Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00bb23b5-be90-3351-a1fc-d8654d2ff529.roa
File:                     00bb23b5-be90-3351-a1fc-d8654d2ff529.roa (raw, json)
Hash identifier:          MBaMu6b/yZ0xagglTJroW75vGSu4JbaBieauu5sAEP4=
Subject key identifier:   1F:69:45:CB:9B:E6:A5:56:37:AD:05:06:21:4D:CA:1A:D1:59:0B:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AABE391B425E7388E96280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00bb23b5-be90-3351-a1fc-d8654d2ff529.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.6.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:be:39:1b:42:5e:73:88:e9:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d6e0fbb4-602f-4b7e-94cb-8ff7dd03c6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:ed:c3:8f:cd:12:f6:db:29:e3:de:83:92:
                    3e:f8:3a:be:00:76:80:14:63:6d:9b:45:fc:f0:2e:
                    67:3b:cc:da:43:eb:48:69:8e:7f:e9:f3:3a:56:86:
                    16:b9:1e:a6:51:30:7f:cc:a1:ce:68:33:7c:d8:af:
                    0b:d8:70:10:c6:fd:62:77:46:35:37:fc:d3:05:0a:
                    d8:5b:d1:4a:8c:5a:c3:6b:bb:35:09:59:37:48:50:
                    ea:fa:12:72:7c:11:47:73:44:fb:63:be:3e:7c:89:
                    0f:1b:d2:36:d1:cb:09:82:4d:b7:fe:24:5e:1a:80:
                    a3:10:09:94:03:18:12:d9:99:93:0d:bb:fd:0e:ba:
                    11:fb:5e:30:7b:a2:e0:f2:2e:d8:02:ac:94:4b:7d:
                    03:5c:4e:dc:37:b0:60:93:33:f4:ff:a9:58:3c:db:
                    9b:93:8f:d9:e8:c0:99:0f:ec:b1:f4:78:f1:f2:e7:
                    b2:5b:98:17:ff:63:a3:09:e7:ac:a0:a3:82:72:7a:
                    1e:66:45:78:58:ed:3d:72:6c:f8:08:8c:fd:c0:5d:
                    2f:55:30:83:57:16:82:46:0d:3b:8f:90:00:8a:63:
                    6d:30:ed:8f:96:4e:ea:8d:31:73:2d:fc:d4:a4:2a:
                    45:a6:ac:57:99:0e:b8:54:99:c7:48:26:b5:ee:c5:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:45:CB:9B:E6:A5:56:37:AD:05:06:21:4D:CA:1A:D1:59:0B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00bb23b5-be90-3351-a1fc-d8654d2ff529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:ba:8b:3e:97:64:28:09:f7:24:d3:c5:60:b3:5f:69:ff:
         1d:df:86:6b:a9:6d:79:e4:bc:b5:8a:7c:c1:6c:49:8c:27:42:
         dc:ef:53:a7:e9:d2:11:5e:76:10:34:d9:9a:a9:e0:dd:82:9f:
         b4:c7:a1:76:13:2a:d8:23:7c:f0:ff:e7:41:03:9b:83:07:61:
         aa:c2:ea:73:29:0f:3e:77:4b:d6:0e:fb:8f:23:24:72:28:ab:
         8e:80:cb:37:64:9a:16:2c:80:c3:a5:12:d5:c3:3e:a1:aa:e5:
         2f:7a:5b:bf:47:aa:57:c1:9d:b2:80:1f:af:5d:2a:af:d4:18:
         ac:7d:7c:ce:fb:85:75:9f:ff:ad:84:1a:c9:da:38:61:c1:0e:
         91:0e:5d:38:64:14:a1:37:bc:00:d7:d1:50:80:19:97:0a:60:
         eb:76:d0:6b:6b:44:9d:18:cc:2c:62:22:22:1a:2c:03:dd:53:
         36:f0:2f:92:8d:2e:83:07:3d:94:07:23:ea:48:e4:45:79:ce:
         62:a6:d7:1c:95:88:f9:74:4d:69:69:42:64:71:e3:4f:48:1f:
         6d:11:7b:ef:c7:0d:8d:e5:13:7b:fd:4f:d2:94:fe:51:9e:bb:
         a0:a7:21:ad:b2:13:c2:15:e5:2c:ad:eb:da:da:45:a6:af:0f:
         ce:ad:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:47:35 2025 by rpki-client