Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
File:                     4875549a-5914-3f98-a0e4-4caa4e08b221.roa (raw, json)
Hash identifier:          NoS33c8UDkl9xdApcanDiMXBkCHC+GY7j3LiM1Y0nyo=
Subject key identifier:   39:5E:88:4E:D7:D3:FF:05:FC:99:21:39:FC:BF:76:EE:CF:EA:46:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A90C3268BD9D9B0FEB33C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.136.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:0c:32:68:bd:9d:9b:0f:eb:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=afc5358a-a6ba-4c64-88fe-b3cf0cb113db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:5d:c1:2f:d7:dd:c2:97:8b:29:d8:3c:9e:
                    b6:1f:ed:7b:09:ee:d3:c1:3d:57:6e:62:32:22:9b:
                    5b:55:77:15:9e:b3:71:c1:2b:0c:04:fc:72:27:99:
                    a8:57:88:dd:e6:4e:0b:b9:c9:05:e0:c9:c9:28:a3:
                    6b:d2:a2:1a:40:66:cd:d9:69:cc:11:83:60:0a:d8:
                    7b:42:d5:78:65:5b:f8:69:e6:48:8f:f6:86:02:70:
                    02:d6:05:7a:e9:2b:e4:5e:45:4d:c4:d8:91:d6:c2:
                    58:36:4f:9c:d1:bb:d6:4f:9b:c8:c4:76:14:ef:76:
                    85:e8:1f:69:70:b5:0c:07:64:4e:0f:56:35:27:5a:
                    68:99:28:af:c8:e3:5f:7e:42:90:b9:78:99:30:7f:
                    76:fa:d3:b3:fb:bf:4b:f2:e2:a9:a5:d8:ad:8a:ac:
                    d1:ce:aa:ae:0b:14:5a:a4:45:f0:24:5c:95:ac:0d:
                    9c:5c:76:10:0b:51:ec:30:10:33:d2:4c:dc:75:94:
                    1e:01:4b:36:40:b5:63:ec:78:74:e7:11:1e:7f:d6:
                    6f:57:cb:1c:33:b3:64:94:56:fc:90:7b:5f:68:77:
                    49:72:b5:9f:62:87:63:68:66:ba:c5:51:1c:80:41:
                    e9:2a:42:04:5a:72:40:58:bd:33:60:e6:89:c9:17:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:88:4E:D7:D3:FF:05:FC:99:21:39:FC:BF:76:EE:CF:EA:46:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:0f:2c:a6:fd:c0:29:ec:8e:62:c9:42:da:4e:9a:19:37:
         6e:bd:23:33:5d:06:2b:c3:16:e1:2b:ff:34:97:b5:ef:b3:95:
         8e:af:86:50:4e:9c:f5:aa:90:bb:92:47:72:3c:48:2e:bd:3b:
         2e:da:ef:b5:e7:c9:5b:1e:41:26:35:0f:5b:f8:c2:1b:a8:86:
         77:13:9c:85:93:7e:8f:f6:a4:e1:ac:a7:91:f5:2b:83:08:e8:
         7b:b3:42:da:84:d7:54:8d:db:b8:59:b8:e8:50:3a:32:d8:6b:
         f2:b4:2e:a9:fd:22:17:d0:1a:4a:f7:f5:29:77:4b:fa:ba:70:
         25:90:14:18:3d:56:ca:25:cb:23:2b:d6:32:98:c1:66:4a:f8:
         93:f1:db:60:30:52:86:df:f3:a4:2b:67:c7:bf:72:a9:de:82:
         72:df:e4:f2:07:56:66:c3:f5:20:6f:20:3f:8b:58:eb:42:65:
         d0:8d:83:73:97:fe:7e:6f:ed:1e:f5:ed:af:a7:31:27:51:1c:
         f3:24:47:92:1d:56:8c:c6:26:e0:5c:00:bf:f4:aa:4c:58:8f:
         7c:e4:c9:ca:bd:e3:dd:04:9d:b0:1c:20:58:fc:fd:db:65:c4:
         ff:8e:4a:78:26:82:28:2f:eb:64:b1:54:fb:9f:f8:08:3d:dd:
         9a:b8:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:05:58 2025 by rpki-client