Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d660b2-dd5f-38be-b149-61436bc1c3c3.roa
File:                     56d660b2-dd5f-38be-b149-61436bc1c3c3.roa (raw, json)
Hash identifier:          CA7KHIkQOtAiyH8rN9v3LMJsAiWEUD/ucshV1QZN0A0=
Subject key identifier:   26:0B:36:93:A7:F7:38:AB:72:7A:B1:D0:F7:29:45:16:B3:82:95:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A96BB43E2162BC79E18CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d660b2-dd5f-38be-b149-61436bc1c3c3.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.11.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:6b:b4:3e:21:62:bc:79:e1:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ef766e94-772e-4a07-9462-efb4670022e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6e:14:f0:f4:12:a1:48:e5:85:a9:aa:4f:8b:
                    29:a8:52:5c:b8:62:d9:02:97:17:3d:76:e8:18:8a:
                    78:e9:75:9b:ec:b9:98:3e:f7:1e:6c:51:94:4e:b4:
                    83:2d:53:21:05:8b:74:28:9c:52:e8:d2:ca:1f:53:
                    92:2e:56:ff:f7:aa:f3:8c:84:32:7e:e3:0f:43:fe:
                    f7:a4:05:c6:7a:c0:78:d0:fa:e5:32:04:90:99:96:
                    fc:e4:b4:f5:91:e9:65:a0:cb:86:55:e4:82:e3:8e:
                    26:65:24:85:e7:3f:9e:de:1f:32:b0:6a:e9:09:25:
                    d1:00:1d:84:5c:da:89:5a:b6:b7:0b:f7:1a:89:7c:
                    5d:42:0b:b3:f6:5c:26:d1:90:1c:03:ef:e7:0e:7f:
                    62:29:84:3f:cf:fe:bf:15:29:8e:a1:eb:5c:d8:c8:
                    6b:fd:6c:e6:fe:0a:25:6a:d6:cc:31:13:6e:9c:13:
                    c0:51:d0:d0:fa:99:e0:89:69:b8:84:89:3f:e2:47:
                    e5:a5:8f:68:b1:75:be:b0:63:7a:4e:ac:90:47:94:
                    3a:2b:09:6b:cc:8d:1c:c7:e2:a0:bb:d2:0a:0e:f7:
                    74:4b:0c:de:17:f3:55:67:38:00:00:50:c6:b5:9b:
                    ab:32:b6:50:2d:e5:ab:ef:45:fc:6e:b9:33:a2:8b:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0B:36:93:A7:F7:38:AB:72:7A:B1:D0:F7:29:45:16:B3:82:95:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d660b2-dd5f-38be-b149-61436bc1c3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.11.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:70:da:6c:fb:cf:ac:4e:9e:6d:10:74:b0:87:95:a6:b6:
         16:a7:11:eb:c6:0d:19:0c:20:c6:e3:d4:98:79:85:48:a3:cf:
         04:2c:20:00:7a:3a:79:8f:ed:32:31:61:51:13:c2:c7:72:48:
         da:f2:c0:67:bd:99:f5:fb:15:d4:aa:a6:a5:df:6d:ba:8a:51:
         3b:32:3f:b3:b9:56:93:dd:7b:ad:5a:bc:47:73:2f:48:a0:e5:
         0d:53:31:48:e8:fc:b6:da:fa:f8:20:9f:48:ab:44:92:01:81:
         68:ef:c5:d2:38:3b:18:17:28:5b:e8:fa:31:b4:72:19:3c:49:
         39:20:4a:54:ed:aa:a2:66:44:81:6f:3d:86:f5:8b:5b:d7:94:
         93:5f:5d:f2:8e:34:98:a9:7d:6f:d4:33:cf:17:e1:50:cb:32:
         26:bb:0f:5e:c2:e5:02:f0:80:7e:2d:e0:33:d3:78:a4:bf:42:
         4a:ab:50:69:31:ba:eb:b9:32:8e:c2:14:89:c2:54:16:8c:45:
         a5:af:24:76:81:e9:76:e4:89:25:9b:a7:a7:d8:fd:4f:bf:ae:
         8a:e6:f5:ff:10:72:c2:19:3a:27:ba:0d:44:d4:4a:37:4f:21:
         0b:47:38:7c:3d:3c:47:a9:15:b0:17:0c:59:36:3f:84:1f:b0:
         89:0b:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:48:54 2025 by rpki-client