Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa
File:                     8e2a0707-bea4-3470-ba61-c9b415f04d23.roa (raw, json)
Hash identifier:          6H/JEcuZ/JB8UynVfenuMXdC1bGk7Bmvg8MD/OYOYyQ=
Subject key identifier:   9F:87:A6:A4:EE:7D:39:61:F7:EA:6B:46:6B:BE:71:08:9A:D1:1F:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AABC490D4E14262BD39280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.55.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:bc:49:0d:4e:14:26:2b:d3:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=5896a752-12c4-46a4-ad19-d3e636edca8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:f0:51:46:08:7f:5e:bf:a9:84:7b:77:75:
                    87:80:c0:a4:12:17:2f:f2:84:08:15:42:0d:ce:c4:
                    58:54:b2:ce:8c:9c:0f:79:75:18:56:b8:15:66:2f:
                    9f:49:a2:b5:57:aa:ee:11:39:54:c5:32:3f:f4:d4:
                    55:4b:42:ba:75:81:56:f3:ff:79:5e:fa:f7:0f:68:
                    b8:52:a6:ee:7b:60:43:45:52:59:3c:73:06:46:24:
                    97:ec:70:a4:66:69:c1:9f:c4:30:a9:f5:0c:76:1c:
                    74:b8:eb:33:fc:93:2f:42:b0:0a:e5:a6:80:f4:29:
                    33:e6:61:28:ca:01:3a:c7:dd:23:d7:9d:82:39:6e:
                    43:ec:1b:c6:e8:e4:75:6f:8e:ec:71:1c:e4:f4:01:
                    c2:ad:6e:f1:30:e9:a3:d1:50:fb:42:74:6e:d7:52:
                    c5:2f:29:97:10:81:9f:57:58:c9:45:0b:b3:94:82:
                    3e:b6:27:60:bf:da:91:85:ec:59:1e:51:47:b6:78:
                    8f:9a:f4:a5:77:0f:88:b0:f0:2c:a5:15:0d:b4:a0:
                    25:21:b5:75:72:01:88:19:a7:05:27:48:98:26:c3:
                    d2:60:d2:52:a7:1b:15:74:69:bf:b3:89:5a:8d:a3:
                    d2:11:aa:13:aa:42:83:ca:c4:49:d9:c1:ed:bb:5f:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:A6:A4:EE:7D:39:61:F7:EA:6B:46:6B:BE:71:08:9A:D1:1F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2a0707-bea4-3470-ba61-c9b415f04d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:3c:a7:f8:2b:46:02:e5:ee:42:1e:8f:f0:ef:3e:1d:ca:
         96:e6:86:22:2d:c0:21:b7:02:51:65:e2:f1:11:46:db:38:83:
         16:6d:57:bc:28:d2:e7:da:b9:fd:bc:53:e0:23:54:18:01:6d:
         a4:05:bd:2d:3f:87:9e:f3:13:ca:b8:91:1d:61:e8:13:b8:b1:
         8b:dc:fd:14:96:77:b9:d6:14:68:e2:6e:2e:a8:ea:a4:91:c0:
         d1:a3:19:8a:06:52:fd:2b:75:79:6a:96:92:6e:09:04:5b:32:
         16:f6:1c:13:b2:a7:1c:9e:f4:c5:65:d2:98:8d:04:db:d3:e2:
         2a:cf:3f:88:7b:7f:02:45:19:ca:a7:9d:51:9f:6c:03:db:d6:
         6e:69:c9:9d:52:0b:7f:84:5c:23:85:05:e0:8f:55:e4:25:07:
         7b:c5:b4:96:3f:3a:db:6c:46:52:20:2d:bd:55:45:eb:41:9d:
         36:c3:63:c5:d6:17:2c:51:cf:cd:17:ba:b3:b4:38:c2:9e:d8:
         b6:b8:ab:a6:ed:1f:1c:98:5f:f9:34:e0:6f:9d:53:0b:da:37:
         34:05:ed:3a:22:ce:b1:9a:7f:00:01:ea:fc:6e:93:9a:04:32:
         ba:68:72:2e:d0:1a:30:4e:00:cd:93:82:7f:6b:62:73:5e:df:
         34:69:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:51:09 2025 by rpki-client