Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eba5eac-35b3-3e12-99ff-f13a3e79234a.roa
File:                     6eba5eac-35b3-3e12-99ff-f13a3e79234a.roa (raw, json)
Hash identifier:          OBIXs8Xm1FEfbAiC9z8WVm/dSSjMkhItkArXJJFEQj0=
Subject key identifier:   F2:7B:3E:0D:15:96:62:23:92:A9:55:D7:84:4C:E0:BF:7E:70:2F:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A96F18B9FEF64EE31FD800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eba5eac-35b3-3e12-99ff-f13a3e79234a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.11.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:6f:18:b9:fe:f6:4e:e3:1f:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=dda6e643-fd21-438b-aece-c12eb8a27693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:d9:1b:01:99:df:c1:3e:e1:9c:a7:c6:4e:
                    64:e5:1b:89:2f:9e:f1:2a:94:33:37:ef:94:4c:72:
                    91:4c:b2:d4:94:9f:6a:50:89:36:ff:0f:43:a4:d1:
                    18:70:06:81:c1:6b:4c:97:5a:bc:9d:8f:90:f9:34:
                    6a:9f:0e:91:3c:6a:1e:85:49:87:47:0c:e8:7d:ab:
                    34:0d:27:ca:23:25:4c:8a:e1:54:60:5d:e3:77:17:
                    e6:b4:85:0d:98:eb:5b:36:bc:ee:81:1a:b2:1d:45:
                    6a:c2:1a:53:70:e4:9e:d8:35:be:e2:2d:2f:79:cf:
                    6a:7f:83:35:51:d1:8b:e1:3b:e6:84:6e:07:a7:75:
                    95:06:59:8b:52:c6:dd:3c:0c:c3:db:1c:29:80:2f:
                    f8:35:fa:5d:ee:ed:00:94:0c:92:ff:ca:5f:52:91:
                    c2:5d:c8:e5:dc:56:56:a7:b5:f1:d8:eb:03:e2:d1:
                    5a:1e:f3:dc:f3:5d:d1:74:11:f9:b4:d5:d0:48:9e:
                    52:ec:5c:e5:f5:ec:bb:e7:43:77:5f:78:d3:ca:32:
                    b8:56:4d:6a:8f:7f:8c:04:1b:e5:13:83:34:ac:d0:
                    49:65:3c:61:4c:41:34:3c:5d:09:32:ea:77:d7:2b:
                    9d:7d:63:0c:a6:bf:1a:0e:a5:bc:28:13:ac:7c:25:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:3E:0D:15:96:62:23:92:A9:55:D7:84:4C:E0:BF:7E:70:2F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eba5eac-35b3-3e12-99ff-f13a3e79234a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.11.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:93:d9:49:a1:19:95:9a:1e:d5:f3:72:25:18:62:5c:b2:b0:
         da:56:20:08:9e:98:c7:1d:cf:9d:7d:45:fe:c8:b7:23:ae:da:
         41:4e:53:d8:8e:94:c9:c9:41:6d:fc:cd:63:c6:4b:56:94:e6:
         3e:1a:26:1f:d7:49:42:0d:88:56:d2:d0:8e:b1:33:0b:a3:4c:
         64:3b:b6:4f:b8:e7:41:1f:47:ab:3c:d6:dd:32:de:e1:03:f9:
         0c:80:94:46:ff:60:63:6b:fd:c5:86:5a:8a:00:92:84:5a:a5:
         38:4e:3b:52:bb:2a:1a:1c:be:93:22:f5:94:f8:8e:eb:f1:18:
         a4:15:e9:8e:eb:b0:fa:06:5d:e0:b3:07:97:86:15:de:d5:89:
         c6:7d:b9:f9:f0:fc:99:53:38:0d:1e:ca:96:95:cd:b9:e3:df:
         a3:bf:8a:23:29:dc:94:fc:bd:18:8f:54:82:8b:16:8e:c1:53:
         f3:f9:3a:ab:bc:2c:db:be:9a:fe:46:a1:bb:6d:9b:4f:22:38:
         14:20:b1:19:c6:97:1d:53:99:35:0d:8e:53:b3:25:e5:50:f9:
         21:3e:b8:41:e1:db:fc:a4:9d:f6:ff:ee:51:65:06:2e:e7:da:
         a9:57:9c:c7:19:e2:33:19:3c:29:1a:b7:b0:6f:29:50:b2:cc:
         88:05:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:53:47 2025 by rpki-client