Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c395369c-8df0-3dcb-bb11-39b4923aadc6.roa
File:                     c395369c-8df0-3dcb-bb11-39b4923aadc6.roa (raw, json)
Hash identifier:          YyfgIag+6nEc53MUBhZXpj0BC+TPHPfrZ+c1htled2Y=
Subject key identifier:   EF:7D:95:23:F1:2C:C1:B5:61:34:8A:4C:2F:74:46:94:FB:2D:EB:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A87CEB566F1AEDD2A83E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c395369c-8df0-3dcb-bb11-39b4923aadc6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        75.68.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:7c:eb:56:6f:1a:ed:d2:a8:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=66e40b25-4271-426e-a0f7-fb6d8f438ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:bf:80:9f:70:e4:1a:54:a0:89:e9:16:b7:
                    4d:72:2a:81:c8:4b:c5:75:2b:bf:30:41:69:e4:e4:
                    8a:05:46:a5:39:8a:aa:fb:31:5b:a9:38:05:dc:24:
                    c5:e1:67:30:f7:12:e6:05:63:18:29:77:05:6b:45:
                    a8:86:4c:dc:07:2d:72:5e:63:33:26:be:de:fe:a4:
                    64:43:ca:a7:a9:42:6c:e7:23:dc:01:85:14:31:2b:
                    95:48:89:d3:f6:22:ab:05:70:e4:ac:e2:3c:41:a0:
                    84:45:4e:bb:7b:7d:2c:f4:76:f8:5a:81:76:aa:10:
                    98:69:5e:f4:06:c4:41:08:02:60:4e:24:42:3a:03:
                    46:ec:ff:45:85:da:ba:1f:38:12:a5:dd:a7:37:71:
                    3e:6d:a4:e4:21:d8:d5:4e:58:67:0a:b9:c6:c3:a4:
                    c3:b4:df:75:97:b6:b4:fc:ac:88:fd:8e:9b:4c:b3:
                    69:ce:f8:31:2e:2e:76:92:a7:36:1c:2f:69:f4:48:
                    06:6d:7f:c3:17:10:de:bc:53:ba:4e:c5:73:cf:04:
                    75:50:45:78:aa:4b:a3:c5:3b:ff:38:33:b6:26:6b:
                    8c:04:dc:0e:e4:2d:ea:9a:db:18:20:a0:05:cb:13:
                    36:cf:e6:9d:d0:a4:95:fa:d4:0f:1b:9b:bc:39:bb:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:95:23:F1:2C:C1:B5:61:34:8A:4C:2F:74:46:94:FB:2D:EB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c395369c-8df0-3dcb-bb11-39b4923aadc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:5f:8e:ff:ec:4f:f6:17:b1:bc:7f:64:e1:2e:1b:29:08:22:
         85:85:b0:30:16:02:d6:7f:08:aa:ff:af:23:dd:6c:cf:54:e6:
         21:9a:98:38:fe:38:64:0c:ca:51:2c:36:7d:51:11:03:55:27:
         09:5a:a9:f9:c4:25:3b:ee:28:51:12:53:3c:72:68:7f:a6:9c:
         02:f2:f9:8f:05:e8:8c:3f:8a:23:a4:26:25:0d:2f:0f:a9:b4:
         8a:26:19:a0:9b:11:32:b0:2d:46:ee:42:eb:f5:02:01:d6:8d:
         3e:c0:92:e7:83:0b:75:07:16:da:93:e2:94:38:8e:9a:45:db:
         75:e3:4c:68:57:66:d9:34:69:5f:8c:b7:91:b2:f6:8c:72:64:
         3d:0e:c5:d9:95:13:70:18:41:a2:ae:71:9a:2c:ff:d0:68:73:
         5b:70:73:18:cc:ef:48:c8:71:2b:d9:c0:84:fd:24:52:14:c4:
         8f:4a:82:47:0d:4c:6d:91:66:75:b0:76:57:f4:29:9a:f6:57:
         7d:de:21:a7:af:49:6a:6c:04:20:d4:7a:75:ce:51:e5:8d:d2:
         62:ac:9f:b6:2a:b6:ca:ef:da:c4:ac:ab:d1:66:13:02:ed:9d:
         d4:38:84:76:76:89:c6:d6:38:d4:f0:a8:b2:97:26:98:cb:ed:
         fc:b3:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:22:42 2025 by rpki-client