13695b63a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:a6:14:ff:5a:20:51:00:e2:93:4a:7d:21:f1:c2:28:a6:
         0b:0d:14:2d:ce:37:9b:2b:69:45:ed:55:e4:a2:54:47:b6:83:
         ab:66:56:2c:64:62:84:36:34:10:8e:34:e7:f5:0c:b8:a7:10:
         b6:ea:58:d4:74:3c:ae:68:05:f6:35:0a:47:0e:5d:df:bf:53:
         e5:74:c4:51:48:24:f4:14:83:70:03:6a:ba:b3:88:67:30:d0:
         72:df:12:43:2c:bb:97:74:45:9f:b9:be:72:5b:b8:21:8a:48:
         ee:5d:0a:b3:76:a7:ed:c7:e5:52:e7:23:91:a2:95:77:a4:4e:
         e3:22:06:e3:12:b0:b8:32:3f:14:ed:b2:a9:55:07:31:19:1b:
         a9:d3:a6:be:97:55:4a:a3:6b:54:a4:03:43:d5:28:51:fa:6c:
         5f:ba:ca:d8:ad:ac:84:a8:a7:14:51:00:55:91:8c:59:95:c4:
         fe:07:db:f7:a7:5b:84:24:59:80:a8:d9:87:a9:d2:34:e0:3c:
         6c:40:fc:da:0c:09:05:84:db:86:03:9b:bb:00:d5:7b:2f:6a:
         f5:17:02:5d:a7:2c:79:d7:9f:9f:e7:e3:67:b1:ab:1c:d3:70:
         bd:0f:b5:b5:bd:86:47:43:89:58:2b:6b:57:30:54:f4:73:f1:
         ca:36:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:15:45 2025 by rpki-client