Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67d2f1b9-c44e-36d7-8999-009bdec0acba.roa
File:                     67d2f1b9-c44e-36d7-8999-009bdec0acba.roa (raw, json)
Hash identifier:          lBAJDW1uQNgGug62ZlPKB8pAlWIeGF9ARS+Uwt1bqzE=
Subject key identifier:   73:1F:B4:35:86:0F:9C:E5:33:3F:94:97:21:09:C2:53:9A:FB:C3:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03159D312879FB731ED2E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67d2f1b9-c44e-36d7-8999-009bdec0acba.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.207.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:59:d3:12:87:9f:b7:31:ed:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=bda086a7-1fe4-4e8a-8b88-99765d70e8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:1d:55:81:b2:75:2d:bc:94:dc:37:8e:92:
                    89:c1:61:ca:ac:69:f5:af:58:91:85:44:e6:33:8d:
                    15:ad:de:34:71:66:4d:8e:50:9f:ce:b7:a3:73:79:
                    95:1a:9f:d4:6f:be:b9:91:12:6d:9d:ab:e2:00:ca:
                    70:0a:6d:01:53:fc:90:6e:55:3b:a6:2c:82:a6:3b:
                    ed:c0:7f:1e:67:2b:2c:43:56:74:38:28:bd:43:38:
                    2a:cd:30:a5:e7:3c:d6:f1:00:90:de:02:57:53:cf:
                    42:ee:63:3e:ad:bb:8b:35:ff:1c:4e:e8:f7:49:61:
                    03:b4:37:68:76:fe:d7:89:60:40:f3:4c:c4:2f:6c:
                    5e:b7:cb:dc:e6:af:0c:1f:9b:92:e5:92:6b:40:50:
                    40:05:3b:01:5d:70:a3:18:15:c0:35:28:4d:b1:cb:
                    a6:9d:67:d6:0b:d6:7a:13:9e:75:93:70:79:89:72:
                    38:21:b9:16:80:12:b0:7f:f0:da:5d:7a:fb:cc:22:
                    7b:e7:ca:ef:80:66:1a:3c:dd:3a:c3:23:9f:51:64:
                    26:f0:cc:46:9c:fc:11:6e:6d:d7:8a:43:de:63:ff:
                    f4:43:07:47:b5:8c:73:7a:9b:bd:f0:6a:01:7f:c2:
                    eb:44:1e:e5:77:25:5c:f9:d3:89:72:1f:dd:75:10:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:B4:35:86:0F:9C:E5:33:3F:94:97:21:09:C2:53:9A:FB:C3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67d2f1b9-c44e-36d7-8999-009bdec0acba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:3e:0e:12:50:68:5c:50:e3:41:c4:38:6b:a6:1d:5c:8f:
         32:67:52:6a:db:84:ca:81:0c:ee:84:f1:92:1a:8c:28:35:ee:
         db:c6:13:c7:5f:f1:15:cd:f8:d5:ed:25:25:4e:b4:90:52:aa:
         75:af:dc:24:70:54:51:4d:3a:fc:05:19:b2:07:0a:35:82:75:
         7d:c0:12:b7:e7:ab:76:eb:cc:2a:d7:63:06:48:d1:f2:9d:82:
         77:72:be:86:2a:44:47:00:47:ff:16:6d:14:f8:db:58:a5:d2:
         6e:32:8b:36:df:08:27:21:bc:34:81:cf:6d:17:65:6b:01:d2:
         53:3d:08:37:f8:84:ac:9b:c0:60:0c:85:7f:32:6a:76:79:9c:
         4b:30:1e:a1:3d:a4:9b:77:7f:62:cf:34:f7:0b:4b:c3:6f:30:
         ce:74:9a:b8:6b:ee:dc:44:be:72:3d:9f:91:2c:40:3c:08:63:
         a2:a7:7a:66:db:ef:01:68:a2:00:e2:b2:7f:79:c1:51:9a:8c:
         df:dd:1e:fb:61:bd:4c:a8:41:65:19:c4:ee:74:9a:8e:fe:87:
         0f:93:0d:95:c7:ac:e6:66:51:16:bc:4f:c1:ca:3c:6a:c6:c4:
         56:9c:98:ba:bc:c9:94:73:b8:40:8d:00:a3:fb:bd:82:cd:94:
         09:c5:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:54 2025 by rpki-client