Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
File:                     4ab8af84-9360-38dc-b395-d87a2004c6b7.roa (raw, json)
Hash identifier:          svYQCZLhqBC1++W6CUIWJWK31mhX0FkEpZYi9ZY5ruY=
Subject key identifier:   D4:63:09:EC:7E:36:9B:2A:F1:C5:20:42:F5:D9:45:86:14:A0:7B:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03162CADBA0D97E70CC9C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.43.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:62:ca:db:a0:d9:7e:70:cc:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=fef43045-b21d-4ac1-87b2-8f5c733b8d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:f6:83:48:c1:5c:c6:65:6c:b0:41:54:80:
                    8d:3e:5a:99:8c:87:5e:65:15:5b:1a:01:cf:5a:b9:
                    6e:08:b6:be:06:cd:3f:ac:74:5c:e1:c7:98:36:78:
                    db:ef:3b:61:77:65:7a:5b:21:7e:b1:04:7f:bc:98:
                    25:52:e1:a9:ea:3d:8d:2d:07:78:16:f1:91:59:20:
                    88:f1:22:7f:e3:71:bf:57:fd:94:0e:2c:fd:f2:a5:
                    ff:fd:e7:9a:a5:33:4f:01:bc:ee:89:b9:ea:ba:cd:
                    40:e6:88:b2:da:54:ac:0f:77:e2:1f:a1:7d:d5:63:
                    48:cd:16:b5:14:ce:10:ef:e3:23:29:3d:17:85:ee:
                    29:2c:82:df:98:32:0a:ce:92:60:53:ef:89:f4:52:
                    69:95:0f:58:77:c6:28:9d:08:f3:dd:f8:fb:dd:43:
                    8c:dd:2d:bb:ea:91:71:24:36:d9:64:1b:f4:4f:ae:
                    65:b7:d2:40:1e:b6:50:48:cc:fb:85:6b:d0:dd:51:
                    30:46:37:4b:dd:2e:d2:76:c9:67:94:06:0f:ab:e5:
                    2a:e5:b1:4c:56:56:4e:ec:a8:57:0b:dc:06:49:25:
                    ce:94:df:92:b6:df:ab:c7:62:1f:c4:01:08:3a:22:
                    01:4d:05:e4:98:e8:e3:a0:e0:b2:54:26:de:c1:22:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:09:EC:7E:36:9B:2A:F1:C5:20:42:F5:D9:45:86:14:A0:7B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:99:df:64:4b:85:f9:9e:da:d9:79:14:21:e1:fc:df:5c:
         0b:fa:5c:85:a7:06:af:6c:f8:0f:e4:4e:53:29:af:0f:11:d8:
         91:7b:ac:82:a8:6b:f4:48:b2:5b:06:91:41:36:f3:db:92:62:
         73:61:0f:84:c1:10:a9:d6:7a:2b:05:9f:31:d6:7a:b6:4b:54:
         8e:7a:b1:47:d4:f8:a2:ef:0d:a9:72:f4:23:d5:96:fe:e3:70:
         6c:df:16:d1:d9:bc:bf:2f:65:02:16:a6:56:be:e9:23:f2:d6:
         34:42:db:08:2e:50:10:80:69:41:eb:7c:2a:d0:50:96:df:57:
         c6:40:aa:c4:85:13:c4:f0:b8:8c:9c:df:ba:fa:56:71:4c:8b:
         71:e1:cb:62:bb:c4:27:25:e1:97:08:bf:7b:6b:90:c3:da:6b:
         02:b9:d2:a2:74:5c:ca:6a:99:8f:59:fe:f4:a4:2f:91:8e:28:
         76:c5:ac:f2:37:9b:80:1a:c7:f4:5c:5a:a6:72:e2:1f:9d:0f:
         15:06:96:fe:39:f9:8e:3a:2d:d0:01:e4:bc:e8:68:8d:99:21:
         d5:16:3b:d0:89:11:b7:f2:3d:8c:bc:7d:f2:6c:11:82:f3:b1:
         43:b6:9f:1a:7f:65:47:12:0e:c1:55:11:c5:41:77:c4:17:0b:
         4d:c5:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:25:10 2025 by rpki-client