Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa
File:                     27ec9a19-a37c-358c-b8fa-3a938442e601.roa (raw, json)
Hash identifier:          d+VQuQMv4gJBMwuuYwxaWFi6zjVuN5f5xwRcmep/9ek=
Subject key identifier:   76:99:02:46:D5:F4:E0:6E:A8:7D:30:72:AA:8E:B6:F5:44:FC:FC:44
Certificate issuer:       /CN=7c896e91-34f7-429b-808d-10170106cf2e
Certificate serial:       010D0C9F4328584AA160DACD1AE862370F9DC620
Authority key identifier: 49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     53589
IP address blocks:        64.95.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:da:cd:1a:e8:62:37:0f:9d:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c896e91-34f7-429b-808d-10170106cf2e
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=157d26c0-71a4-466a-925d-3ee97ce13461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:a5:44:bc:c7:d4:fb:86:3c:53:64:e1:77:
                    18:21:66:bb:e1:02:3a:ae:7b:2e:7c:47:ce:eb:73:
                    ac:ac:d0:d7:2d:2a:6a:ba:c3:d2:64:96:cb:11:89:
                    03:b8:7a:40:ab:44:48:c2:d8:d8:fd:2f:90:39:48:
                    29:7a:5c:56:1e:49:ab:fa:bd:cb:e8:b5:73:08:0c:
                    de:fe:6f:13:c1:be:0b:70:6c:af:4f:c0:91:17:87:
                    c0:4c:50:ac:ac:28:08:c2:23:60:47:3e:e6:70:b1:
                    84:b0:8c:93:e2:c6:d3:5b:4d:34:25:6f:ed:83:53:
                    04:d5:3d:69:0a:54:3e:a8:02:76:90:be:68:24:21:
                    b0:dc:4e:03:3a:0d:e1:6d:dc:c0:72:c9:e3:39:f0:
                    65:d9:8d:26:70:fd:c5:f9:90:a2:61:fe:20:30:19:
                    87:f9:8b:50:bb:86:34:32:df:8c:47:b7:c4:43:8a:
                    91:cf:15:50:72:44:80:05:48:a9:83:39:56:fb:45:
                    5e:27:3c:e1:24:8d:e8:a3:25:52:16:03:15:6e:eb:
                    d9:c6:24:3f:8d:dd:81:eb:c1:f5:db:a4:3d:0b:d4:
                    30:45:d9:c8:6a:61:ef:94:d8:99:ec:cd:84:d0:53:
                    c9:6b:39:f0:2c:b9:1a:93:52:1c:67:ab:c1:9b:d8:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:02:46:D5:F4:E0:6E:A8:7D:30:72:AA:8E:B6:F5:44:FC:FC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/27ec9a19-a37c-358c-b8fa-3a938442e601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl

            X509v3 Authority Key Identifier:
                keyid:49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:48:ac:d5:67:42:99:83:98:2d:56:3c:7c:a9:92:dc:00:e0:
         35:78:3e:de:c7:ac:27:2c:35:2d:97:4c:24:bb:9c:14:ab:73:
         42:6f:50:68:e8:07:4b:60:28:23:59:2b:8f:d5:f1:ac:86:71:
         9d:22:55:0f:72:80:0a:a8:91:f5:8c:80:34:ba:94:18:78:3a:
         ba:c4:44:b2:61:e3:05:06:15:8b:56:eb:84:1c:40:e3:66:9c:
         92:13:c7:e3:69:bb:a4:2f:91:36:ea:b1:23:ac:09:5c:52:c9:
         65:96:b0:d1:37:0d:b1:38:41:75:91:24:66:79:1b:4f:1e:bd:
         e9:23:2d:c8:cf:9d:7d:74:41:c0:3a:af:46:a6:73:ab:40:25:
         77:bf:a5:be:b9:40:53:ba:4d:01:f4:92:c4:21:48:8e:7f:0b:
         ae:8e:3f:de:cf:94:e4:61:ff:ba:92:6f:90:fe:b2:be:4e:1f:
         fe:e5:ae:55:bc:aa:50:65:f5:04:55:e8:30:47:f0:05:8a:4c:
         a5:bd:ec:96:41:4b:74:ee:70:e4:76:0b:a3:4a:70:b4:9a:c5:
         b3:46:b3:43:c5:e1:d1:b1:8b:b4:47:c0:1c:cd:96:59:d6:a5:
         3c:41:ef:7b:da:3d:b4:8c:91:17:08:0e:6b:20:5a:8d:ae:c5:
         df:7b:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:54 2025 by rpki-client