Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fdf4d35-c491-381f-bf2f-640536840273.roa
File:                     0fdf4d35-c491-381f-bf2f-640536840273.roa (raw, json)
Hash identifier:          Wf9eCAX/No96xvd8QuLx93kIaqfYsce6xI+ntA0h9lo=
Subject key identifier:   C4:F7:DD:5C:63:5B:8B:92:00:E9:FE:BB:9D:75:E9:AC:27:4C:F9:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AABCB2C275DFB5599BC100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fdf4d35-c491-381f-bf2f-640536840273.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.6.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:bc:b2:c2:75:df:b5:59:9b:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=bcfee007-3e12-4ec3-a8ec-02f03e61f5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:72:3d:62:30:fd:35:db:2d:8f:fe:ba:49:
                    20:75:4e:1d:7c:cd:c6:89:f1:4d:36:ff:92:1c:cd:
                    f8:5c:47:45:52:f1:1a:53:fd:fd:7b:d8:8d:d8:d9:
                    7d:12:83:28:f6:3e:b8:cb:30:04:e1:db:48:fc:62:
                    a5:6b:28:9a:99:36:13:6e:bc:e3:7e:33:34:23:24:
                    21:a7:6b:49:8c:7f:25:ee:9d:99:56:67:49:36:58:
                    3d:5b:39:12:a0:a9:8c:06:e6:4a:8b:ef:5e:67:6e:
                    dc:8c:2c:15:15:fd:97:ea:96:3c:4d:d7:d9:b1:f3:
                    11:29:31:5d:43:25:61:81:67:32:44:d0:cc:35:66:
                    76:4d:6b:82:20:fa:b1:df:cb:32:89:f4:e9:1d:55:
                    7a:5a:0c:50:c2:23:34:e6:f9:52:3e:1c:ac:d0:a3:
                    63:11:21:79:f8:cf:d4:ae:4a:3d:66:26:c7:79:d4:
                    d0:8f:71:ed:51:27:4d:e0:27:79:67:6e:1a:8f:0b:
                    65:25:16:9f:96:66:3f:c9:63:b4:21:a7:cf:c0:e4:
                    5e:dc:fd:ab:74:06:34:f2:0a:d5:ad:bf:91:60:83:
                    e9:a2:73:4a:ed:a3:2c:75:8d:d4:a3:8d:3f:b7:f7:
                    d5:a4:6b:d7:63:ff:29:6a:be:6c:68:e1:54:7f:0c:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:DD:5C:63:5B:8B:92:00:E9:FE:BB:9D:75:E9:AC:27:4C:F9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fdf4d35-c491-381f-bf2f-640536840273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:98:40:6c:7e:81:e6:8c:07:70:5a:15:b1:5e:e6:cf:72:
         44:4c:77:5a:0c:bc:57:bc:8f:1c:d0:72:0d:ba:2d:2b:76:d0:
         d4:6a:60:ef:4b:3b:1e:6f:da:4f:e6:3b:23:e9:f7:11:6f:e8:
         ac:95:f6:d4:fa:22:88:82:1a:a7:bc:d4:67:7e:df:9c:15:76:
         2b:09:be:3e:6c:92:24:1f:e7:62:69:65:44:3e:10:ce:69:f2:
         6c:ce:78:44:a0:08:c0:83:8d:f7:32:2f:4d:92:35:bf:97:cd:
         53:d5:a0:93:a1:04:05:c8:b7:3e:84:99:e1:13:33:f2:9b:6f:
         e7:c3:f4:81:0d:33:e4:39:00:01:94:a3:ef:3f:1f:66:d0:be:
         ab:af:16:d8:07:b3:60:d3:ef:b7:a1:aa:f1:d5:93:d2:c9:ef:
         47:63:08:21:87:a4:ec:b6:89:87:db:3b:fb:2e:e7:75:60:48:
         2e:b1:b7:b5:f7:b0:83:a2:7d:7b:94:e0:6d:ce:69:41:61:0b:
         b9:20:69:ba:7c:e0:c1:e3:b8:b3:15:46:33:f3:5e:c3:73:a1:
         b0:10:50:0b:d4:dc:91:76:01:73:bd:03:89:34:96:15:4c:e1:
         77:da:4f:7d:6b:3d:f6:71:c3:ab:14:21:bb:56:df:2f:10:0d:
         ec:24:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:16:45 2025 by rpki-client