Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b7b753d-bbd2-3c11-b105-1e2a541f9976.roa
File:                     7b7b753d-bbd2-3c11-b105-1e2a541f9976.roa (raw, json)
Hash identifier:          FLCRnCNYliAc2yBDvJgnLZpEL9c9qjq0wXWkPMuO8FE=
Subject key identifier:   0E:D2:4D:BE:57:CF:4A:84:F5:16:00:F6:5C:35:0A:42:F7:BA:DE:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03154522DFCB871BF2AA100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b7b753d-bbd2-3c11-b105-1e2a541f9976.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.137.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:54:52:2d:fc:b8:71:bf:2a:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=3b696904-c4a6-4832-be00-23fd88284e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:74:bc:b9:14:48:b7:e7:ec:83:7a:3a:44:
                    54:ba:c9:93:37:f3:29:25:1a:7c:f6:e9:26:76:1a:
                    d5:11:d6:35:a5:87:0a:c8:10:e3:00:30:cf:c4:d3:
                    bd:8c:b2:32:9d:1e:af:82:dc:bc:13:7b:88:a2:4c:
                    79:9f:e9:82:2b:a5:7f:31:b5:b4:c8:ac:45:a1:97:
                    51:95:0e:9a:2e:fa:ee:03:dd:68:23:44:dc:6c:ff:
                    1a:c4:d0:c0:c4:f8:24:cd:e9:e8:76:c6:ff:2b:88:
                    c0:d5:6d:74:f1:99:c4:e0:a8:16:c6:28:94:b1:ba:
                    f5:5d:30:37:2d:e2:3e:18:1b:8b:5c:85:6c:39:67:
                    44:c5:59:f0:21:1f:2e:06:d5:97:30:ef:18:aa:63:
                    47:65:60:90:da:ee:87:cf:65:75:b4:6f:09:5a:7c:
                    6e:de:54:a5:12:4f:e3:0b:29:2e:dd:b0:0a:36:f6:
                    38:c2:b7:47:e3:33:a0:82:68:27:ad:20:04:c0:07:
                    84:0d:4b:22:86:35:b4:28:f2:dc:7a:2e:e4:49:68:
                    51:9f:e6:c7:24:f0:fa:7b:f0:7e:62:a8:80:a6:e9:
                    8b:4d:0f:59:ce:d7:6c:0f:92:9c:15:28:ba:e5:84:
                    71:51:ce:a8:d8:3e:e7:95:0a:97:a7:85:d0:67:48:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:4D:BE:57:CF:4A:84:F5:16:00:F6:5C:35:0A:42:F7:BA:DE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b7b753d-bbd2-3c11-b105-1e2a541f9976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:13:cd:27:e2:39:96:b6:88:b4:ce:86:14:94:f1:55:f8:
         8b:df:82:e1:b7:20:26:bc:0d:c9:36:a2:87:45:b5:9b:64:ff:
         91:9a:ec:97:3c:f7:42:d1:bf:78:17:ab:d2:4d:4a:24:03:5d:
         15:44:92:ef:fc:cc:3a:fd:24:c4:98:5e:dd:3b:9b:4c:af:fe:
         9f:66:44:45:53:62:de:b9:cf:77:29:4d:bb:81:74:51:5f:61:
         54:ce:f2:d9:e2:5b:ae:8e:3d:57:a2:47:58:98:bf:2e:03:89:
         8b:df:a1:d2:9d:70:75:70:9c:61:d6:11:51:35:5d:a8:1d:0c:
         51:f9:fa:8f:ed:a7:b2:d0:db:ca:45:02:8d:40:35:85:03:d1:
         7f:25:46:b1:25:d9:55:06:50:14:d9:6c:2d:cf:a1:b7:f4:49:
         19:63:07:eb:63:32:1b:cb:66:cc:27:98:bc:57:6f:a0:e5:9e:
         3b:c1:00:04:4f:b0:91:46:e7:34:d9:7e:55:1d:93:a0:17:23:
         29:74:b8:a6:28:85:7a:b4:75:42:9d:54:5e:b5:cd:1b:5b:59:
         70:c3:01:d8:4d:1a:65:a2:4d:f5:b5:c7:3e:e3:bc:50:79:b1:
         e7:62:11:da:81:f0:08:54:d7:59:b6:6f:30:8d:0f:61:6b:d4:
         fe:19:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:12:08 2025 by rpki-client