Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b956d49-ab60-327a-a280-403cd5ad096f.roa
File:                     6b956d49-ab60-327a-a280-403cd5ad096f.roa (raw, json)
Hash identifier:          OP+gLbh90b9kRYk5URPH98G8iEO2ad5viEhyEtF4Pd8=
Subject key identifier:   02:5A:4A:A7:7C:91:1A:FA:97:51:CE:A6:14:F0:8E:BA:0D:92:89:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144F051183FBFADF8095340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b956d49-ab60-327a-a280-403cd5ad096f.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        73.7.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:f0:51:18:3f:bf:ad:f8:09:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=da6e4511-6dac-4bec-bf69-c13478ed6581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:d8:21:8c:44:4d:07:02:72:cd:f4:d4:19:
                    33:14:af:bb:ed:f1:07:ce:7f:71:04:22:4a:eb:4c:
                    9f:02:c2:d6:c4:0f:b1:87:6a:00:e1:08:6d:c8:42:
                    2b:11:e5:18:d2:b6:d2:2d:ec:3a:90:f7:d2:ad:d1:
                    55:58:08:60:f4:9b:e1:2f:6b:7d:c1:a5:0c:e2:b5:
                    30:8e:fa:28:57:31:8f:19:9a:0b:3f:20:ae:5b:61:
                    c6:e0:af:25:c0:64:7e:99:1e:dc:1f:18:c0:f3:18:
                    da:8e:b1:08:73:ce:24:17:b7:fc:b9:f2:69:bd:ee:
                    ba:f8:29:cc:5e:79:a4:f4:d2:89:96:99:a4:90:5b:
                    9c:bc:df:56:a6:07:62:0a:3e:21:45:eb:0e:3f:ac:
                    09:f6:93:aa:97:d0:11:ed:b5:31:9d:54:3e:d5:58:
                    2b:b8:49:2c:96:52:bd:e6:a8:18:72:52:47:f8:c3:
                    3d:44:98:c8:5f:8a:62:d0:0d:ae:d0:31:e5:0a:ed:
                    05:ba:ed:ad:e9:04:39:cb:29:8f:83:3b:e5:0c:50:
                    08:2e:56:3e:15:d8:61:ae:5c:e8:55:d2:25:76:e8:
                    f8:c4:df:27:2d:5d:f3:7d:15:4b:08:b9:43:ab:35:
                    f2:42:e3:84:3e:5b:a9:d0:bf:4b:3b:69:bc:4b:5b:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:4A:A7:7C:91:1A:FA:97:51:CE:A6:14:F0:8E:BA:0D:92:89:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b956d49-ab60-327a-a280-403cd5ad096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:a0:02:b5:70:cb:da:ae:84:c2:63:fe:85:fe:6c:b2:d4:
         78:c8:05:02:c9:dc:29:3a:a4:ef:18:d1:87:a1:fa:87:ff:69:
         dc:fc:6a:41:d4:d1:cc:ed:53:09:13:25:47:88:12:41:4d:b2:
         99:17:e7:ef:bb:62:3b:cc:f4:8a:d9:62:a8:97:bd:f7:42:f4:
         57:b2:dd:9c:14:60:a4:43:90:2f:67:ed:1f:a2:7b:8c:59:73:
         a7:1b:89:e1:79:52:5c:f6:fd:2f:46:84:b3:09:6c:88:83:a5:
         e6:87:87:5a:e0:55:50:b2:a1:53:76:f0:9e:0d:88:b4:74:10:
         85:0d:22:ee:22:90:9a:b0:eb:86:d9:df:df:1b:0c:68:13:27:
         cd:44:18:bb:c7:eb:50:58:82:cb:73:c7:9d:3e:7f:51:b0:22:
         99:aa:f0:0b:86:2e:c9:74:30:19:48:f1:96:0b:1f:ac:4f:49:
         5a:b5:b9:78:97:7e:42:eb:45:5a:61:55:b3:f6:64:bf:3a:6e:
         5f:35:5a:64:21:21:38:e5:37:98:62:ad:af:5f:49:a1:0f:7d:
         67:32:19:d2:68:a7:e0:29:7d:a4:ef:d5:b2:93:f4:29:39:cd:
         e8:0a:6e:3f:5f:36:27:68:8e:22:8a:41:f7:74:db:87:a6:50:
         94:2c:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:35:44 2026 by rpki-client