Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ed9ed50-f4f2-35df-8d2c-cf49476f101e.roa
File:                     2ed9ed50-f4f2-35df-8d2c-cf49476f101e.roa (raw, json)
Hash identifier:          A1GBOs0s7kpVup4XSjNKpN0ic4lmyy/Cd/tjPsTd++g=
Subject key identifier:   5D:96:30:30:67:02:27:6C:0A:21:BD:35:F3:EF:B9:84:D0:B6:06:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031548631C7E548176E7F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ed9ed50-f4f2-35df-8d2c-cf49476f101e.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.137.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:54:86:31:c7:e5:48:17:6e:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=b96c7c3d-831a-4879-b568-a92b9c58d8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:fb:17:66:94:bd:6e:b0:11:e6:38:fc:7a:
                    28:fe:46:dd:c8:8b:4e:2e:fe:11:7c:7e:b5:e2:89:
                    95:65:e4:f1:b8:f2:4a:b2:08:04:fc:2b:2f:a3:f4:
                    33:8f:8b:50:27:59:e2:71:f5:b9:04:1f:50:ab:97:
                    0a:fd:36:5e:43:f2:4a:5a:22:5f:65:de:32:ff:33:
                    28:7b:29:f3:84:38:7e:d3:66:eb:3c:e0:0a:6f:9d:
                    4d:16:fc:c5:4e:2e:06:e9:73:05:f8:bc:72:c4:cf:
                    b5:cf:6a:2e:0f:74:d9:92:11:a9:4e:29:07:fa:ed:
                    c9:42:a2:36:4e:f5:37:1f:09:aa:9a:6f:ef:f5:92:
                    88:57:65:60:6b:e5:06:ba:df:e9:f2:3c:a5:ff:22:
                    4d:6e:79:88:9d:79:bf:14:b1:21:9f:70:d7:9d:5f:
                    e4:a1:ab:2c:1c:3d:14:d2:04:70:ad:b2:a5:96:6f:
                    c0:8d:26:31:88:28:c8:42:05:51:e6:89:3c:58:1a:
                    ae:a5:7d:0f:59:b1:03:e3:99:8d:3e:c3:3d:c2:6b:
                    70:8b:25:77:04:6a:c9:55:f1:1d:12:25:fe:5c:64:
                    c5:a3:51:56:06:46:eb:86:23:1b:03:31:f4:c0:80:
                    f5:53:f4:52:c7:cd:a6:2c:54:6a:74:5e:5e:03:77:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:30:30:67:02:27:6C:0A:21:BD:35:F3:EF:B9:84:D0:B6:06:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ed9ed50-f4f2-35df-8d2c-cf49476f101e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:16:56:31:73:78:bb:44:bb:b2:8c:bc:f7:c3:62:da:eb:
         67:17:32:2e:62:77:ca:99:4f:c0:28:2a:36:48:7b:bf:74:af:
         70:74:0f:60:3b:f6:64:f5:e0:ab:80:8d:8a:07:77:3a:fa:f5:
         3d:f5:9e:26:55:ff:ca:38:db:f5:f8:34:24:e6:c3:c2:0b:5f:
         90:79:7d:6d:b8:96:7e:3b:b0:ec:6b:d1:0d:5e:37:2a:1c:16:
         38:ea:e9:8d:4b:05:4e:f1:fb:d4:35:46:ae:24:a8:30:8a:f5:
         a5:7a:fd:74:f0:3f:cd:66:1d:1a:6c:28:40:03:fb:e6:f4:99:
         21:ec:61:7b:5f:6a:91:77:a8:0e:94:1b:75:aa:fc:6d:77:1c:
         0e:7c:78:22:2b:19:99:9f:07:fc:13:ab:c8:9e:5e:f2:67:14:
         fa:c8:75:b2:45:e6:f6:58:db:be:15:70:c6:c0:0a:af:36:9b:
         0d:3e:68:4e:57:14:9f:24:2d:d3:24:dc:20:93:8a:40:3c:24:
         67:b3:df:36:a0:c5:0e:e5:af:8e:d3:40:1a:14:e6:0c:68:1a:
         ac:73:93:55:c2:b8:69:dd:00:9c:f3:17:22:cd:87:95:ab:3d:
         74:fd:70:76:38:f7:32:b9:c0:6c:bf:ea:86:83:1f:52:d0:e3:
         26:94:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:06:01 2025 by rpki-client