Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0a3c65-f90f-3a53-a585-80a7cf3819e4.roa
File:                     3c0a3c65-f90f-3a53-a585-80a7cf3819e4.roa (raw, json)
Hash identifier:          pRqt587lJfrC+z7f4vas7WWLs4vAhBlkj047A5DEVPY=
Subject key identifier:   67:23:47:48:F2:88:0D:B2:BC:C7:BC:CC:6A:FF:4B:61:F8:86:EE:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031BFFEF0F4BE1DAAD0FE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0a3c65-f90f-3a53-a585-80a7cf3819e4.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        67.191.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:bf:fe:f0:f4:be:1d:aa:d0:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=3a9fa9b7-19b9-45a7-824d-88c7d389b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:53:66:5b:e0:0a:6b:23:49:07:f1:c3:00:
                    53:dc:1a:55:6e:c5:67:59:dc:53:48:7d:9e:00:1f:
                    bb:ac:3d:bc:8b:7b:41:17:90:4b:b6:2e:a7:be:13:
                    29:ff:67:5b:f8:e8:be:42:62:43:fa:f1:2a:0f:04:
                    81:74:f0:99:76:6b:3f:6e:1f:1d:db:19:91:c4:67:
                    29:c9:72:05:47:ad:97:f4:ea:b6:d8:0e:a3:62:4e:
                    09:98:9b:eb:ca:79:6c:da:23:84:a6:36:92:14:50:
                    59:da:ff:2d:22:66:e0:7b:7a:3a:fd:00:04:1c:aa:
                    64:c9:ec:2e:b5:1b:8c:32:f2:45:1f:a0:0b:de:ee:
                    e9:6a:a9:36:c5:75:c6:19:0b:95:da:10:aa:60:fb:
                    b7:6c:dc:7a:e5:69:80:5e:7c:69:eb:5f:43:f1:3f:
                    34:10:c0:5e:62:d4:06:6b:d4:53:7b:12:3b:11:fa:
                    d9:48:68:f1:5c:3a:22:f7:b4:5a:e7:21:45:ba:54:
                    f6:61:60:d0:a9:40:86:75:f3:6f:2c:29:f6:2d:c4:
                    b0:eb:98:ef:4f:e6:b2:89:2f:4e:d4:69:da:f6:87:
                    58:79:fb:f4:3f:1a:7c:fc:33:3f:48:32:75:18:c8:
                    3b:b7:44:3b:5b:b5:31:7d:1f:a8:ff:75:f7:89:04:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:47:48:F2:88:0D:B2:BC:C7:BC:CC:6A:FF:4B:61:F8:86:EE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0a3c65-f90f-3a53-a585-80a7cf3819e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:01:8c:45:1f:a2:e7:0f:24:5b:db:91:8b:0a:1a:eb:aa:
         f9:ae:e6:d9:92:40:95:27:e9:56:75:f4:a9:c5:ae:49:4a:59:
         23:bb:83:1a:91:f9:5c:b0:ae:f7:59:7b:f3:54:64:b3:c1:12:
         b7:b9:60:74:3a:a5:77:bc:7e:af:4b:c4:a4:21:3d:e0:51:55:
         be:55:78:0c:4f:05:6c:82:a1:71:c3:1b:9a:9b:de:bf:0b:b7:
         0b:a0:f1:20:29:3e:0b:52:8a:39:41:29:98:8f:71:8f:94:6a:
         ca:a6:73:28:86:ad:57:e1:9d:ae:fa:88:10:02:bb:fe:e3:a0:
         f9:f9:1c:9d:04:78:8e:a0:1b:79:fc:4e:fe:73:11:a9:65:15:
         8f:e9:d3:e2:bf:f7:c0:16:78:ae:c1:71:fe:d2:1c:e7:88:a6:
         2a:81:df:77:33:38:43:cb:a8:97:47:53:f4:13:7f:18:05:61:
         e5:29:0d:bd:94:74:76:97:9c:d2:31:02:06:cf:54:32:a5:4e:
         a8:1a:9f:b0:87:7e:90:49:1e:20:de:6b:c8:ec:db:68:ee:28:
         79:75:62:ef:dd:7c:58:95:e2:b4:28:51:5f:49:4b:a3:96:f5:
         09:ac:44:a7:0b:0a:ff:d4:fc:62:a1:f0:40:8e:da:02:e2:ea:
         93:ab:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:37 2025 by rpki-client