Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4321a197-f69c-3bb0-b316-9d0d977fe403.roa
File:                     4321a197-f69c-3bb0-b316-9d0d977fe403.roa (raw, json)
Hash identifier:          8viKPhCiohxuuNxMyKg+tSobxCgRgIvRH2Gim9v3vnk=
Subject key identifier:   E4:76:A4:0A:21:B6:EE:73:1B:30:FB:81:3B:B6:71:63:57:70:DB:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9FEC7EDF22B8FC250A4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4321a197-f69c-3bb0-b316-9d0d977fe403.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:fe:c7:ed:f2:2b:8f:c2:50:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ec99f65c-a14d-43ad-9100-cddae11b3d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:eb:1f:69:7b:5b:17:12:7a:bf:49:b7:da:
                    57:3b:e0:23:c3:c3:30:9a:f3:d9:c0:0e:14:c5:fe:
                    93:bd:d2:81:79:af:75:b4:3e:68:9c:23:99:02:59:
                    41:d5:76:24:f7:9a:10:3f:78:59:63:39:a9:86:f1:
                    1f:00:84:79:f1:eb:67:ff:d6:1b:af:67:ac:aa:1e:
                    83:b5:f6:b1:ef:84:03:4c:7f:e8:55:9b:6c:2b:ba:
                    50:5d:32:32:63:01:d5:03:c8:4f:e4:f6:fd:43:91:
                    ac:31:69:0a:b2:75:d5:c7:2a:24:3d:c8:ff:30:e6:
                    3e:a5:be:9d:bd:b4:16:a6:44:62:71:ef:e4:de:f3:
                    d8:dc:03:b5:e8:81:03:7f:a6:65:07:ce:9e:30:39:
                    77:e4:cb:a6:7b:c5:bf:7c:9e:27:60:be:00:0f:fe:
                    e4:36:b4:39:89:f4:68:48:b1:d6:99:74:31:26:9c:
                    35:75:53:96:1f:90:b4:ea:bc:12:d7:37:65:ca:26:
                    63:43:58:db:3a:af:77:58:dd:c7:ef:c7:39:ea:6f:
                    cf:3f:0a:14:3c:16:0c:9a:0f:dc:57:66:f4:ff:ad:
                    e4:a5:87:63:02:56:56:ec:d0:47:29:e8:09:4e:b7:
                    2a:55:55:85:84:d0:1b:86:54:77:d4:b8:3c:83:f4:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:A4:0A:21:B6:EE:73:1B:30:FB:81:3B:B6:71:63:57:70:DB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4321a197-f69c-3bb0-b316-9d0d977fe403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:b5:2d:ee:10:9c:32:6b:68:78:c6:4a:c8:6c:42:5c:68:
         3e:6c:07:cd:b4:f9:30:d1:6f:91:47:d2:86:62:34:5a:c0:22:
         0d:50:24:53:74:b2:c2:d4:69:33:ba:55:f8:5a:4e:91:0f:b5:
         ed:97:b3:6c:63:bd:32:2c:b7:49:41:cf:88:e2:7c:70:c1:5f:
         94:05:67:80:aa:22:40:87:97:cd:a4:1d:c1:48:5b:c6:93:64:
         78:b7:ea:36:9f:04:86:66:f0:ec:c0:88:40:f7:85:8a:d7:88:
         d7:9b:c4:54:88:b2:f1:87:7f:9e:f6:2f:c9:00:cc:3d:f5:8b:
         e5:52:63:97:b1:57:10:9c:a7:73:bf:dd:63:f3:33:8c:c1:ce:
         c9:e0:db:e8:ad:fd:b1:cb:0c:5c:7b:4a:38:6e:bc:76:40:d4:
         73:e3:b1:5f:e3:04:bc:11:99:77:a5:b7:fd:31:e0:23:87:60:
         49:8e:51:fc:fb:35:68:52:cd:7e:5d:02:5e:11:e4:1c:36:d8:
         0b:18:b7:ec:3c:5e:ad:31:be:a5:f2:a5:23:1b:55:86:84:c3:
         32:53:3e:7d:3d:cb:c8:17:46:0a:b5:b4:cf:3c:24:3b:56:a3:
         38:3e:70:bf:a3:a2:7f:9c:b4:bb:35:19:d3:89:66:7b:e9:5e:
         4a:99:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:33:18 2025 by rpki-client