Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6d8f27-c121-3969-8947-d2e9f0f614e2.roa
File:                     9d6d8f27-c121-3969-8947-d2e9f0f614e2.roa (raw, json)
Hash identifier:          hOpJ7LL3qDkGul3Dlz4+JiITh+EY2FTXmnuwYTXmvZY=
Subject key identifier:   75:38:80:5D:B7:B4:2B:E1:B5:6B:33:54:7B:50:48:26:89:E6:1A:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0314E1B12D5AB1B6276DAA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6d8f27-c121-3969-8947-d2e9f0f614e2.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        73.106.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:4e:1b:12:d5:ab:1b:62:76:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e169a9fa-728f-410e-b3e3-3af087c6d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:24:7b:fd:17:25:55:14:d6:0c:e1:8d:ca:
                    ad:75:16:1b:28:d4:99:4e:aa:09:ab:87:0a:84:d8:
                    f0:05:2e:ba:1d:f2:b5:d2:1b:c0:2e:60:3b:62:cf:
                    ac:ec:f3:fc:22:39:a2:db:83:34:e1:ed:c9:8c:b4:
                    ae:f3:84:86:d2:e2:5a:9a:2b:6d:b4:2d:c9:46:47:
                    52:25:ab:ba:2d:57:3e:d7:7c:6d:e6:a3:68:d9:1a:
                    46:f5:de:7e:27:3f:21:05:eb:bc:5a:fa:44:fc:6c:
                    d8:ac:43:1f:7d:65:97:69:41:2c:9c:bd:07:7e:2c:
                    f3:fd:ed:ea:68:12:94:d6:4c:a9:4c:60:9c:95:26:
                    ff:f2:01:cd:a1:06:f2:d3:a9:f5:35:62:fb:0f:6e:
                    fb:b9:5d:82:7c:68:1b:41:ae:b4:b5:36:9a:21:be:
                    2e:7c:55:c8:5e:a0:20:4b:9c:1e:e7:fc:c4:c4:2a:
                    c9:64:6a:dd:aa:43:e7:9b:9e:fa:71:3a:2e:42:97:
                    86:7f:d2:a0:0d:7f:82:7b:50:ad:73:4c:5a:19:e9:
                    1f:36:a8:3c:2f:5d:c5:a7:31:b7:5c:c9:6b:68:63:
                    2e:60:6e:1e:25:dd:a1:40:0f:c0:e8:d8:79:cb:c8:
                    6d:b9:25:3d:0f:b7:ba:67:02:cb:ee:0f:4b:fb:31:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:80:5D:B7:B4:2B:E1:B5:6B:33:54:7B:50:48:26:89:E6:1A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6d8f27-c121-3969-8947-d2e9f0f614e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.106.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cf:af:be:a8:77:7d:df:65:42:c7:04:98:e4:b3:44:27:6c:
         a7:76:6f:be:83:fe:c4:56:a2:f1:8b:be:e8:f3:65:cc:3b:61:
         ad:22:24:80:e7:1a:0e:a0:5c:60:d9:43:7c:3e:bd:fc:27:4c:
         67:cb:bd:f1:3c:9b:83:16:54:0b:8f:b4:ed:9b:89:7f:80:3c:
         47:8a:05:f8:ce:c9:58:8e:b8:9d:94:26:83:2a:8f:27:12:c1:
         b4:43:16:81:bf:88:7b:68:77:8f:a4:2a:ce:be:8a:14:e1:d5:
         d7:a9:5e:00:cb:01:73:23:46:bd:37:dc:6d:43:f9:4f:3e:14:
         00:46:7c:05:6a:05:02:13:52:1e:60:d5:0b:e7:c9:24:67:87:
         33:bb:68:05:bd:e6:d1:bf:99:25:f5:41:4d:a5:85:d4:a6:4f:
         e0:7c:a7:77:51:09:b3:92:61:79:0f:9c:80:e5:8c:45:e4:36:
         7b:7a:74:75:2d:c6:58:34:72:79:41:57:f5:1d:16:f2:f1:c2:
         aa:64:7b:be:0f:cb:de:7d:1a:fb:ec:37:b1:5a:b0:7c:93:e9:
         64:e7:65:90:ff:a7:0d:22:bb:a8:f9:4d:96:59:4e:7e:cf:31:
         23:c0:a7:a2:54:8e:43:11:2b:c4:21:05:f1:bb:c7:d2:1f:77:
         28:8f:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:00 2025 by rpki-client