Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0738f5f-ec8b-3b49-9f68-c1a70480619a.roa
File:                     e0738f5f-ec8b-3b49-9f68-c1a70480619a.roa (raw, json)
Hash identifier:          eg4a7ahIG7xulz2HGy+3YmntRoTVIbQm/Wobpmm6fNE=
Subject key identifier:   18:E7:3D:2C:CE:58:B6:73:59:01:CB:31:3C:4B:10:4D:9F:4A:B9:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC8BF141FD033357161F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0738f5f-ec8b-3b49-9f68-c1a70480619a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     53885
IP address blocks:        107.1.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:8b:f1:41:fd:03:33:57:16:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=04c702d8-cd43-45c0-b007-856b0c624cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:59:97:8a:ff:7b:21:5d:3e:8e:96:02:5b:
                    a1:ba:8e:df:9a:ee:c9:96:41:ab:82:5f:69:4f:72:
                    a8:28:f6:10:2c:57:43:ef:f5:0e:7f:b9:56:b4:b7:
                    26:18:3d:dc:1a:8e:04:e8:cd:a9:5c:66:b7:d2:23:
                    4e:fe:9d:6d:49:3a:2b:ba:55:7c:e1:93:25:99:c3:
                    9d:1e:38:1f:f0:4e:6b:b1:23:f3:ec:18:51:2f:99:
                    18:3d:96:5d:e3:23:5c:ca:97:21:6e:c8:61:eb:be:
                    73:7a:0c:d4:bd:39:c6:27:6b:70:1a:e4:b1:a7:da:
                    23:0a:37:47:5e:bd:a5:4e:bc:44:db:cc:bc:83:87:
                    e4:e6:68:a2:91:94:0e:fa:4a:c2:61:c0:ad:ce:8e:
                    01:fc:e8:db:a5:09:b8:a3:a9:54:c6:cb:ba:06:9d:
                    96:6e:ab:74:cd:ca:7e:54:3d:fd:1c:cc:0c:c2:c7:
                    c1:98:e4:ea:90:b0:e6:54:8c:ba:44:1e:ec:1c:71:
                    a6:e3:f7:87:74:61:57:a0:25:3b:b0:82:e8:ec:9c:
                    b1:8b:65:86:00:39:2c:97:c5:5f:3d:62:26:27:a6:
                    09:ff:c0:4b:fe:7b:80:8b:9d:94:ac:85:e5:05:ed:
                    9c:75:94:c8:ea:3b:34:74:07:60:0c:9b:16:8e:d9:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:3D:2C:CE:58:B6:73:59:01:CB:31:3C:4B:10:4D:9F:4A:B9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0738f5f-ec8b-3b49-9f68-c1a70480619a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.1.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:22:c9:bd:bd:71:16:8b:23:bc:ce:75:a7:d2:83:20:1a:87:
         17:04:04:7d:9e:ea:44:a4:42:57:b0:eb:80:7e:a2:84:38:0a:
         0a:4d:a3:95:4a:00:44:2e:86:40:66:16:db:80:4e:ee:cb:af:
         41:08:75:83:cc:91:fe:8c:b0:eb:ac:ce:fa:31:24:59:47:24:
         2e:a5:b7:2d:66:fd:fe:47:0e:36:8c:4f:2d:a9:09:92:33:78:
         7c:eb:9e:8b:a6:73:3c:20:51:b3:2d:40:c5:13:40:ea:49:8a:
         ab:b3:7c:68:11:d1:fa:a7:eb:4a:8f:03:83:1b:79:85:d6:f2:
         0e:09:9a:24:07:c6:3d:86:58:c9:ab:59:d3:91:58:3a:56:0f:
         d0:75:04:5b:79:be:ec:76:e5:f7:a4:d3:0f:a3:a2:b7:fa:3c:
         f7:85:27:ae:87:9c:5e:aa:fc:8a:22:25:84:1c:6a:5a:ca:25:
         91:9f:80:24:bf:dc:af:61:72:ee:14:f0:77:c5:94:51:95:56:
         4c:10:11:65:d6:ce:b8:96:17:b0:d1:31:c3:1d:ae:9c:b6:4a:
         aa:4b:9e:2b:be:79:06:12:5b:80:41:e0:3f:b7:b1:e9:e0:86:
         c2:c1:ab:5a:52:20:04:f5:69:e1:be:a5:36:12:3a:4b:b8:72:
         6f:2e:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:06:24 2025 by rpki-client