Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f46415c-4ac6-35c1-bd5e-a4dc9103153c.roa
File:                     4f46415c-4ac6-35c1-bd5e-a4dc9103153c.roa (raw, json)
Hash identifier:          qUyadVZexjAR7j8jM7StrT8GLQuPlOs+Uqvi5010jsE=
Subject key identifier:   95:7C:CD:E5:0C:29:B8:8B:E5:74:B9:45:F2:C8:30:C9:A6:92:0C:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA7E8F5CAEAF2119A1B780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f46415c-4ac6-35c1-bd5e-a4dc9103153c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        73.18.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:7e:8f:5c:ae:af:21:19:a1:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0f592b66-155e-4f43-91ee-9a611024affd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:e2:5e:fb:47:b9:b3:a0:62:e5:9b:96:fb:
                    19:a2:4e:9b:d9:23:71:7a:dd:58:7c:91:54:0c:be:
                    2e:b5:17:1b:eb:2f:cc:d5:fe:19:c9:10:d6:62:78:
                    7c:40:14:cd:57:0c:36:b6:41:81:16:df:3d:78:8f:
                    10:43:38:5f:7e:7d:96:61:cf:57:64:44:96:46:02:
                    8b:d7:e7:ee:96:2f:8e:5e:80:35:28:e0:92:3b:af:
                    ba:8c:e5:7c:5c:54:37:ca:4c:7f:19:fc:f8:78:16:
                    17:8b:d1:f7:31:f4:8b:8a:e5:ba:99:67:fa:86:95:
                    25:e2:8a:d4:6b:4a:9d:3d:9d:c3:f0:c9:c9:bb:29:
                    ff:17:06:6c:36:84:03:d9:55:f0:fe:31:b2:c3:75:
                    8c:64:42:11:01:ff:17:1d:52:08:c1:1d:09:94:27:
                    69:b6:87:22:b8:f0:a7:49:c6:fb:d7:75:9e:01:e4:
                    cf:d8:98:95:cc:b6:dd:d3:e4:cd:0e:8a:c2:65:1b:
                    30:b6:7d:a1:10:76:ce:0d:e5:c3:86:38:59:17:3c:
                    15:7d:11:83:4f:bd:20:f0:dc:fd:85:b3:6e:9b:5c:
                    33:4f:e3:f0:98:4d:4c:0a:af:f9:a4:28:7e:00:4e:
                    e0:d0:99:b6:5f:47:f6:ec:5a:60:28:de:46:91:a7:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:CD:E5:0C:29:B8:8B:E5:74:B9:45:F2:C8:30:C9:A6:92:0C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f46415c-4ac6-35c1-bd5e-a4dc9103153c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.18.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:4d:ba:e3:31:f7:7e:48:80:40:4a:42:10:68:b9:d1:15:9a:
         ac:db:b5:d3:84:f7:a2:fb:a2:8b:0a:e9:4e:5d:ae:71:18:d9:
         23:d9:88:6b:1e:e1:74:3c:58:04:fd:bc:4e:af:fe:6c:07:78:
         70:f1:d2:49:1c:bd:74:b5:de:25:00:11:09:25:a2:93:de:5a:
         e9:29:f5:8e:6d:82:3b:01:fe:f0:94:fe:bd:6a:34:01:a7:cf:
         e5:29:83:7f:3d:b2:1b:9e:b5:c3:e1:54:1a:00:fb:32:94:3e:
         05:78:74:1d:d5:3b:47:65:cf:69:5a:96:fc:fe:cc:74:70:b1:
         ee:df:43:d7:ad:9c:4a:68:e0:ae:31:60:3e:c0:6c:c4:6c:f4:
         ff:97:54:aa:ce:85:6d:89:f4:25:60:e9:89:29:22:f8:ad:22:
         ff:2b:9a:44:a3:b1:b1:1f:bc:19:8e:7a:1f:32:26:0f:29:81:
         3f:b1:1e:20:66:bf:c5:2d:7f:a9:10:4c:2d:6e:51:98:e2:34:
         a9:97:92:c0:19:ba:f6:11:76:9f:37:a1:99:32:a8:0d:56:d3:
         10:c6:21:de:14:d3:7a:5d:a4:21:13:4f:8a:82:3a:75:7f:70:
         db:ea:d4:35:d5:e6:d3:78:83:30:5d:c0:81:70:12:f5:34:8c:
         cf:d3:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:20:21 2025 by rpki-client