Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa
File:                     3fd232c8-b5ed-3a39-8546-1596f217baa4.roa (raw, json)
Hash identifier:          AjkvRiFbSZArvW0IM8dVlP/AV0LUp8+B8FJi4Onv9PY=
Subject key identifier:   F4:B1:70:31:0E:B3:E1:0A:38:DE:FF:22:8A:DD:31:78:6A:97:A1:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A83B0BA5611F434B094300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.167.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:3b:0b:a5:61:1f:43:4b:09:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=802129ed-df62-4fda-a02d-abc617b9212e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:06:f3:37:b9:ba:a8:81:ce:1e:59:d2:d2:
                    f2:6a:ef:17:93:75:f8:43:c8:5f:72:0c:52:0c:12:
                    9d:bf:4d:a9:7a:fa:92:d0:0a:cc:a4:f3:86:18:90:
                    60:45:4f:db:6c:67:ed:af:e1:0b:7c:be:8c:98:c7:
                    91:a8:35:80:17:ab:67:61:cd:6d:30:fb:53:e0:e5:
                    68:90:a2:7e:77:22:04:18:44:c7:bf:39:12:73:68:
                    f0:19:61:7a:14:a4:6e:2e:68:3f:c1:ad:15:e1:f1:
                    6e:7e:e6:49:fc:82:5f:20:5c:00:e3:fa:f7:ad:78:
                    2c:6d:55:26:09:bb:22:28:69:65:a3:88:51:48:10:
                    13:39:b3:15:af:81:70:27:63:fa:61:59:08:07:05:
                    8c:aa:66:27:da:5c:e8:03:fb:01:42:18:df:e4:f2:
                    0a:53:ce:70:41:84:dd:fd:2b:26:12:9a:47:90:3f:
                    f1:30:5e:c1:69:48:42:d2:48:78:92:b3:93:18:f0:
                    f1:eb:fb:70:6a:61:08:a8:bb:9b:2e:b5:b8:31:38:
                    62:da:0c:1c:47:7b:30:97:77:c1:41:b8:e8:87:7a:
                    ce:ad:20:6f:57:cc:85:2a:f0:17:cb:64:cf:4c:d7:
                    09:65:38:07:5c:ce:d5:c4:e0:e2:ab:79:6f:65:77:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:70:31:0E:B3:E1:0A:38:DE:FF:22:8A:DD:31:78:6A:97:A1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd232c8-b5ed-3a39-8546-1596f217baa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:b1:11:55:70:35:d7:7b:b1:bd:f5:6c:9a:75:89:40:b4:
         7a:c9:c4:9a:18:13:51:41:95:e4:66:bb:68:00:0d:75:45:cd:
         8e:84:00:61:f7:3f:79:b6:ce:1f:c5:0c:98:d1:45:3f:f3:a7:
         d1:37:c4:fa:17:85:dd:e1:06:e8:45:56:98:a1:d3:f8:d2:cd:
         4d:9f:8e:92:3c:7c:f8:f0:48:4b:de:33:64:e9:21:08:13:f0:
         8e:6a:c2:20:25:f6:32:0b:4a:8c:42:7e:cb:b6:f8:f5:8a:f2:
         81:e1:6f:5b:02:ab:8b:68:21:21:b2:76:ca:c0:cb:bd:c0:01:
         0e:85:a1:29:7b:86:0e:0d:73:09:97:ac:01:ff:30:07:e5:8b:
         a2:3f:23:62:0f:8a:57:c2:17:6a:15:d2:1c:2e:26:e9:fb:15:
         2d:2c:a5:46:c5:ec:0c:30:ca:db:1a:2e:17:a8:69:4a:19:d7:
         c4:de:95:e5:28:56:93:7b:5e:e0:f5:5b:86:51:08:51:d9:ac:
         16:1f:25:86:31:49:de:51:16:d1:60:ad:6f:65:73:5f:07:a0:
         55:ef:c8:50:dc:90:69:ad:bc:c1:35:90:7b:8f:4c:6e:03:5b:
         61:b8:f1:8c:82:77:a1:3c:2d:f7:0a:36:0d:29:f5:55:eb:a5:
         e2:99:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:48:20 2025 by rpki-client