Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f773e79-0d80-36a9-b421-0fa8b7755b2c.roa
File:                     5f773e79-0d80-36a9-b421-0fa8b7755b2c.roa (raw, json)
Hash identifier:          8uVwDkUkiMmlmRevEy3PXQcLGEz3BuWljvf9DEcYTRo=
Subject key identifier:   CB:D9:AE:28:F2:BE:F1:B2:61:B5:F4:D6:FB:BC:0E:78:F0:0B:1E:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7DA96F17761E273E21100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f773e79-0d80-36a9-b421-0fa8b7755b2c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.96.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:da:96:f1:77:61:e2:73:e2:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=3ff7d008-2252-45dc-a621-fec9dd80441d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:ec:c4:f5:0b:49:14:ea:06:46:04:08:7a:
                    d7:4e:da:b5:53:ea:2d:3b:37:68:64:a0:d3:eb:51:
                    a2:6f:f1:08:ca:bc:e7:79:4b:e4:be:88:3e:76:ad:
                    c9:ff:6d:63:f0:c3:68:39:40:d7:e0:33:4f:15:18:
                    ca:19:ae:f4:d3:96:e5:00:8e:92:82:73:ce:bc:bf:
                    56:41:4f:3f:2a:e1:3c:6e:eb:ed:b1:d5:fc:c7:27:
                    21:4b:57:f0:47:0b:d1:54:e5:b8:a8:5b:1e:ee:14:
                    44:8e:89:85:de:92:52:98:23:20:5b:8f:84:59:5c:
                    ae:79:89:4d:c5:87:4c:e5:12:93:38:6c:f8:33:25:
                    16:4b:81:9d:6a:8f:6d:42:dc:8d:42:a6:47:2a:f3:
                    93:bb:a1:e6:97:ba:92:c1:d2:d2:53:08:d1:a0:6d:
                    72:ae:63:40:b4:7c:06:08:2b:d6:88:8b:56:78:5d:
                    bf:40:86:5c:9a:50:54:7e:9c:d3:7b:f2:f8:a8:8a:
                    1e:44:32:a9:85:46:e9:df:72:a8:d7:ea:a5:5c:b9:
                    fc:5f:7c:8e:10:50:52:64:0a:0a:da:76:ef:f9:8b:
                    24:ce:49:57:45:8b:39:b7:e6:fe:20:0c:7e:14:77:
                    25:44:b5:bb:67:fc:ad:91:de:05:cf:b0:ce:ce:45:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:AE:28:F2:BE:F1:B2:61:B5:F4:D6:FB:BC:0E:78:F0:0B:1E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f773e79-0d80-36a9-b421-0fa8b7755b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:6e:4c:21:75:91:2a:4a:e8:83:9a:dc:f3:f1:9a:35:b9:
         21:88:4e:29:4b:4b:18:aa:08:78:39:10:6e:2a:3e:79:93:17:
         12:9d:de:7b:9c:fb:52:52:27:5e:88:90:47:13:ff:c9:08:31:
         e7:37:e0:00:f4:9c:1f:b8:80:5e:5f:e5:9e:63:5c:32:b0:3e:
         7d:22:d1:74:dc:76:95:ba:bb:1f:d2:df:80:26:2c:6f:4a:f3:
         18:43:0a:f5:e6:a1:47:6b:0e:d8:ca:a2:31:21:c9:4a:05:a4:
         ce:98:70:98:6e:c3:53:d7:6a:f9:80:eb:21:27:66:e1:9e:34:
         7c:5a:a5:fc:8f:ce:04:3d:d7:75:d1:f2:8e:c7:df:f6:27:64:
         91:b8:f2:f7:55:f8:f3:fb:95:aa:1a:b9:34:dc:be:e0:0c:24:
         fc:3f:e5:7a:11:e0:41:1f:df:77:b3:89:d3:01:3b:d4:ad:50:
         d5:d1:de:94:59:75:b7:17:92:89:7d:e8:54:0e:87:2c:8f:55:
         75:b4:be:a0:f4:a1:75:6d:34:36:7d:22:09:60:96:e4:26:b3:
         2b:56:28:f2:68:2c:65:21:0a:02:bc:31:da:d2:be:d0:ad:61:
         cf:2b:21:a5:4c:ee:d1:3e:a2:05:06:19:24:36:3d:7d:fa:2b:
         5b:10:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:45:14 2025 by rpki-client