Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5782129d-4f30-3f14-a221-7d1ff6200902.roa
File:                     5782129d-4f30-3f14-a221-7d1ff6200902.roa (raw, json)
Hash identifier:          n107QwPjhO5qCosyrBh9It+nbieL/0ukG4wh3hAbjHo=
Subject key identifier:   EF:86:9E:98:39:FC:F6:FE:19:14:26:02:31:F8:03:53:12:D5:5D:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A84D34281AD816F20A7200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5782129d-4f30-3f14-a221-7d1ff6200902.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.218.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:4d:34:28:1a:d8:16:f2:0a:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b4fcf155-f221-4947-a18f-2ddf735decf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:54:4b:47:26:ef:5e:33:c5:34:43:8f:98:
                    f0:e1:27:c3:8e:c9:3c:e7:84:42:a0:b3:8c:4b:44:
                    02:e0:8b:0d:cf:a5:ea:55:c9:14:37:72:2f:71:94:
                    b2:d7:80:7d:dc:13:31:1d:78:f0:53:eb:bb:06:ce:
                    d0:91:37:a8:2b:6c:87:df:88:6a:69:0a:45:6e:6b:
                    51:e1:8a:85:c8:a0:34:a6:b3:0b:7f:35:e1:d0:f4:
                    d4:7e:77:fc:64:23:f8:e0:cf:63:3b:c7:c4:72:78:
                    e4:f7:7a:53:64:10:51:3d:53:ba:e0:7a:da:1a:ac:
                    92:ff:4a:0b:65:d8:0b:82:da:3f:c7:d5:e6:72:f5:
                    da:5d:39:54:5a:32:88:19:c3:87:51:a3:17:87:c8:
                    37:20:9c:d8:0a:70:aa:35:a2:7d:8f:e3:cc:27:46:
                    6c:9d:7c:51:e0:c5:cb:ac:76:b6:9b:10:97:f6:17:
                    78:83:09:9d:e5:1d:66:10:4f:68:8d:e0:ff:9a:8c:
                    3f:b8:9d:ce:6c:07:4f:66:83:ec:26:3d:a3:e4:3d:
                    61:ce:20:78:c6:d5:7f:b6:b2:71:c9:51:b2:9a:21:
                    57:a1:74:aa:67:07:1a:72:10:c8:e0:c0:61:a1:86:
                    81:ad:a2:99:10:e0:47:be:84:ba:b2:95:6b:e6:eb:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:86:9E:98:39:FC:F6:FE:19:14:26:02:31:F8:03:53:12:D5:5D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5782129d-4f30-3f14-a221-7d1ff6200902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.218.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:56:63:bf:f6:94:74:e2:f3:1f:78:71:77:7c:be:ca:57:
         36:79:f1:ca:a5:f4:ca:5a:48:27:dc:d8:df:bc:1d:58:6b:58:
         c5:2f:0c:28:37:b2:72:93:82:ab:8f:f9:5b:dc:0c:20:e3:89:
         de:52:04:c3:64:bd:f5:17:7e:dc:81:0c:9e:db:58:4c:de:38:
         0a:f3:79:87:4b:c5:8f:eb:51:59:91:73:26:b3:3f:c2:5f:ae:
         f4:f3:58:b6:6e:1d:eb:ca:1e:35:a0:05:d5:24:d3:bb:35:0a:
         e4:38:48:ea:1a:1a:26:51:01:89:10:66:3e:11:a3:e9:7e:e7:
         25:f7:01:0f:21:77:3c:7c:a6:51:d8:bc:b5:af:fd:e9:3a:c5:
         2d:97:e4:46:0a:24:35:ef:e9:ad:c5:08:f4:77:e6:65:70:61:
         ca:81:2a:91:03:39:63:2b:3a:6b:22:f6:bd:1e:f3:88:a6:c4:
         19:c4:92:88:9b:8f:5c:d9:cd:86:8b:33:6f:91:5d:a8:14:5b:
         18:ba:ec:48:4c:2c:4c:68:11:37:ff:6a:ab:1a:8f:97:70:58:
         37:3b:0d:72:6e:19:29:f6:e8:15:9b:ec:6b:43:79:0b:93:1f:
         20:83:9f:ce:34:87:e4:ae:8f:22:86:a6:f7:13:a6:d3:b0:b4:
         fa:b8:9a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:39:42 2025 by rpki-client