Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2135d5b2-dd8c-3d74-b357-1f06f3b52e62.roa
File:                     2135d5b2-dd8c-3d74-b357-1f06f3b52e62.roa (raw, json)
Hash identifier:          PujzhcPd6vBUaKOAtlFpB8eIURM5cD4+qle396F92IU=
Subject key identifier:   30:F1:42:0E:EB:B8:19:95:33:9B:40:C0:FB:F5:8C:FF:F5:59:FE:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031CB3788B82F007A3D2200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2135d5b2-dd8c-3d74-b357-1f06f3b52e62.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.106.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:cb:37:88:b8:2f:00:7a:3d:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f3f13a80-e254-4169-aee0-18ff68c87cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:20:7f:11:70:c2:34:33:0f:9f:b2:d5:10:
                    e5:6d:ce:b3:d2:8c:c3:26:62:8e:22:6c:b4:92:5f:
                    81:75:8a:80:af:f3:a3:ee:b1:b5:08:8e:3d:49:e5:
                    92:95:78:31:86:f7:00:ae:92:c0:08:18:69:0a:a6:
                    d5:ae:ab:7c:2a:1e:5a:b8:9b:9a:cd:b8:a6:7e:ca:
                    71:a8:ee:3e:30:68:67:04:86:0d:42:94:21:66:22:
                    55:e6:d2:44:90:00:f8:20:c7:89:0d:54:64:76:93:
                    0a:ab:c9:72:e5:79:b0:3a:be:82:10:1d:e4:ce:39:
                    80:1d:e0:da:72:25:ea:a7:cb:14:9c:78:d5:cf:75:
                    86:2d:72:99:f5:ab:26:02:fa:99:a0:03:c8:2e:8c:
                    73:ce:8f:91:1c:b9:90:85:eb:df:15:1a:09:84:02:
                    8b:52:38:fc:b5:51:e7:eb:d2:63:76:3e:5d:1b:32:
                    8e:e4:7f:b9:87:a2:42:04:09:62:3d:cd:a0:4e:09:
                    e5:c2:a2:cd:3d:06:f1:1b:4a:88:73:af:a4:24:ba:
                    b1:7b:dd:6e:33:67:39:a0:7a:45:f1:18:df:49:f4:
                    33:04:b8:9e:94:c8:d7:66:de:33:9a:27:44:c7:84:
                    2d:4a:25:57:86:ee:93:f6:a3:90:27:b8:70:96:d4:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:42:0E:EB:B8:19:95:33:9B:40:C0:FB:F5:8C:FF:F5:59:FE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2135d5b2-dd8c-3d74-b357-1f06f3b52e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.106.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:fc:5e:8e:0a:d3:6d:69:c0:c3:6f:15:26:d6:32:b0:3a:
         14:2b:74:3e:35:2e:47:ba:29:e1:81:15:36:71:86:2f:57:6c:
         ae:43:48:e5:59:66:5e:95:35:41:a4:4e:4e:03:0e:9d:3f:30:
         38:f7:f5:81:7c:2d:93:36:1b:5d:79:97:af:07:18:58:bc:32:
         8d:70:b2:86:c2:3f:61:19:39:a7:c7:a8:53:45:9b:66:bd:cc:
         2d:6a:3d:93:48:bd:05:d2:3f:7f:f8:25:64:bf:5d:29:e3:de:
         94:18:36:53:38:a8:67:7f:f7:a7:84:f6:9c:2b:a3:8f:07:0d:
         e0:12:64:d1:e2:ef:5a:af:f1:ec:54:4b:cf:c3:0c:97:91:c0:
         99:a7:bd:d8:47:73:48:e2:be:de:35:9c:ef:10:e7:e7:e1:0d:
         fd:db:bf:fa:34:62:60:32:26:01:45:ec:e8:97:51:f1:8a:4f:
         c5:3e:1d:5e:52:85:19:1e:9c:35:6a:f6:b4:0c:06:4d:22:bb:
         e3:52:54:9b:be:98:5b:dd:fa:0b:9b:59:24:de:b5:62:00:0e:
         c5:7d:1d:fa:54:84:21:3d:85:f1:11:5f:1f:1f:f4:c8:b7:77:
         f4:61:20:ce:d6:ba:5c:e6:e1:3b:ce:86:05:48:ff:ca:34:42:
         5a:13:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:03:09 2025 by rpki-client