Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fb010ed-d35b-3d86-bf7e-cf403912f32b.roa
File:                     9fb010ed-d35b-3d86-bf7e-cf403912f32b.roa (raw, json)
Hash identifier:          X3tiaV45FNnJ7/FnWQvi2fMV/Igx+deJPhwLdkBwbHk=
Subject key identifier:   E9:5D:90:BC:23:D9:BD:74:0A:45:EE:7E:F9:F8:7E:87:F9:4E:44:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221646B799D5765DAD68D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fb010ed-d35b-3d86-bf7e-cf403912f32b.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     13367
IP address blocks:        75.72.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:64:6b:79:9d:57:65:da:d6:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a51d8f8a-8a81-489b-ab4a-0b09783ad067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:27:84:20:02:82:a2:24:ad:06:0d:ef:62:
                    20:e6:8f:97:f8:9e:fa:19:32:65:e6:f1:48:85:c6:
                    67:12:b8:38:28:d8:c7:eb:f4:05:ba:05:a9:7d:fb:
                    62:bb:99:70:d4:34:46:ee:58:5f:82:3b:7a:9f:c2:
                    6b:58:8c:52:23:e5:2c:6e:34:8f:22:d5:eb:8f:fd:
                    88:6a:a3:cb:65:58:11:3f:9a:24:50:a5:d9:65:33:
                    a6:13:9d:58:61:f5:cb:8a:93:a3:6f:31:b1:81:c3:
                    18:8a:4a:e2:04:30:cb:36:b4:21:f7:b9:80:a1:1c:
                    09:14:82:7a:b6:b3:e2:90:38:9d:d0:cd:7c:00:80:
                    d2:b8:98:5c:a2:97:cf:fa:f3:b0:24:6a:8c:5a:49:
                    83:57:a0:71:dc:ec:42:0a:56:c9:cf:c6:5e:33:6b:
                    eb:75:57:81:a3:e7:9c:b8:e9:ff:a0:84:37:93:de:
                    70:8a:87:37:72:90:dd:59:e0:e1:ba:a0:8a:aa:57:
                    cd:6b:2c:6b:cf:90:27:2f:db:64:a0:c4:7c:67:48:
                    cc:9d:43:73:b8:e2:43:77:1c:e7:b1:05:80:33:0c:
                    3f:e4:3d:45:00:bd:f9:8f:49:19:17:db:96:90:9a:
                    45:0e:a2:8e:b7:d4:64:4f:0a:db:e8:54:53:10:23:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5D:90:BC:23:D9:BD:74:0A:45:EE:7E:F9:F8:7E:87:F9:4E:44:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fb010ed-d35b-3d86-bf7e-cf403912f32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:59:9a:94:a6:05:e1:87:19:5f:a4:92:d8:7b:e2:55:5c:
         1e:81:5f:39:da:f8:5d:57:40:14:63:47:61:c2:8c:e8:d6:e2:
         43:cf:7b:39:5c:8b:3a:88:6d:68:02:22:8c:33:ea:c6:2c:91:
         66:67:e4:85:ae:24:7c:07:2f:fb:a8:6f:a6:6c:50:4f:72:58:
         24:6e:53:ec:21:1d:1a:53:ce:7b:fd:6b:21:cc:6e:0c:41:84:
         7f:4b:e0:4e:cd:fc:df:8d:1c:50:f2:e0:e0:aa:c9:0f:49:eb:
         d2:05:48:55:5a:84:86:13:4f:1f:3f:e6:18:7e:f1:cc:5a:52:
         af:e5:63:56:ed:cd:55:26:ac:e9:62:9e:76:6f:26:21:21:5e:
         4d:1c:fe:34:ba:93:39:ea:ee:7b:64:33:18:56:d8:19:f9:50:
         cc:1f:be:fc:c8:54:29:cd:08:d2:af:dc:50:c9:8f:f8:5c:96:
         a1:07:c6:58:db:b8:c6:30:a5:e2:6a:aa:1d:45:80:ba:27:08:
         54:b6:6b:cb:a8:5d:89:0a:36:8c:8d:20:a6:9c:42:31:49:f7:
         e7:30:0a:5d:2a:49:37:d5:6e:36:e1:50:ad:57:10:41:8f:73:
         e9:a8:7a:c1:20:96:ab:08:4d:ff:e3:81:42:dd:b5:ae:17:37:
         f2:c1:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:06 2025 by rpki-client