Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad12de93-b438-3daa-8e64-2dbdda05398e.roa
File:                     ad12de93-b438-3daa-8e64-2dbdda05398e.roa (raw, json)
Hash identifier:          eSC5QTgLypAImu5jDwJ4Ugf7GHGsEZhihAd0UhbS7NU=
Subject key identifier:   39:79:DE:99:DA:7F:B5:87:7F:9E:C6:A7:0F:75:5D:77:6F:8B:B3:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8174FB0DB06B02053C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad12de93-b438-3daa-8e64-2dbdda05398e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        71.192.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:17:4f:b0:db:06:b0:20:53:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=1ed0f579-c4eb-48b9-87e2-fcb2491c0db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:f4:ad:4d:87:cf:ca:a9:b0:4c:00:83:aa:
                    24:3d:90:66:ea:1d:ce:65:eb:34:f1:1a:12:a2:2e:
                    94:71:37:49:76:43:cd:5a:20:ee:95:78:48:17:21:
                    e6:fa:1a:34:d5:71:be:f4:3a:d4:4f:29:c1:6c:a7:
                    66:3e:08:73:b5:db:54:de:f7:70:12:27:43:70:5a:
                    d1:7d:62:fe:e6:e2:33:e6:47:cf:3e:03:6a:d9:24:
                    06:06:83:48:74:e7:0b:fa:e5:fc:3d:81:4e:ee:c6:
                    51:91:59:6e:51:85:a1:ea:39:b7:86:58:7c:de:3c:
                    5b:d2:a8:a2:14:58:a9:9c:20:bb:e2:56:29:f2:33:
                    3a:fa:a7:f7:a2:7a:28:1d:07:f9:27:fd:4e:8a:60:
                    ee:5a:1f:d5:7a:34:08:15:a5:a4:48:72:95:9b:24:
                    50:1b:7c:77:66:72:54:0f:c1:ce:e6:e4:20:a3:2a:
                    e8:03:a9:5a:a0:69:84:98:87:99:32:b1:69:29:92:
                    95:6e:7a:07:09:f1:33:9d:eb:c1:e9:e2:80:b8:b5:
                    de:65:36:d2:31:01:46:35:b1:19:ad:70:4c:e6:0c:
                    75:0c:aa:41:c8:e0:43:e3:c5:7f:60:16:31:c2:d7:
                    8b:b5:21:14:2a:57:85:a2:02:d6:5a:88:fc:83:7b:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:DE:99:DA:7F:B5:87:7F:9E:C6:A7:0F:75:5D:77:6F:8B:B3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad12de93-b438-3daa-8e64-2dbdda05398e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.192.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9c:31:cf:43:68:b9:86:12:19:3d:d8:2d:74:d5:53:8b:6c:
         bb:39:1c:bb:65:3a:66:e9:76:b9:b3:51:f8:96:3f:e2:84:01:
         a8:4c:25:9f:55:6e:1f:90:17:12:e4:f5:56:63:a3:c3:1c:65:
         d2:b8:ff:8c:9b:88:47:70:2c:dd:10:99:52:47:a7:d2:82:b4:
         0a:a6:5c:58:f7:35:2c:f9:94:fd:f4:65:a4:46:de:0c:8a:3f:
         62:f3:b0:ce:01:21:49:43:56:88:05:a0:1f:5a:0a:62:da:79:
         c7:c6:ba:05:d0:a8:37:e9:95:f4:28:92:51:e1:16:9e:12:3d:
         4d:70:3a:dd:6d:86:e9:76:ae:37:c8:a2:49:d0:4d:90:c8:e5:
         57:f8:ef:46:a7:f1:67:20:7b:5c:7c:21:df:90:e8:99:18:f2:
         41:6d:13:f0:33:2f:d0:e3:50:f4:1e:ed:a2:fa:81:a8:10:c7:
         9e:88:57:86:1b:1d:7e:d2:4d:2d:33:c5:10:36:54:31:61:9b:
         e1:c6:b3:55:5f:f0:4b:d4:49:49:1a:ca:61:31:0c:b8:d9:a3:
         34:29:fe:8f:81:c0:cc:66:8c:e7:49:d9:be:42:65:20:1d:6a:
         a3:eb:b7:72:2f:f4:1a:20:86:a7:a6:71:60:45:cc:70:53:74:
         9c:ef:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:30:48 2025 by rpki-client