Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cd5d88-51a7-36c7-80fd-b9abfe888505.roa
File:                     84cd5d88-51a7-36c7-80fd-b9abfe888505.roa (raw, json)
Hash identifier:          F8gWFXsLM/kNylDVFS6qGyY2CgR/G3GNe9rrj+Jilko=
Subject key identifier:   3E:22:AF:6E:A5:A3:41:D4:49:41:13:90:BE:E3:A7:39:FA:EF:F3:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9E512C8CB8C284E29A6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cd5d88-51a7-36c7-80fd-b9abfe888505.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.17.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:e5:12:c8:cb:8c:28:4e:29:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=367f9db0-7cae-4575-941a-ad49cbb5e5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:d9:c3:de:ca:58:7a:a5:8b:91:b8:0d:f2:
                    90:e1:d0:7d:1d:8a:29:ec:bd:7f:23:b9:bf:58:0e:
                    00:29:12:0d:ed:cb:47:3c:6b:98:66:a0:4a:cb:c3:
                    2b:f2:8a:54:4d:c0:5a:27:cb:2c:83:8c:f1:8a:d1:
                    a2:85:4b:d3:cd:1c:14:22:d5:51:51:49:69:be:0b:
                    9f:93:d7:de:d3:bf:fe:13:3f:29:05:33:1d:03:b2:
                    9e:43:e3:39:f9:00:13:5d:1c:96:d6:e0:a8:4f:1d:
                    d9:1e:7e:76:dc:98:41:ab:35:9b:5a:45:c6:fd:ae:
                    53:b3:0a:33:8a:d5:7d:f9:de:48:69:3d:d8:77:b9:
                    29:b4:14:9f:a1:3e:53:42:b6:c7:a3:e8:5d:be:26:
                    17:20:5e:63:31:8f:91:8e:37:93:82:bc:5a:26:36:
                    b9:52:44:1a:ea:c4:84:32:34:91:95:d3:3c:72:ed:
                    f9:7a:c9:22:64:57:b8:8f:7d:e3:84:70:8b:72:84:
                    ac:fb:49:cc:d6:cb:38:2c:79:53:a9:2d:f9:3f:ed:
                    66:37:89:c5:f1:80:b7:f8:2c:96:ce:07:57:29:93:
                    dd:33:b4:6c:ea:28:f4:db:39:66:bb:68:ca:0f:2c:
                    e5:51:7e:a4:34:59:ea:4c:c8:d0:ea:0d:69:11:b9:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:AF:6E:A5:A3:41:D4:49:41:13:90:BE:E3:A7:39:FA:EF:F3:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cd5d88-51a7-36c7-80fd-b9abfe888505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ef:c8:64:b4:9a:b3:dc:d8:12:f2:6f:54:e5:86:18:d0:f1:
         76:fe:81:80:62:17:f8:29:81:d8:bb:21:0e:bc:1f:a3:64:bc:
         e8:e4:76:5b:3b:2a:46:7f:b9:cb:cb:fa:e1:9c:c3:3d:dd:27:
         12:be:c6:cf:44:72:cb:da:77:0d:aa:e2:a5:92:e4:9e:8b:a6:
         a4:5a:06:cc:9c:34:ba:8f:b8:8f:11:98:dc:59:84:4f:15:68:
         49:76:6a:3c:7b:30:60:3c:14:48:26:bb:b9:89:0b:52:27:af:
         07:a2:7f:6a:81:e9:fe:20:f3:23:bb:76:38:3d:3c:8a:9d:50:
         8f:58:e0:f4:bc:b5:7e:4e:37:ac:15:de:0c:6a:76:f8:ed:dd:
         0e:97:c5:14:3b:63:87:05:0b:9e:8f:25:29:af:1b:55:f4:07:
         1b:15:7b:6b:19:9a:6b:ad:a7:75:7e:ad:e5:84:97:c5:9a:0a:
         d7:c7:19:76:c1:40:30:91:c8:bb:40:7d:77:ea:65:4c:74:1b:
         e7:1e:bf:ba:54:d0:45:02:f0:a3:97:05:d7:1d:c7:a2:d7:56:
         92:b1:a6:d4:69:e9:4e:63:b8:a6:3b:27:72:25:4b:65:6c:d9:
         ca:a5:db:96:d5:f4:1e:05:47:0b:24:df:44:1c:96:3b:a8:a1:
         2c:b4:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:00:02 2025 by rpki-client