Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99ed50d3-a250-3286-a536-1b5fff4498ad.roa
File:                     99ed50d3-a250-3286-a536-1b5fff4498ad.roa (raw, json)
Hash identifier:          wyhqmZyJn53IZdB9Y8vwJibBSO/oi1C1AjaQ4/xoM2g=
Subject key identifier:   C4:CD:22:0D:3C:7D:24:06:F7:F2:22:0F:26:5E:2C:4D:1C:F3:8E:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7D71A1121C09A4DA06470
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99ed50d3-a250-3286-a536-1b5fff4498ad.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        73.96.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:d7:1a:11:21:c0:9a:4d:a0:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=bc87a224-6000-499d-8193-37b9a2a657f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:4e:e0:b2:e5:59:6e:dc:d0:f3:62:0f:87:
                    73:0d:38:69:cc:79:74:f4:8e:2a:61:6d:26:b9:cd:
                    25:57:f8:98:5e:a7:a6:78:17:fb:8d:c6:53:47:6b:
                    e3:3f:a4:26:1e:8a:89:00:a6:3f:de:cf:0c:58:66:
                    be:9a:16:df:5c:24:e2:cf:4c:67:72:f6:69:63:a7:
                    c2:7a:0f:1f:e7:39:86:9d:02:78:73:48:93:f1:f9:
                    48:d3:22:6f:5b:a9:dd:85:31:d7:9f:24:6f:8e:8f:
                    b9:9f:8a:a3:d4:dc:9b:39:3f:6b:33:a7:37:9f:88:
                    92:41:ba:20:17:6f:84:cf:72:6f:2a:51:5d:7e:2d:
                    7a:ba:89:ab:a0:a5:c9:9a:21:7a:0a:93:74:0b:0d:
                    73:91:c0:b3:33:7c:d1:eb:45:a0:b1:1b:8a:eb:5c:
                    cb:ec:d2:69:7f:47:df:ff:29:61:f1:16:9c:f9:55:
                    bf:c3:f6:fa:2b:1a:34:ff:12:7d:a7:71:79:59:be:
                    ae:35:84:de:28:ed:44:7e:d7:02:7e:42:36:b9:27:
                    03:98:8a:2b:41:57:bc:a5:7f:16:d0:4b:fa:34:fd:
                    31:db:45:d6:da:8a:a5:0e:fd:a8:25:de:30:4c:e2:
                    d6:52:37:f7:72:4e:bb:73:22:2d:d6:d0:8a:1e:e7:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:22:0D:3C:7D:24:06:F7:F2:22:0F:26:5E:2C:4D:1C:F3:8E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99ed50d3-a250-3286-a536-1b5fff4498ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:1b:61:8f:e1:34:79:64:e3:ad:55:44:27:bf:f7:35:c4:
         59:02:db:59:37:53:2f:ca:53:48:12:42:c7:a5:cc:36:ca:f5:
         78:b5:7c:27:e5:53:87:03:5f:de:d3:a1:a8:c3:d6:cb:f0:53:
         f9:5e:4a:7a:73:34:64:62:78:c7:32:4d:7b:71:bc:35:a2:3e:
         87:56:70:43:07:ca:1e:03:34:c4:ee:6c:8c:81:14:b8:0f:6d:
         ef:2d:d7:ff:b9:75:df:e3:17:de:ac:18:78:8a:73:6b:e3:09:
         cb:f4:3c:60:67:c1:b0:79:a4:aa:63:a6:88:d9:9a:29:04:4f:
         21:dd:ac:d5:f3:ba:a5:61:ce:26:8d:89:ee:0a:65:79:9b:ef:
         5c:35:fc:af:c0:6b:59:05:2a:62:08:ea:f4:4f:78:19:5c:5f:
         01:80:63:fe:d9:ca:9f:39:29:6e:bb:76:77:b5:73:47:d7:6a:
         aa:cb:c7:d8:0a:64:1c:28:7b:4a:81:f3:1f:a2:ca:db:54:b5:
         e6:9a:a6:67:69:a6:1b:f4:3d:c4:d4:47:fd:d2:d6:14:4d:94:
         e8:7a:7e:09:dd:94:3b:b5:dc:99:91:84:e6:e8:bf:8b:e9:19:
         a6:80:49:ba:6e:de:b2:b1:e5:fb:35:41:14:1a:24:14:32:03:
         bd:8f:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:08:31 2025 by rpki-client