Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b92f07-419c-3244-8bcf-800963047601.roa
File:                     75b92f07-419c-3244-8bcf-800963047601.roa (raw, json)
Hash identifier:          6/E9rjAuer3cRzg6pHo2j6IpXzO2hWhOcVdr4JIc7nw=
Subject key identifier:   D9:52:3D:14:C5:EF:2B:71:F4:F1:98:BE:85:A5:E0:D4:4F:C5:CC:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A86E63EEB89ED395E680E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b92f07-419c-3244-8bcf-800963047601.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.61.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:6e:63:ee:b8:9e:d3:95:e6:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=bdc58a00-ac58-4762-9a7b-1a0561b22f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:09:63:94:63:07:8d:c1:68:2e:66:a3:b8:
                    17:dc:5c:ae:03:c4:1a:ac:08:7d:74:49:e9:4b:7b:
                    d7:5a:a2:50:5c:96:1a:47:d7:61:bb:44:fe:87:96:
                    9a:c2:45:d8:2b:8e:fb:d8:a8:3e:d7:83:6d:e9:06:
                    04:15:0f:38:c4:da:49:67:5d:94:e2:3e:c7:ee:b1:
                    3b:6d:8f:dc:36:85:5c:82:ec:1a:31:33:52:f3:16:
                    69:3c:02:3a:9c:cf:96:d8:47:2a:47:97:3e:a9:33:
                    02:48:7b:8b:a3:3f:b7:8c:81:5e:95:6c:af:ee:57:
                    66:e8:b7:73:15:5b:fb:b0:fa:03:d8:d0:bf:03:0a:
                    c9:dd:5c:2b:8c:4f:9b:c4:0d:ae:09:fd:ba:1a:8b:
                    b7:1c:d3:e0:2f:0b:d1:77:52:ba:ea:aa:87:4a:2b:
                    a4:0d:f3:a8:5a:ba:23:a4:6a:7f:15:23:b6:d7:e1:
                    c8:f9:ab:c9:2a:59:05:85:8a:e0:d1:b0:d2:fe:f4:
                    68:52:40:11:30:6e:64:ee:fc:4e:f0:d0:f0:e1:5e:
                    51:0e:7c:c0:7c:fb:d3:c3:17:23:4c:b3:c1:e8:2a:
                    9f:76:df:02:54:48:3c:2b:4e:7e:50:56:8f:79:50:
                    8e:84:1d:c4:29:d5:4e:80:a9:88:f6:44:3b:b9:09:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:3D:14:C5:EF:2B:71:F4:F1:98:BE:85:A5:E0:D4:4F:C5:CC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b92f07-419c-3244-8bcf-800963047601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.61.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:4b:86:1b:bb:90:99:55:38:ba:11:eb:b4:ab:be:46:cc:
         fa:c1:e7:b9:32:33:8c:68:79:73:f3:c2:2f:e7:ea:d4:16:cf:
         b9:9a:d3:5a:20:2e:ee:dc:96:38:4d:c3:89:96:53:5c:7b:36:
         5d:5c:f1:29:19:e2:04:2d:ff:cf:26:f1:bc:f0:fd:86:08:cf:
         2b:8c:ea:4a:4b:20:b5:47:28:c4:98:e6:57:e6:02:7f:31:6a:
         c0:32:8b:f6:cd:77:7d:06:77:62:e0:4e:d4:52:d2:21:58:08:
         f0:1d:78:45:fb:ab:ae:34:0e:d2:88:5f:57:40:e1:68:0d:4e:
         e5:16:32:bb:87:a5:9b:c7:a5:b7:39:2f:ed:f0:a5:be:c1:61:
         a9:37:7b:44:98:f2:3e:46:c2:de:b9:b1:4f:42:81:d5:57:1b:
         51:9b:cf:d1:4a:38:24:73:18:f4:dc:51:bb:96:81:c7:ee:0a:
         ce:ab:b8:cc:76:49:a0:48:e6:7c:d1:df:25:46:75:b7:6b:32:
         d1:11:19:73:68:e5:38:6f:b1:5b:e1:60:44:ee:1a:76:ea:a2:
         a8:f0:9a:99:52:c6:77:1b:9c:e6:79:2f:e0:18:cc:c4:a6:8f:
         31:7e:ca:dc:40:47:27:5e:bd:05:d8:bf:a8:24:d8:57:00:63:
         fd:e1:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:55:15 2025 by rpki-client