Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa
File:                     c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa (raw, json)
Hash identifier:          429k0HaDUbYh1Pkwj1s5q31QcmA0XarBMQjONq3/1Dg=
Subject key identifier:   AB:A8:99:E8:D4:D4:A4:E4:9B:5A:E7:FC:1F:82:16:FB:B3:75:8E:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9004B48826A02DE42AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        174.171.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:00:4b:48:82:6a:02:de:42:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0f205157-39cd-4860-bef2-41b7a9347738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:3f:31:ec:1b:a7:d9:2c:58:a0:14:5c:f6:
                    6f:41:db:6e:ce:83:6e:6d:c2:b3:c6:41:e3:f9:1a:
                    95:a3:cb:2e:d9:73:7f:80:09:d6:80:93:22:12:0c:
                    b7:e5:92:56:96:f2:fb:a4:96:53:9f:af:18:8c:dc:
                    bf:2d:b7:f2:83:de:47:86:8b:7d:bc:50:6c:b8:af:
                    50:cf:f2:74:c4:9f:d1:a1:01:0a:4c:74:58:8f:54:
                    e9:21:06:1c:1d:fd:19:27:d9:4c:fd:c5:2b:61:24:
                    ff:15:f2:64:83:ec:dd:2a:31:dd:1e:73:f1:b3:8a:
                    eb:70:af:9a:62:9e:f4:90:49:bb:ca:cc:b7:37:54:
                    d4:aa:ed:fe:49:ef:6d:d8:67:ac:cf:88:6c:14:2f:
                    1a:a3:48:5c:67:85:12:17:70:05:0a:36:7a:2b:70:
                    9f:a1:1d:fc:03:50:47:e3:fb:d5:91:0b:d8:29:20:
                    ab:56:58:91:7d:a8:da:5d:af:68:2a:8a:90:76:69:
                    66:68:85:c5:01:3b:82:fd:b3:8e:d8:09:41:3c:4f:
                    12:fc:e1:0b:92:aa:04:3e:62:c6:41:f2:de:42:48:
                    cd:47:a8:00:e9:f1:d7:29:ea:8a:68:49:18:5b:a3:
                    e2:9c:c3:ae:74:4f:13:fe:20:63:e0:8d:c3:1c:41:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:99:E8:D4:D4:A4:E4:9B:5A:E7:FC:1F:82:16:FB:B3:75:8E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.171.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:8b:61:bf:8e:25:bd:4a:fb:5f:ee:ad:0e:b7:55:c6:6b:
         b9:ed:0b:13:f3:a1:f8:6b:bd:8a:4c:09:65:07:9a:81:34:b7:
         0a:f9:71:5b:04:c6:e2:2a:7a:57:fe:70:9d:84:5f:8e:ae:4b:
         61:fc:d6:19:5b:46:d7:0b:b9:07:25:02:44:06:3a:d2:80:f4:
         1b:c8:31:31:27:bf:66:a3:41:7b:75:bd:c8:fa:79:4c:a7:1c:
         96:cc:08:68:c0:c1:3a:8b:fd:ea:ff:b5:38:2c:12:de:7e:dc:
         e1:f0:f7:cf:a3:9b:db:73:af:5c:2f:2e:d6:37:97:d0:0d:87:
         c4:d9:ee:27:26:6d:4f:3a:24:d4:30:f6:7c:b7:0e:96:c2:02:
         fc:4d:c5:4f:eb:74:56:c2:d4:8c:63:12:14:df:44:36:87:4d:
         30:b9:5f:2b:83:3c:56:5a:d3:68:d0:73:66:e4:3e:16:e1:95:
         2a:4c:85:f6:e0:aa:f8:06:48:02:e3:42:12:bf:e3:d3:30:f1:
         b1:b5:d4:6e:c3:67:2d:49:1f:e7:a0:99:a8:d1:b3:59:af:5d:
         d4:76:7f:f6:e5:aa:76:1c:23:e6:e8:4f:9c:23:35:f5:43:f5:
         25:64:27:4d:2d:87:af:89:33:3a:0d:30:ab:84:f6:f3:c1:1d:
         86:61:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:37:38 2025 by rpki-client