Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed899c6-0e97-329b-b0fc-efe031424983.roa
File:                     7ed899c6-0e97-329b-b0fc-efe031424983.roa (raw, json)
Hash identifier:          aTuf6/MAQH4fOk7dhgV7HPdQa6/ShPB+pWP/7HtTmb8=
Subject key identifier:   F3:79:F1:2E:20:A3:1A:0C:38:3D:F5:00:CA:EC:F0:2F:6E:00:EF:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9D2BC35A7CA12084FB700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed899c6-0e97-329b-b0fc-efe031424983.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.143.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:d2:bc:35:a7:ca:12:08:4f:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=f685183c-e82d-44f0-ad80-2446d9bacbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:a4:a6:f9:78:90:7d:10:d3:2d:86:80:41:
                    c8:01:d3:65:c6:5f:d8:df:5d:04:95:cb:82:70:33:
                    c7:d3:6a:2e:8c:33:d1:1c:68:99:35:35:e8:3f:a0:
                    ce:5e:0c:74:40:ec:49:c5:9c:de:4b:ab:d9:72:00:
                    de:36:57:e1:34:13:a3:5c:fa:3a:de:5e:d4:49:53:
                    6f:63:3b:0a:d7:d1:64:57:3a:71:fb:d2:80:4e:08:
                    2d:77:0e:ea:6d:c3:60:d2:e8:66:bf:87:3a:9e:1c:
                    92:29:f6:6c:46:b6:03:c3:e4:1d:88:f3:28:3b:59:
                    06:13:0e:de:25:71:28:cf:9d:95:26:6d:09:9d:50:
                    05:cc:2d:60:8e:b7:fb:53:37:f5:1c:eb:5e:2f:01:
                    58:37:d1:6e:de:72:f3:d6:cf:9d:ea:c6:8b:c7:44:
                    34:79:f3:f0:38:8c:50:74:18:4b:75:7a:06:38:ff:
                    15:55:f1:f8:d4:57:b0:55:c2:89:7d:9d:ac:a8:f8:
                    b5:86:d2:c6:bd:0e:a3:26:c9:72:f7:fb:b6:ee:07:
                    61:f2:2a:44:52:2e:4e:6f:dc:24:b2:d3:e4:04:ad:
                    14:f3:77:6a:12:bc:16:28:d2:19:43:4a:99:ec:8b:
                    8e:28:9d:3e:72:9c:16:cf:33:ad:ed:8f:04:ff:be:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:79:F1:2E:20:A3:1A:0C:38:3D:F5:00:CA:EC:F0:2F:6E:00:EF:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed899c6-0e97-329b-b0fc-efe031424983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:38:1b:24:08:16:03:15:b9:bc:80:4b:df:39:35:20:51:
         e7:59:05:24:78:50:62:f5:88:c2:8e:ab:12:42:6b:c4:d5:bd:
         ff:47:01:29:cf:22:df:db:82:f6:97:75:a9:95:63:ca:88:19:
         76:99:c8:07:33:aa:f1:4b:e2:8f:e9:de:f3:09:4e:bf:51:7f:
         66:c7:d7:64:3d:c6:64:54:51:18:c1:a3:e0:dc:91:4b:53:ba:
         92:6d:94:fa:ab:21:eb:71:04:d5:c0:eb:a1:7b:96:9d:d8:c3:
         6f:d6:45:eb:c3:b1:39:87:51:df:95:2f:8a:3c:1f:ac:f6:d6:
         05:64:f0:d8:d5:bb:59:d9:12:c9:8c:d4:a7:05:da:6d:d4:b1:
         22:20:bc:92:06:ec:bc:e7:1a:ee:d4:2e:04:a3:8e:b0:ce:6d:
         6d:3d:97:54:25:41:73:81:0d:62:af:13:6b:8f:84:91:9a:76:
         ab:b3:41:92:d7:fb:de:b3:ce:7e:5b:05:a5:37:8d:62:38:40:
         2d:3c:24:6c:8f:5e:60:c4:85:74:80:68:7c:f4:2f:30:6e:21:
         de:f0:85:b3:92:2b:6a:56:01:fe:da:81:44:a4:6a:0f:50:e3:
         43:d2:00:1f:5e:ac:9b:06:15:f1:dc:dd:f4:84:7d:c3:87:11:
         ea:3c:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:36:33 2025 by rpki-client