Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb2a508-629a-3797-bbdd-257af4d8dcc6.roa
File:                     8bb2a508-629a-3797-bbdd-257af4d8dcc6.roa (raw, json)
Hash identifier:          jgYBSlmLvH2/Ub05WFzNImganML+8akaDqesylNLxZY=
Subject key identifier:   A6:F8:2B:3D:65:73:7E:0D:5C:85:D0:A9:1A:BE:B8:9D:16:42:E7:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A82D86DC7A5005AC10B8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb2a508-629a-3797-bbdd-257af4d8dcc6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.143.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:2d:86:dc:7a:50:05:ac:10:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=5665bdfb-57c4-4b35-9f51-33d18e79608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:66:dc:53:80:24:2b:7d:1e:51:47:91:61:
                    02:50:96:79:97:6b:56:ad:0e:ad:8a:1b:11:88:ff:
                    6c:c4:f0:ec:bb:b4:ee:c4:01:10:bf:2a:69:4d:0f:
                    41:1e:51:f7:72:26:a5:b5:54:47:00:95:34:fa:34:
                    f3:d6:26:59:72:85:b9:d0:53:17:a1:3c:3e:4b:d3:
                    cf:29:0b:6c:de:85:57:48:5f:bc:f7:b2:db:1c:1d:
                    73:bd:8f:31:67:89:1f:30:45:1e:39:05:bc:75:b6:
                    83:dd:5d:5d:ba:8a:99:30:1c:c5:d8:9b:99:d4:9c:
                    bb:83:a6:16:e4:b4:ac:1b:4d:0e:15:13:51:c2:f4:
                    8e:e8:34:5a:49:57:6b:a6:db:43:3c:5b:4d:37:47:
                    c5:e4:d1:25:92:4c:9b:a1:ae:a8:0e:05:68:d0:16:
                    3c:b5:93:89:f1:fd:33:78:58:4b:a6:7c:c5:ba:0f:
                    d0:bf:aa:aa:d3:17:4c:2c:4b:89:c4:c2:de:2b:ff:
                    07:cb:09:68:37:2e:77:d4:aa:df:48:aa:c2:a0:c9:
                    91:45:32:94:c2:de:a8:6e:d8:58:6d:0d:5d:06:5a:
                    70:eb:78:2e:c5:11:d6:23:38:64:6c:7f:6d:93:1c:
                    a8:9d:c5:63:b4:6f:08:54:d8:1b:d3:f9:b5:9d:69:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:2B:3D:65:73:7E:0D:5C:85:D0:A9:1A:BE:B8:9D:16:42:E7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb2a508-629a-3797-bbdd-257af4d8dcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:f5:37:22:3e:6c:b0:ba:cd:b6:d7:6a:f0:7d:bb:09:3a:
         23:ad:61:b8:96:7c:df:f6:ca:a2:ac:b4:ef:07:22:a8:4c:72:
         ea:21:29:1f:6a:f2:71:54:61:31:49:cd:42:cf:77:4f:0e:af:
         80:4e:4e:ee:5e:d6:15:16:1c:18:3d:68:6b:b6:ea:79:66:be:
         51:14:87:a8:03:90:e9:07:d0:61:f1:75:4f:0f:d1:5d:d2:a1:
         6f:1e:9b:4c:da:4c:5b:fd:e3:55:3c:e8:e4:1d:bc:12:70:38:
         cc:cb:07:12:bf:85:8f:f0:38:c5:7d:7d:66:53:a5:59:b7:ea:
         4a:be:c8:31:28:a5:90:5d:28:6b:13:08:ac:df:2f:29:37:94:
         ef:d4:60:d1:6e:be:59:30:91:1c:d7:a6:3a:c8:f1:98:9d:12:
         1a:a2:81:0f:a7:79:4b:50:8c:71:ed:71:1b:de:e9:81:1a:d9:
         a7:31:29:4d:b8:ee:1a:7e:9c:39:a4:8b:64:a3:d7:33:42:84:
         01:90:f7:39:12:8c:ae:92:30:ec:23:d3:96:8b:6e:e7:33:a1:
         c6:5d:c2:22:1d:92:13:9c:56:ff:95:1f:51:3e:0d:94:b0:06:
         dc:14:4b:fb:e3:1a:8d:a6:03:e2:03:d5:83:b4:6a:e5:42:fe:
         1b:4a:73:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqC2G3HpQBawQuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NTY2NWJkZmItNTdjNC00YjM1LTlmNTEtMzNkMThlNzk2MDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+lm3FOAJCt9HlFHkWECUJZ5l2tWrQ6tihsR
iP9sxPDsu7TuxAEQvyppTQ9BHlH3cialtVRHAJU0+jTz1iZZcoW50FMXoTw+S9PP
KQts3oVXSF+897LbHB1zvY8xZ4kfMEUeOQW8dbaD3V1duoqZMBzF2JuZ1Jy7g6YW
5LSsG00OFRNRwvSO6DRaSVdrpttDPFtNN0fF5NElkkyboa6oDgVo0BY8tZOJ8f0z
eFhLpnzFug/Qv6qq0xdMLEuJxMLeK/8HywloNy531KrfSKrCoMmRRTKUwt6obthY
bQ1dBlpw63guxRHWIzhkbH9tkxyoncVjtG8IVNgb0/m1nWl9ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKb4Kz1lc34NXIXQqRq+uJ0WQuf3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGJiMmE1MDgtNjI5YS0z
Nzk3LWJiZGQtMjU3YWY0ZDhkY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSY/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9x9TciPmywus2212rwfbsJOiOtYbiWfN/2yqKstO8HIqhMcuohKR9q
8nFUYTFJzULPd08Or4BOTu5e1hUWHBg9aGu26nlmvlEUh6gDkOkH0GHxdU8P0V3S
oW8em0zaTFv941U86OQdvBJwOMzLBxK/hY/wOMV9fWZTpVm36kq+yDEopZBdKGsT
CKzfLyk3lO/UYNFuvlkwkRzXpjrI8ZidEhqigQ+neUtQjHHtcRve6YEa2acxKU24
7hp+nDmki2Sj1zNChAGQ9zkSjK6SMOwj05aLbuczocZdwiIdkhOcVv+VH1E+DZSw
BtwUS/vjGo2mA+ID1YO0auVC/htKc68=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:44:22 2025 by rpki-client