Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7076d4e7-e49e-3404-a333-137f89fa81b4.roa
File:                     7076d4e7-e49e-3404-a333-137f89fa81b4.roa (raw, json)
Hash identifier:          HaDEZUMqtlQkODWLAUy83/TCOrfaTianMFiAvg6Dfd4=
Subject key identifier:   86:34:3B:A2:02:B3:92:99:47:54:A5:E5:8D:5B:FA:1C:FB:0E:D7:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8DFD19B44375315843E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7076d4e7-e49e-3404-a333-137f89fa81b4.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        73.145.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:df:d1:9b:44:37:53:15:84:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=894c3b65-c83f-4077-a91a-0c39aa3fe296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:f2:f0:2a:fc:80:f4:6a:3a:53:b9:27:9f:
                    72:0b:ea:a5:ae:d4:9d:46:c6:a2:20:db:20:0d:ea:
                    0e:df:a1:42:a1:71:56:c7:5d:58:ff:ad:14:40:bf:
                    ea:96:fb:cf:bf:23:cd:07:80:b4:ed:4e:df:4d:d8:
                    fe:63:e8:19:7e:8a:d0:b6:f6:dc:6e:89:fd:7f:17:
                    18:e1:1b:33:e9:09:5b:81:a5:30:06:64:a0:8a:ce:
                    a8:61:16:04:71:3d:f5:b7:06:98:46:b9:f4:56:c1:
                    9f:c0:27:b7:bb:e5:e5:aa:9e:dd:f7:d5:2e:18:33:
                    2e:91:4a:89:99:47:69:b2:d5:7d:7b:12:85:9c:b5:
                    c8:a8:ef:55:eb:e7:05:37:75:a0:89:c5:3c:d9:b9:
                    e3:38:34:48:bb:af:ad:78:46:c6:af:2b:3a:e4:77:
                    fe:47:b1:fa:1d:d0:da:ec:11:49:63:47:29:b6:a8:
                    38:5f:c8:38:4e:56:9a:21:52:79:52:b7:7c:de:d2:
                    23:48:c6:ec:cd:5f:13:e1:0b:23:fd:b5:b6:e7:27:
                    a7:b5:2f:03:d4:bd:9e:b6:3a:aa:0b:4e:af:7f:6f:
                    9e:40:71:44:d3:47:a1:3f:94:3e:4f:16:35:0f:86:
                    e8:0d:bb:06:31:30:6d:de:91:d4:c4:cb:62:73:fe:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:3B:A2:02:B3:92:99:47:54:A5:E5:8D:5B:FA:1C:FB:0E:D7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7076d4e7-e49e-3404-a333-137f89fa81b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.145.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:e9:9a:27:77:be:7a:b3:b6:e7:4d:b9:8e:d7:3b:b2:4a:
         db:96:d0:87:96:9b:d9:75:b0:28:22:70:eb:b5:b3:f5:ab:07:
         8f:2f:50:68:f9:8f:6b:b8:da:a9:ae:6b:c8:44:f3:5f:5b:0f:
         57:5b:c8:2d:2d:b6:f4:19:8d:1d:c8:69:81:35:29:03:7a:b7:
         bb:22:73:40:1b:18:a4:d0:da:df:50:e3:e2:31:78:39:eb:61:
         4a:1e:4c:49:1b:da:a4:da:96:20:98:28:53:73:73:6d:ff:b6:
         67:da:38:c5:6d:16:4f:c9:4f:c4:37:00:27:6e:8f:fd:a6:9e:
         e8:1b:b4:2b:32:ea:11:e0:14:53:f5:06:20:0a:7e:61:7c:b8:
         14:0a:81:26:21:24:4a:eb:6f:fa:d2:6d:34:d7:be:af:d3:12:
         77:ec:c5:b1:28:87:7e:4b:b6:31:a6:d1:c8:97:bd:15:03:80:
         23:70:1a:ea:6a:5c:02:8a:72:49:91:a6:f4:48:d1:1b:40:9b:
         95:60:17:59:9f:d6:85:09:c7:cd:5d:9d:d2:09:2d:b2:93:85:
         32:e9:6c:51:16:44:cc:f9:44:05:56:57:2e:f5:06:6e:b7:14:
         b2:bd:e2:32:b4:c0:f1:1d:3b:2d:67:68:a6:47:d1:69:52:91:
         5f:d6:42:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqN/Rm0Q3UxWEPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ODk0YzNiNjUtYzgzZi00MDc3LWE5MWEtMGMzOWFhM2ZlMjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRLy8Cr8gPRqOlO5J59yC+qlrtSdRsaiINsg
DeoO36FCoXFWx11Y/60UQL/qlvvPvyPNB4C07U7fTdj+Y+gZforQtvbcbon9fxcY
4Rsz6QlbgaUwBmSgis6oYRYEcT31twaYRrn0VsGfwCe3u+Xlqp7d99UuGDMukUqJ
mUdpstV9exKFnLXIqO9V6+cFN3WgicU82bnjODRIu6+teEbGrys65Hf+R7H6HdDa
7BFJY0cptqg4X8g4TlaaIVJ5Urd83tIjSMbszV8T4Qsj/bW25yentS8D1L2etjqq
C06vf2+eQHFE00ehP5Q+TxY1D4boDbsGMTBt3pHUxMtic/59dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY0O6ICs5KZR1Sl5Y1b+hz7DteQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzA3NmQ0ZTctZTQ5ZS0z
NDA0LWEzMzMtMTM3Zjg5ZmE4MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZFGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPY6Zond756s7bnTbmO1zuyStuW0IeWm9l1sCgicOu1s/WrB48vUGj5
j2u42qmua8hE819bD1dbyC0ttvQZjR3IaYE1KQN6t7sic0AbGKTQ2t9Q4+IxeDnr
YUoeTEkb2qTaliCYKFNzc23/tmfaOMVtFk/JT8Q3ACduj/2mnugbtCsy6hHgFFP1
BiAKfmF8uBQKgSYhJErrb/rSbTTXvq/TEnfsxbEoh35LtjGm0ciXvRUDgCNwGupq
XAKKckmRpvRI0RtAm5VgF1mf1oUJx81dndIJLbKThTLpbFEWRMz5RAVWVy71Bm63
FLK94jK0wPEdOy1naKZH0WlSkV/WQnY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:17:25 2025 by rpki-client