Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/602ce8d0-9b8a-342b-9e3a-85eeefc14218.roa
File:                     602ce8d0-9b8a-342b-9e3a-85eeefc14218.roa (raw, json)
Hash identifier:          2R+hkCy4tOHUwg8yIUecGCtZ9g4MSdwJvEimy1LjwQo=
Subject key identifier:   4E:51:95:04:E5:C8:1B:67:78:8C:63:63:8D:B5:83:68:C9:83:CD:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBE2E43D8A9934082AB780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/602ce8d0-9b8a-342b-9e3a-85eeefc14218.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        162.148.94.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:e2:e4:3d:8a:99:34:08:2a:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=0c6e83c4-e9c1-4a35-bb89-c709d801ee8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:9f:b8:74:e8:fd:b6:c3:1f:4a:cb:62:dd:
                    e9:98:9d:b7:60:7d:bc:20:97:22:8a:ea:29:07:13:
                    a6:83:24:a0:a0:5e:fd:3b:a5:47:a9:87:dc:40:e4:
                    21:41:a9:d0:86:df:11:ea:3a:81:d4:3d:0f:b6:2b:
                    8b:e7:c8:4b:7b:b5:65:2e:ac:7d:73:d3:68:d0:b4:
                    31:74:67:22:06:f7:df:e9:80:5e:7a:cc:f3:15:b0:
                    40:3d:52:8a:bc:68:67:22:fe:41:48:ab:6a:8e:04:
                    43:db:d8:e7:b2:8a:a9:4f:8b:c3:28:e1:ad:17:72:
                    85:69:f2:56:7c:bc:da:92:b6:8f:46:e6:b9:ec:01:
                    4c:98:f8:1f:c8:74:67:14:92:bb:fc:4a:00:70:12:
                    2b:c0:7b:ce:c9:00:3c:03:d2:1c:99:35:2c:74:e8:
                    5f:7f:97:64:b5:fe:ba:5c:35:4f:a4:8f:75:79:46:
                    9a:2c:5a:4c:b5:49:13:8d:7e:8b:51:e8:dd:79:04:
                    e8:3f:72:07:30:66:99:56:f5:4b:fb:d7:9d:9e:82:
                    a1:b2:3e:e2:fd:b4:b5:83:27:79:17:e9:a3:6a:4a:
                    4c:08:0a:3d:84:68:37:de:dd:ea:1d:bb:d8:ca:33:
                    b7:2e:36:ae:64:2c:59:5c:8d:b8:1e:85:e2:13:11:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:95:04:E5:C8:1B:67:78:8C:63:63:8D:B5:83:68:C9:83:CD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/602ce8d0-9b8a-342b-9e3a-85eeefc14218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.94.144/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:f6:19:e5:db:08:b9:d6:6b:76:0e:25:f3:d1:d9:a7:bf:
         ac:97:37:a7:22:87:f6:01:ce:b0:80:e0:66:bb:fe:54:aa:7e:
         c3:35:43:e1:f0:bf:f4:29:1e:c7:6a:0a:af:b3:f3:b7:9a:86:
         6c:33:c5:79:30:72:74:3b:66:78:c2:b7:cf:a5:b0:da:35:5d:
         5b:40:63:78:c2:57:92:0b:f4:98:e4:08:2a:9b:52:82:d8:d6:
         18:1d:10:a2:ce:ce:8f:49:4f:20:72:30:8a:22:49:8e:42:dc:
         68:fa:be:92:d3:23:f7:2f:fc:a2:5c:2d:41:00:cf:41:a3:0b:
         15:9c:f9:37:ce:4f:f5:e9:18:16:34:36:a2:ba:a1:68:a5:14:
         14:dc:41:f9:e3:2e:6e:df:95:df:f9:70:fb:f8:e9:f9:b0:51:
         d1:c3:c8:a9:09:fd:d6:40:92:86:6d:29:61:aa:0a:5e:cb:a6:
         a0:c4:a9:c1:33:81:6b:9c:34:74:bb:7e:ca:0a:71:2b:3b:87:
         2b:3a:61:c9:33:d5:c0:6f:cc:fb:d6:87:10:61:33:7f:b6:58:
         c2:07:0a:dc:15:8c:1c:cd:a1:ec:6f:f4:23:00:f2:3e:ba:37:
         30:57:6c:57:f0:d3:dc:ac:f7:f3:bd:19:45:2f:15:b0:93:82:
         5d:09:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:56:18 2025 by rpki-client