Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f851a06-b2d1-305c-867e-869d078e232d.roa
File:                     2f851a06-b2d1-305c-867e-869d078e232d.roa (raw, json)
Hash identifier:          HHIptMOMW3GOAVPdWB7P+XU1Zjmt0j8gfpBA7HRWyHk=
Subject key identifier:   71:F3:18:E7:52:5A:7B:69:9D:81:FA:BF:63:FB:D0:76:F8:C1:2B:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9D01E25FFEFFCA1674E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f851a06-b2d1-305c-867e-869d078e232d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.143.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:d0:1e:25:ff:ef:fc:a1:67:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=750232a9-e738-4541-8883-4653dc74a519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:0b:1d:0b:9d:19:5f:ed:54:54:8f:f2:36:
                    2b:46:eb:4c:e5:3a:55:2b:13:8a:d6:b9:96:ee:c3:
                    55:70:ba:59:68:9f:2b:5e:b6:10:a5:a9:79:9a:a4:
                    28:83:63:ae:76:70:cc:8d:57:09:11:3d:be:d8:7d:
                    8f:f2:61:3b:5c:1a:5c:48:70:04:1b:4c:16:e6:83:
                    2c:e4:40:9e:57:67:af:5f:6d:70:f2:34:1c:f9:ac:
                    47:05:5c:85:76:03:1a:13:59:da:1a:07:dd:2a:85:
                    ae:10:7d:2f:a5:3c:16:96:de:58:92:71:cf:6c:e2:
                    0a:ba:c8:ae:15:18:4a:e4:8e:6d:71:2f:5a:07:03:
                    17:16:d0:b9:0e:b8:0f:31:57:35:2b:b4:86:4e:75:
                    db:c2:5f:85:6c:98:35:b9:d7:24:b0:9b:05:d9:a9:
                    39:8e:51:51:59:c1:2d:eb:39:08:bd:a6:aa:39:58:
                    64:af:72:04:31:17:30:e1:3e:ba:77:3c:24:82:85:
                    e5:b7:77:58:a0:0d:e6:dc:c9:5b:6b:fd:0a:ac:b3:
                    24:a7:e2:e9:e4:98:54:57:6c:5f:25:ee:9e:bb:6c:
                    30:ec:39:a9:66:02:dc:a4:cb:49:b0:80:b1:6f:4b:
                    65:27:a0:27:9b:b0:6f:09:7c:15:38:e1:e5:6d:5e:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F3:18:E7:52:5A:7B:69:9D:81:FA:BF:63:FB:D0:76:F8:C1:2B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f851a06-b2d1-305c-867e-869d078e232d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:90:1d:1a:51:50:88:8a:f3:55:41:1b:fd:38:c9:52:79:5e:
         42:c2:f0:da:4c:01:6b:ef:93:47:03:d5:7b:2e:43:f7:2d:c3:
         ed:23:06:17:74:25:36:9d:b7:ba:cf:94:8d:e2:b0:5b:0e:06:
         bc:f4:30:9d:f1:8c:e8:6c:1f:ea:40:e0:e2:7e:a3:1e:2c:1e:
         2a:fc:fa:05:fe:e8:46:63:c0:6a:6d:e8:99:b6:1f:7a:9f:dc:
         2d:a0:18:a9:fc:cb:b8:94:d5:0f:45:3e:93:c1:6f:09:cf:ef:
         8c:db:9f:45:b3:74:26:eb:a2:bd:d0:93:f1:89:0a:f6:6f:d3:
         5d:80:e6:2c:ab:b3:a5:82:c0:d7:dc:cd:d2:35:af:b0:82:df:
         85:50:93:38:10:65:42:e1:90:fd:8e:32:37:70:be:1a:a6:b9:
         fa:72:f0:32:ba:e1:a9:76:e2:89:0f:0a:93:99:c7:d5:dc:35:
         85:88:9e:1a:1d:d9:12:55:49:9a:a8:96:16:bf:74:ee:cb:59:
         c8:8d:fe:f4:25:bf:4f:c6:75:f5:0b:ef:e7:7f:98:c8:63:ff:
         98:b5:31:f2:fe:9e:24:58:79:d9:37:a5:6d:31:a2:b7:02:13:
         1b:48:47:80:27:79:a7:22:8f:45:cd:82:e2:c4:63:f0:b4:06:
         fc:91:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:22:21 2025 by rpki-client