Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4706e93e-5395-3154-aec4-d2c634da354d.roa
File:                     4706e93e-5395-3154-aec4-d2c634da354d.roa (raw, json)
Hash identifier:          cOocKBbbrefJs0U8TMD11h/m8pPul7CKKhJTL0Ookso=
Subject key identifier:   43:E6:67:E3:93:B7:2D:65:F7:39:B6:1A:CE:4E:D4:B4:A5:92:24:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAC8114FB7D751D17A0040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4706e93e-5395-3154-aec4-d2c634da354d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.77.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:c8:11:4f:b7:d7:51:d1:7a:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=454316c1-f298-4e59-95ba-3ab6020c3417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:aa:80:5c:fb:ed:35:cd:2b:9c:1d:c5:8e:
                    30:c4:57:0e:9a:cf:21:9e:03:a6:00:32:0d:fd:6e:
                    4d:c8:87:4b:f2:7b:74:a4:d3:eb:fb:32:e6:b5:6d:
                    9f:1e:ce:fc:93:06:fd:af:3a:cb:57:db:69:7f:8e:
                    6c:3e:7b:95:5c:6f:4f:b9:41:4d:77:be:c0:35:08:
                    06:c4:75:f7:0a:1a:fc:ea:a3:e7:0c:aa:c0:d2:4e:
                    5f:06:93:0e:8c:e1:7b:23:e3:f0:94:6a:5e:a5:cf:
                    05:36:d0:27:94:d7:24:b4:1c:79:89:f6:b3:cd:ec:
                    0f:25:41:f9:27:8c:90:8d:13:ea:62:a3:ab:71:d5:
                    d6:af:d2:c4:c5:89:0e:1e:21:60:68:11:97:5a:75:
                    a6:33:dd:00:0b:47:29:84:ce:1b:40:20:3c:4c:19:
                    01:38:d9:ad:69:bb:d0:06:26:b4:6a:7b:ef:8d:49:
                    66:9b:02:24:44:9b:90:24:c0:ee:22:c4:a8:bc:d2:
                    27:ac:3e:ed:a4:9f:b6:70:6b:66:49:44:50:d6:b7:
                    9d:cb:66:5e:16:6c:64:42:07:b9:61:ce:f6:71:68:
                    08:cd:29:ac:16:7b:5b:7e:75:34:82:6d:10:14:57:
                    0c:69:2c:d1:e1:5e:9f:d9:66:24:32:1b:a6:29:a1:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:67:E3:93:B7:2D:65:F7:39:B6:1A:CE:4E:D4:B4:A5:92:24:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4706e93e-5395-3154-aec4-d2c634da354d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:8e:af:4a:3e:54:35:20:9b:7b:99:23:c9:36:0e:5e:8b:
         44:07:fc:e5:79:91:d4:0b:04:59:97:88:bd:1d:b2:7c:a7:ba:
         4b:bc:ff:75:20:41:45:81:f9:d5:9b:0d:ed:c4:f4:67:22:a5:
         a9:1b:38:ae:38:16:3c:5f:cd:e5:f8:74:d1:fe:11:ac:99:ab:
         d0:ab:83:ea:da:3b:5b:e5:67:bd:da:68:c2:c1:e0:92:a6:f9:
         19:ea:e4:fe:1f:62:bb:bc:fa:24:4f:f6:60:19:94:9b:41:4d:
         2d:98:cf:e2:07:24:b9:4d:83:32:88:cd:05:a4:6e:40:ba:cd:
         c0:af:af:fa:aa:f6:67:88:e0:d9:71:9e:a7:00:06:5f:e5:b2:
         e7:5d:ad:8b:90:41:5e:d2:fe:fb:60:3d:37:69:d1:ed:fb:d6:
         4b:f4:76:b3:07:db:af:66:89:91:1f:16:0a:19:4f:a4:35:79:
         65:9c:73:a5:87:8e:9a:34:93:3f:b6:b3:3f:21:0b:30:96:63:
         32:15:0f:5d:4a:22:a7:93:0e:99:7b:05:04:94:06:77:dd:ad:
         c9:c8:7a:3c:b8:98:16:38:10:cf:f0:8d:81:d9:0d:ed:9c:eb:
         06:25:af:e1:c7:5f:d8:98:b4:37:71:02:c9:b3:7e:88:4b:63:
         f6:5c:49:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqsgRT7fXUdF6AEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NDU0MzE2YzEtZjI5OC00ZTU5LTk1YmEtM2FiNjAyMGMzNDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIiqgFz77TXNK5wdxY4wxFcOms8hngOmADIN
/W5NyIdL8nt0pNPr+zLmtW2fHs78kwb9rzrLV9tpf45sPnuVXG9PuUFNd77ANQgG
xHX3Chr86qPnDKrA0k5fBpMOjOF7I+PwlGpepc8FNtAnlNcktBx5ifazzewPJUH5
J4yQjRPqYqOrcdXWr9LExYkOHiFgaBGXWnWmM90AC0cphM4bQCA8TBkBONmtabvQ
Bia0anvvjUlmmwIkRJuQJMDuIsSovNInrD7tpJ+2cGtmSURQ1redy2ZeFmxkQge5
Yc72cWgIzSmsFntbfnU0gm0QFFcMaSzR4V6f2WYkMhumKaGqjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPmZ+OTty1l9zm2Gs5O1LSlkiSsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDcwNmU5M2UtNTM5NS0z
MTU0LWFlYzQtZDJjNjM0ZGEzNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSU1KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjrjq9KPlQ1IJt7mSPJNg5ei0QH/OV5kdQLBFmXiL0dsnynuku8/3Ug
QUWB+dWbDe3E9GcipakbOK44FjxfzeX4dNH+EayZq9Crg+raO1vlZ73aaMLB4JKm
+Rnq5P4fYru8+iRP9mAZlJtBTS2Yz+IHJLlNgzKIzQWkbkC6zcCvr/qq9meI4Nlx
nqcABl/lsuddrYuQQV7S/vtgPTdp0e371kv0drMH269miZEfFgoZT6Q1eWWcc6WH
jpo0kz+2sz8hCzCWYzIVD11KIqeTDpl7BQSUBnfdrcnIejy4mBY4EM/wjYHZDe2c
6wYlr+HHX9iYtDdxAsmzfohLY/ZcSYI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:27:55 2025 by rpki-client