Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/914e9e54-cad0-3027-9640-c87f54ddee6f.roa
File:                     914e9e54-cad0-3027-9640-c87f54ddee6f.roa (raw, json)
Hash identifier:          d+wxx9PZAhTdU0fSlg88f9VYPa1mv2L0VP/RYM94gw8=
Subject key identifier:   0B:57:79:FA:14:DC:4E:ED:75:63:E5:67:8F:3F:ED:D8:5C:FB:A6:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031E0E12DD5C45F033D932A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/914e9e54-cad0-3027-9640-c87f54ddee6f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.54.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:e0:e1:2d:d5:c4:5f:03:3d:93:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=ea2fb15e-b755-4c84-aac7-ba0a2ed4b563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:4b:03:2a:5d:96:63:96:6d:64:bd:2c:73:
                    71:23:ca:74:e4:d3:f8:65:f2:0a:24:a2:cf:4f:8c:
                    5e:6a:a0:20:13:b6:fb:b5:7d:a5:b8:83:81:a2:a7:
                    4c:f2:ec:5c:64:82:c6:8e:72:c0:79:a4:b1:b4:fe:
                    2f:c3:b0:0c:fb:38:9f:85:65:89:12:59:f1:b8:45:
                    5c:b9:8f:ac:05:3c:29:12:6d:52:5f:77:68:27:93:
                    58:b9:49:22:2e:45:67:97:cf:b9:b0:80:21:bc:c9:
                    4a:d8:cd:e6:3a:86:bd:36:f2:17:59:cd:7c:e6:d4:
                    26:35:8d:06:50:17:7e:32:05:24:4c:6b:6b:5c:00:
                    31:c4:c7:cc:b6:6c:11:36:0d:77:8e:e7:a7:e8:54:
                    ab:fd:98:0f:02:8b:ab:b5:a7:37:45:bf:8a:97:28:
                    fd:06:bb:4f:a3:d0:58:28:7b:d1:a9:92:6c:a8:6f:
                    36:5e:39:45:b0:3d:b7:5e:13:ea:7a:3b:b3:da:ee:
                    b7:6f:ef:45:5c:a0:df:ed:59:b5:36:db:0f:c1:a2:
                    39:fb:eb:c1:f8:e5:3f:6b:91:38:e4:54:a1:3c:d3:
                    ec:af:11:93:a4:34:ea:16:76:b7:5a:2e:5d:d3:78:
                    28:a6:c4:ac:e2:ae:38:a0:f5:c7:ca:44:b0:75:e1:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:79:FA:14:DC:4E:ED:75:63:E5:67:8F:3F:ED:D8:5C:FB:A6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/914e9e54-cad0-3027-9640-c87f54ddee6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.54.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:44:15:4c:9c:a9:32:c7:1b:50:2c:18:0e:13:65:9b:69:
         68:e5:c7:af:4c:f5:9e:80:06:ec:a8:c8:87:19:42:8a:9d:a1:
         14:19:e4:bd:96:43:31:d8:95:6d:0e:88:a6:7b:4d:fa:3a:47:
         da:64:72:7b:f7:d3:dc:9f:8f:d0:61:6e:31:e2:55:34:15:d9:
         f9:9d:28:4d:f3:ee:2d:8f:8f:f0:d9:1d:1e:f0:2e:0c:b6:63:
         cc:99:bc:c8:4b:d1:84:26:c6:f0:d8:d6:e9:bb:73:92:80:c9:
         c0:a7:48:f4:db:be:f3:86:33:f6:b7:30:89:53:e6:65:ea:92:
         3a:71:d4:c3:30:65:c9:b0:80:64:0d:62:03:15:ad:d9:7c:f9:
         8e:0c:0c:ea:46:d7:44:9a:13:c4:38:2a:8f:c0:cc:e2:68:64:
         10:ec:30:ad:da:61:11:ee:4a:97:7c:1f:46:6b:2d:c6:e5:67:
         50:be:a1:8c:08:e5:4f:d4:cd:30:13:57:cf:32:a4:32:99:55:
         79:2f:4c:2f:77:93:b2:1e:52:20:48:dc:55:e7:76:cb:c3:94:
         42:ba:f0:fb:e7:db:0d:bf:ec:8f:d6:c5:ad:1f:0e:92:b2:08:
         83:d8:8c:3e:9f:f7:ba:1d:f9:cf:c9:de:86:1e:d6:d8:d7:bc:
         7f:ed:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:19:53 2025 by rpki-client