Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c4c4593-ddf5-3ce1-8483-bed5b3242029.roa
File:                     9c4c4593-ddf5-3ce1-8483-bed5b3242029.roa (raw, json)
Hash identifier:          LVognKt+fL9ux+0oiOWx3hHOKnuuYdEO1nf6BaJBi/A=
Subject key identifier:   21:BB:E1:43:33:EE:21:FF:3F:62:15:00:B1:97:C9:B8:97:40:6E:E7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A3CF390AD433B4FAB122C80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c4c4593-ddf5-3ce1-8483-bed5b3242029.roa
Signing time:             Mon 23 Jun 2025 19:53:23 +0000
ROA not before:           Mon 23 Jun 2025 19:53:23 +0000
ROA not after:            Sun 21 Sep 2025 19:53:23 +0000
asID:                     20001
IP address blocks:        72.14.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:3c:f3:90:ad:43:3b:4f:ab:12:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 19:53:23 2025 GMT
            Not After : Sep 21 19:53:23 2025 GMT
        Subject: CN=4d7ddab4-a070-4986-b984-ba5f48ef9bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:a8:4b:b0:c8:2c:0e:1f:16:47:d3:25:6f:
                    39:aa:f2:af:d0:a5:fe:78:81:16:b2:e5:bb:65:0f:
                    4e:9e:35:1b:39:df:81:07:e5:23:55:c1:d8:57:18:
                    28:28:51:99:3d:36:37:1b:82:73:86:26:fc:8e:6b:
                    fd:38:d6:3b:b4:35:6e:0d:7a:62:f6:49:3f:42:bb:
                    01:fd:8f:bc:2e:f6:49:55:69:87:3a:8d:1f:c5:4a:
                    05:36:7a:b8:4a:98:63:05:d9:29:c1:95:7b:24:2f:
                    35:31:b9:92:63:93:0d:df:82:7d:f7:bd:3c:a8:42:
                    80:ed:50:29:07:59:78:1b:54:65:77:75:82:b7:2e:
                    0f:73:49:0b:79:a4:9f:39:7e:71:01:3b:11:e7:d1:
                    f1:b2:ec:3d:5f:66:6b:75:80:32:0d:a2:0d:99:9d:
                    af:fe:8e:ce:5b:f9:67:38:a1:fc:99:53:db:21:14:
                    52:06:d0:81:7f:c3:91:f4:de:80:c1:d9:ff:0e:0c:
                    57:61:e8:87:08:03:f7:4b:f7:77:ab:7a:c1:1d:b7:
                    58:ff:f7:81:9a:00:58:fa:ff:a4:68:fd:7e:08:b9:
                    e3:e6:d2:c5:69:83:f6:fd:e2:47:6c:e4:6f:53:94:
                    8e:b3:31:51:60:a4:b8:d7:cb:75:0d:bd:1d:17:d6:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:E1:43:33:EE:21:FF:3F:62:15:00:B1:97:C9:B8:97:40:6E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c4c4593-ddf5-3ce1-8483-bed5b3242029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:b3:cf:ad:ab:37:a0:c8:ca:8e:05:fc:42:c0:e6:ee:e6:
         26:e6:cc:df:48:35:26:14:f9:94:e2:2a:ac:74:cc:94:5a:46:
         ce:ac:3c:7a:49:24:1a:d5:66:40:b8:61:20:fa:0f:4b:9d:28:
         44:26:99:ae:3d:3b:ee:29:76:1e:d4:bd:40:01:ff:ad:3b:06:
         b1:3e:d7:b9:b5:d5:2a:3f:56:1e:25:e2:a2:ad:52:39:98:d6:
         59:29:b3:92:04:9d:04:eb:6f:b0:ae:8a:be:3a:28:7c:ee:3a:
         b4:ae:d8:31:65:e6:d4:b9:4a:57:35:a6:cb:2d:c8:9d:70:0c:
         46:43:dd:18:fc:1e:06:b7:a9:bc:6f:b1:b4:3f:64:03:d8:5d:
         da:0f:00:4b:41:74:2e:d0:a5:bf:4e:c7:6f:73:03:5f:3b:b4:
         f3:46:b9:b6:89:fc:76:5f:95:d2:19:4f:0a:ac:96:d7:d7:bf:
         0a:d2:5a:41:29:07:13:e9:9c:b7:ce:19:05:3a:c3:90:b1:bd:
         c4:34:bd:60:b8:ce:42:d6:db:ae:85:6a:25:1c:69:eb:a0:b2:
         3c:5d:b0:ef:c9:f7:04:a2:c8:34:8f:ef:70:ee:70:2e:95:ce:
         64:b3:0e:6b:ef:5e:c5:37:b3:a1:66:03:56:a9:0d:05:a7:5e:
         28:a8:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:13:30 2025 by rpki-client