Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/c2714d47-659d-30a5-a2d8-78c70c981bc7.roa
File:                     c2714d47-659d-30a5-a2d8-78c70c981bc7.roa (raw, json)
Hash identifier:          IPn2BrCaB5FrdkiBGgQquaCxecQ+3+1+/MEHefkaO7w=
Subject key identifier:   EE:29:06:1D:A1:F2:94:AF:4E:D4:BF:89:3E:AA:2A:95:19:E1:95:73
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584A8B0B76BEE08F1BA7DCFD6800
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/c2714d47-659d-30a5-a2d8-78c70c981bc7.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     6994
IP address blocks:        173.195.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:76:be:e0:8f:1b:a7:dc:fd:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=594e2ae9-96ca-4c23-a235-a2f6b974cac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:77:f8:e2:68:20:4f:33:df:75:9a:63:ef:
                    40:0c:1f:3f:9b:f1:03:31:87:a8:8c:e4:55:48:fd:
                    86:69:d2:92:a5:1d:f0:bd:66:9f:d7:bf:bc:25:4e:
                    89:44:a0:e9:94:82:cb:02:24:ee:53:fa:9a:19:a8:
                    d9:10:b0:a3:28:27:cf:fd:83:63:3c:e2:20:17:43:
                    59:32:8a:68:ed:cf:85:17:cf:f7:00:1f:00:b0:e2:
                    77:f3:3c:1a:2f:11:80:65:9d:bf:0f:6e:01:24:94:
                    20:67:48:55:10:49:68:63:2b:79:85:5c:7f:f2:84:
                    4a:37:7f:93:c4:31:1a:b2:99:9d:0c:df:b1:b6:71:
                    8c:a9:5e:7e:80:7c:e3:98:65:35:38:f9:bc:cf:ff:
                    89:16:53:f2:fb:18:08:3f:e2:b3:2c:9e:fb:4c:03:
                    88:e4:1e:b9:15:64:25:3c:27:4f:58:df:a5:16:96:
                    42:27:fd:bb:da:87:41:09:95:2c:92:3d:b1:95:2d:
                    3c:0c:3e:ec:68:f5:66:b2:fe:ff:75:c5:4f:d3:af:
                    05:a5:c4:10:59:c7:68:78:38:c2:47:b4:08:65:e9:
                    bc:a7:1e:25:1f:27:2d:64:03:c3:ea:2f:e1:45:99:
                    53:61:62:83:53:07:ab:a1:e4:c7:54:ed:cd:3f:1b:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:06:1D:A1:F2:94:AF:4E:D4:BF:89:3E:AA:2A:95:19:E1:95:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/c2714d47-659d-30a5-a2d8-78c70c981bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:a6:80:80:c7:ba:bf:4d:b3:ac:e6:f7:0b:a3:5d:aa:bb:
         4a:f9:87:67:eb:19:23:6b:e1:b9:bb:b7:83:c6:85:ac:42:bd:
         74:7a:f0:c4:e5:42:c2:70:6d:22:35:95:39:e9:e1:fe:0d:42:
         db:82:eb:30:af:77:b1:d9:76:35:82:df:15:25:0f:61:ac:d9:
         f0:ca:f5:b0:30:d7:7f:e3:d1:98:63:08:fc:05:b4:6e:05:80:
         5d:4f:e8:66:15:6c:15:aa:51:97:dc:91:15:b2:10:f7:80:2a:
         97:6c:7a:50:21:b4:95:f6:25:c6:74:e3:4f:76:f7:9b:f8:7c:
         11:9e:9a:34:97:99:32:09:fd:f9:6f:a8:b6:42:aa:68:ce:ca:
         a2:dc:1f:f6:33:63:ff:80:d8:83:0d:15:bc:cd:0f:7e:ff:d4:
         43:35:94:93:41:2b:9a:34:f5:d9:7b:00:a6:28:e6:35:e3:3c:
         2f:04:a2:54:65:ae:bb:65:af:a0:1f:7e:9b:ff:13:88:c1:50:
         ce:a1:31:06:42:4c:9c:1e:4a:46:7d:65:1b:98:ba:18:d6:7b:
         a2:8f:7e:79:d5:0a:ef:81:c7:db:72:3a:85:0f:c7:01:3e:54:
         a3:fe:11:8b:0b:54:08:ed:72:c2:13:89:e2:3c:40:4c:ff:b7:
         63:01:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:34 2025 by rpki-client