Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7c63a3-16a1-3fde-91e2-58d684d4dbc0.roa
File:                     9a7c63a3-16a1-3fde-91e2-58d684d4dbc0.roa (raw, json)
Hash identifier:          NsNmV65LMeJgvprgyE/5FSCiq+DJvIMnbHRboAFefXQ=
Subject key identifier:   5C:10:44:FF:6B:B1:2E:28:F9:FA:7A:1B:13:5D:59:65:7C:3C:B9:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A854E514060489E597E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7c63a3-16a1-3fde-91e2-58d684d4dbc0.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:54:e5:14:06:04:89:e5:97:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=37d17799-ba38-43c9-a52b-bbed96e45b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:ed:20:88:51:4b:79:48:dd:9c:90:a3:fe:
                    05:25:7e:9c:9a:28:b6:e8:a1:c1:09:7c:35:2b:f7:
                    e6:80:34:91:2f:b0:fd:e2:0b:5c:b9:c3:1e:c4:4d:
                    47:81:75:0a:e5:91:32:f2:38:c8:c2:3d:93:94:ea:
                    56:af:3f:86:7c:7c:74:f6:47:34:4f:17:27:71:5e:
                    ca:67:e8:c3:b3:10:4f:28:f7:60:25:a6:c4:32:08:
                    ed:98:d2:4c:5b:8f:2d:99:62:6d:d1:41:f3:7e:71:
                    0d:b3:27:c7:ff:ab:e5:de:90:04:a9:61:47:4a:0f:
                    44:28:02:46:77:0a:ff:f9:3e:e6:cd:48:a4:9e:a7:
                    8f:b2:24:13:98:da:ae:30:a4:65:e1:0e:a5:1a:c5:
                    24:ee:67:f7:8b:a2:b3:2a:ba:66:d8:b4:7c:a7:7f:
                    3c:81:00:87:a1:00:35:82:29:9b:4b:c9:f1:96:1c:
                    90:59:a8:7b:8d:a6:75:9f:be:1d:68:42:48:df:81:
                    07:25:fc:33:14:4e:3e:9a:03:eb:e0:f8:bb:c8:fe:
                    71:d2:12:fa:90:65:f7:9a:84:12:4e:3b:c8:83:4c:
                    c0:6d:4d:4c:7c:db:dc:4f:32:0a:ea:0e:cf:2d:0b:
                    b4:4c:58:60:c7:40:a5:46:05:28:49:c4:d1:72:ae:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:44:FF:6B:B1:2E:28:F9:FA:7A:1B:13:5D:59:65:7C:3C:B9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7c63a3-16a1-3fde-91e2-58d684d4dbc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:7d:2e:a8:80:03:e9:20:51:50:80:5a:e9:f5:11:ba:81:2f:
         70:bb:d1:81:3c:92:63:5d:27:7f:cb:50:22:60:2e:a0:4d:40:
         c4:9f:95:e7:ec:4a:af:f2:28:e5:3d:0a:1e:03:79:8e:24:ed:
         65:85:f0:6a:ac:c6:59:32:fc:2f:1d:9f:f5:64:fa:5e:07:45:
         d9:90:75:0a:17:61:12:b8:a6:0a:43:21:7b:1a:39:44:f6:37:
         9e:86:a1:55:4f:87:a1:2c:21:15:43:3e:80:3e:d9:7d:3d:53:
         f0:cf:c7:60:d2:4c:90:07:a1:cf:10:67:55:0b:e7:86:bc:02:
         e5:82:95:3b:af:c8:e1:3e:33:6a:8e:bf:fb:36:7d:35:8c:02:
         75:6b:8a:44:5d:ae:83:59:c4:62:d4:9f:fb:66:f1:c4:c0:37:
         09:dd:33:e3:e1:ff:f4:76:60:9d:a9:cd:a4:fd:62:ba:4c:64:
         83:37:7f:65:e0:e8:dd:80:c7:88:0d:92:3c:d8:21:4c:06:51:
         30:a9:b8:cf:9b:0c:dd:d4:c2:1e:40:f4:ec:24:e3:a8:f5:51:
         54:eb:f2:04:5f:9a:d0:1d:a6:86:06:be:64:ab:2f:6b:ba:49:
         b4:9c:ea:d2:c8:df:cb:bd:96:15:36:f9:9f:01:2c:d3:49:aa:
         b7:12:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:38:48 2025 by rpki-client