Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbb9215-ba55-3c29-93ba-bf491fa6fcfb.roa
File:                     bdbb9215-ba55-3c29-93ba-bf491fa6fcfb.roa (raw, json)
Hash identifier:          K8oNETTRGxtnYNyhby9Q1Y22ncuXqH79vT0sfHHHQIY=
Subject key identifier:   8E:B4:A2:B3:56:4A:29:85:CA:36:0D:2D:12:6C:46:18:CC:9F:83:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9E31B2D17508CBF572100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbb9215-ba55-3c29-93ba-bf491fa6fcfb.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:e3:1b:2d:17:50:8c:bf:57:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2b3c55e7-48d4-4ee4-8785-5b9337b64e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:74:a1:26:f4:b6:aa:a4:e2:a1:ff:c8:44:
                    47:0e:80:b2:07:5e:0f:10:ba:18:b7:5d:38:94:ad:
                    93:83:51:51:7a:0a:ec:70:90:b5:02:19:0d:d2:cc:
                    c8:68:a8:48:88:07:63:87:b5:30:f1:04:95:20:2a:
                    ea:ab:e4:4e:23:02:11:e9:2a:a9:da:9f:5c:40:16:
                    75:c8:db:14:da:3d:66:09:5c:da:b0:fe:f6:ef:d1:
                    31:58:c6:32:a7:f8:63:2b:96:cc:94:43:b0:58:15:
                    cd:4a:c6:fb:f6:8f:6a:12:02:3a:ac:9a:8b:a4:79:
                    99:a9:5b:f1:38:ff:43:03:a8:71:bb:45:ed:64:e1:
                    e7:36:21:4e:de:b6:38:88:96:26:0e:cd:38:ad:dd:
                    af:66:44:94:32:07:d4:0d:88:c3:d9:45:94:af:53:
                    cb:ce:50:b8:2b:a9:07:02:37:4a:3c:e8:5d:5f:55:
                    51:fc:7c:27:32:7f:e3:ca:01:30:21:a2:e7:ad:a6:
                    2c:e0:0a:15:81:86:d2:53:6c:b4:e9:a8:9f:ae:67:
                    7a:36:40:b9:88:ad:53:98:50:80:cb:49:34:91:f9:
                    39:79:e3:90:ce:44:9d:84:98:b0:e8:32:04:15:1c:
                    63:6b:34:77:c7:89:ea:fa:90:f2:f5:bd:43:a5:d2:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:A2:B3:56:4A:29:85:CA:36:0D:2D:12:6C:46:18:CC:9F:83:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbb9215-ba55-3c29-93ba-bf491fa6fcfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:23:52:93:e4:bc:18:ac:77:d7:68:4a:7a:8e:e4:4c:98:02:
         6d:c6:d6:ef:76:fc:f4:29:12:b1:89:b3:df:df:dd:27:a0:0e:
         e0:5c:94:a7:6e:17:35:47:3d:a8:ee:d4:22:bc:2c:99:fa:24:
         a5:fb:ae:0a:63:f2:4b:5b:94:36:10:da:8c:9d:43:36:06:f3:
         53:ab:4b:7a:0e:9d:5e:10:78:56:36:09:7d:31:a1:1d:8f:19:
         6e:7e:a7:27:bb:1d:1e:36:39:23:01:3e:95:44:09:9c:ca:e3:
         aa:86:4f:4f:53:07:af:f2:49:c4:e7:87:12:94:92:96:fb:e8:
         92:d7:91:c8:86:31:e7:09:80:52:3d:2b:50:2e:74:72:05:27:
         c9:9d:36:f4:c6:69:cc:2b:c2:a5:5f:be:2c:ed:2c:26:32:1e:
         45:f4:2b:7f:dd:6e:1e:24:f7:62:c5:04:80:c1:b8:14:0f:7e:
         7a:03:fb:40:c2:76:3a:f8:60:47:65:0f:a2:95:6f:d6:bf:65:
         06:a3:68:70:98:65:ae:6a:44:03:95:11:cf:08:91:af:1a:a4:
         ef:ab:23:b1:37:78:bb:fc:cd:0e:67:6a:b9:8e:a3:5e:2f:a8:
         2d:f1:b2:31:81:9a:df:62:77:c3:b0:6e:35:46:4f:0d:b5:4a:
         89:91:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:21:41 2025 by rpki-client