Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71662282-23bd-3f99-a7ad-2154370cb257.roa
File:                     71662282-23bd-3f99-a7ad-2154370cb257.roa (raw, json)
Hash identifier:          VbXBaOlWzWEfTNv3nBu/E6tOouqq9bX0WwvECBDJuns=
Subject key identifier:   41:85:57:1D:D2:B1:10:89:91:4F:AF:57:58:F9:41:7F:C5:E5:03:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031D102AD67ADD884BBAF10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71662282-23bd-3f99-a7ad-2154370cb257.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.137.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:d1:02:ad:67:ad:d8:84:bb:af:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=ef2d081b-09a2-48dc-81fc-c1fc98741985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:30:f7:59:c6:3c:d1:85:1a:5b:38:da:ca:
                    2c:c8:0a:73:e4:b1:53:a2:97:ba:3a:a5:c8:4d:d9:
                    6b:87:34:ee:8a:21:da:97:3e:93:c4:ad:55:3e:cd:
                    dd:f5:a4:a7:48:e3:0d:fc:13:62:59:99:7a:29:55:
                    1c:fd:48:03:4d:ab:98:09:14:f9:10:ff:b9:de:1a:
                    df:f0:fb:95:42:05:f7:82:ae:22:02:26:70:c2:f7:
                    c9:82:dc:10:8e:2e:83:f3:0d:ea:ad:86:94:87:83:
                    bb:2d:f5:b6:6e:94:f8:b2:45:8f:24:b6:d9:06:e6:
                    54:31:a5:09:eb:b2:9c:95:f3:d7:3a:82:36:41:4c:
                    f8:ce:1e:8d:1b:1b:77:a7:e8:30:ce:97:7a:c9:6e:
                    9a:70:6d:92:09:48:93:2c:0c:a7:87:fc:47:38:f6:
                    bb:59:7b:d8:45:58:eb:69:56:e6:b0:3a:ea:24:8c:
                    00:d4:a5:6c:2e:94:3f:1f:be:c3:db:84:60:a5:18:
                    ba:b2:4b:48:a2:d0:7f:29:5a:41:c7:a4:57:b9:50:
                    67:e2:48:48:bb:86:66:8b:fb:00:88:05:fe:fa:9b:
                    5f:52:80:49:43:75:71:29:89:b1:a0:a2:fc:fe:66:
                    ba:0a:cc:d3:a9:b5:4b:11:2c:18:c4:03:c9:56:a9:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:57:1D:D2:B1:10:89:91:4F:AF:57:58:F9:41:7F:C5:E5:03:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71662282-23bd-3f99-a7ad-2154370cb257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:61:9c:4c:e6:b8:37:0a:b3:e7:7f:de:c4:8e:c4:49:9c:
         fa:6a:d3:51:fd:b5:33:a1:7f:a3:5f:03:26:e4:38:7c:bb:97:
         ab:cc:91:a9:a4:41:c7:b8:77:c1:25:fc:82:d9:ee:a2:3e:6f:
         97:04:c9:12:15:82:21:bf:26:7a:28:89:eb:b4:ea:15:b4:5d:
         6c:90:48:d2:06:c8:e2:b1:da:28:a0:2c:b4:86:77:25:a1:e1:
         b2:b8:b9:bc:cb:ac:a0:86:5c:9b:c6:4a:91:fd:7f:1e:55:e7:
         30:5c:f2:78:b8:10:c8:8f:e7:3a:1d:ea:e8:f9:5c:de:a7:c3:
         15:5c:fe:69:a3:52:11:ca:30:a9:70:28:66:44:8b:76:18:39:
         66:79:83:f5:57:9c:0d:a1:4e:37:fa:64:10:7b:eb:d9:e2:04:
         d2:b6:46:08:32:46:2a:91:be:7f:0e:6c:58:4f:27:d6:e6:b3:
         6b:58:8c:4e:1b:fc:23:fa:26:e6:23:d8:0a:ef:bc:b2:55:07:
         84:73:32:48:da:30:3f:92:e3:af:c0:82:87:41:28:9d:c2:ee:
         28:80:33:5f:a7:79:47:97:47:04:71:27:26:42:39:5f:76:8b:
         b3:22:e9:f3:36:21:51:50:4c:d1:7d:95:42:c9:23:3a:0e:48:
         da:e2:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:25 2025 by rpki-client