Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0157c679-f1cb-3df4-9206-950b741d49e2.roa
File:                     0157c679-f1cb-3df4-9206-950b741d49e2.roa (raw, json)
Hash identifier:          bt14FUAGrV3/Ub4IfaeFtQc/WaAAWHfJbwKpn2UWWmc=
Subject key identifier:   0B:9A:F1:17:1C:48:81:DD:58:AC:6F:89:E0:4A:32:03:8B:E3:9E:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8443C56FC965623AF6500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0157c679-f1cb-3df4-9206-950b741d49e2.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.182.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:44:3c:56:fc:96:56:23:af:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=cb7216e8-3e98-4c65-aa49-a601f8f95235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:64:e3:88:2a:0a:33:19:17:9c:0a:fd:ef:
                    bb:15:0d:13:10:e0:bb:1d:d9:0a:da:05:d1:b8:f3:
                    39:f6:41:54:ba:df:4d:cb:24:f7:53:b4:90:88:07:
                    2f:ee:c1:bd:a9:c7:7a:74:d2:93:37:32:e8:d0:9f:
                    df:8d:a3:da:95:4d:ac:0e:4f:52:d6:02:77:4b:ff:
                    43:1f:d8:fa:a6:58:9c:c8:28:dd:ee:f3:e8:9d:41:
                    c2:15:11:b9:c4:0a:77:68:fa:1d:4d:0e:d8:07:7e:
                    c8:22:9f:3a:7b:92:74:20:e3:c3:75:02:73:e3:5e:
                    55:ee:e3:cc:14:fe:f2:83:04:f3:1d:a2:39:7a:2f:
                    9f:f6:74:94:d8:8e:05:df:c0:7b:63:91:c6:08:47:
                    85:10:fd:e9:27:0f:4c:68:7c:45:e5:e4:53:32:4d:
                    c7:f1:28:5e:5f:c5:ae:ba:aa:6f:ba:b4:bf:49:a1:
                    80:73:cd:b1:12:ba:b2:51:7a:5d:6a:b3:e7:3c:1a:
                    c0:b0:d2:97:6b:3f:b3:21:f6:33:0f:15:6b:fe:fc:
                    7f:51:68:d1:40:07:d4:05:7f:d0:aa:02:dd:df:f2:
                    b8:32:a2:73:72:57:4b:5e:f3:72:f8:1d:07:c1:2b:
                    1a:a4:01:6a:52:8a:de:7d:e0:80:5e:43:fa:1b:3a:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:F1:17:1C:48:81:DD:58:AC:6F:89:E0:4A:32:03:8B:E3:9E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0157c679-f1cb-3df4-9206-950b741d49e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.182.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:1c:4c:3a:99:94:11:37:03:21:86:6d:a8:71:2a:65:db:
         8b:f1:31:aa:d8:07:d2:d8:9c:32:c7:39:21:b3:de:64:f2:22:
         bb:46:84:6b:70:cd:cc:b5:c1:0d:33:aa:f2:84:28:a0:a5:6a:
         d6:6c:17:ec:e1:10:52:29:7d:9f:9b:a8:84:c5:b2:73:c2:ac:
         a6:ac:16:5b:97:08:c0:24:82:7e:63:89:d4:4e:60:99:e7:a7:
         cc:24:f5:01:05:2e:67:a6:08:50:ed:e5:08:96:c5:52:43:22:
         4f:a5:95:de:60:f1:f4:42:09:32:47:3a:ef:05:80:fa:82:7e:
         4f:96:6b:6f:02:06:45:70:db:b5:56:00:f7:3f:5f:2a:31:cb:
         88:9d:d6:60:9b:76:f4:06:6d:68:e2:d2:72:2e:09:d9:60:55:
         6e:70:cf:b7:b0:69:3c:8c:aa:01:5a:c2:d9:c4:9e:a1:56:27:
         e7:0b:85:e9:4b:d9:4c:6c:cd:7e:bb:1a:2b:d5:07:b2:36:9c:
         e2:05:6b:34:b3:65:30:f2:13:ba:40:5d:93:c3:03:85:e7:fc:
         17:2b:66:93:54:b7:a7:8b:3c:45:9d:43:30:14:9d:61:de:d6:
         45:8f:80:25:d8:cd:2e:3f:92:36:cf:85:e3:d5:57:4b:d8:8c:
         e1:22:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:48:16 2025 by rpki-client