Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4264563-296a-3c11-8995-5c14c48e43d5.roa
File:                     c4264563-296a-3c11-8995-5c14c48e43d5.roa (raw, json)
Hash identifier:          tifJLi3h7Y0Degs/zvlvYj54y0Wb/Xo8Sh543EtOSko=
Subject key identifier:   72:AF:A9:A5:75:B4:42:86:D1:12:F3:E5:AE:6C:72:B4:4C:17:ED:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAB59AB64C2629A94B4740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4264563-296a-3c11-8995-5c14c48e43d5.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.255.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:b5:9a:b6:4c:26:29:a9:4b:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=fa9cfedd-4d97-4613-a24d-2be21db580c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:d1:d6:0d:1a:ba:d6:ac:ff:a8:46:ce:cc:
                    13:6b:9e:5f:d2:5e:8f:55:4a:13:ff:4e:5c:b0:cd:
                    a6:b6:a2:7d:07:92:12:56:e2:66:50:fe:fe:fc:13:
                    8a:9e:15:0f:88:1b:ce:57:ba:66:13:b8:83:c9:eb:
                    73:0a:a6:20:47:ea:32:c4:64:a3:ad:a7:4a:f6:a1:
                    ff:1d:f4:a4:07:70:f6:c6:ef:0a:09:06:6f:d0:5a:
                    91:47:57:e4:df:d6:bd:92:f9:04:d6:37:b7:66:a8:
                    b3:1a:60:09:8c:fd:f2:f8:e8:30:a9:cb:d4:f6:31:
                    44:5f:6d:67:5c:7c:64:71:d7:73:10:fd:8c:4a:c4:
                    a2:92:5b:59:38:5c:cc:eb:d1:b4:ec:f2:6f:a5:b6:
                    2e:db:df:12:97:a3:26:ac:b9:85:1d:8b:e0:44:74:
                    6f:c1:69:32:2d:5a:2a:37:a8:80:10:e6:40:2c:4a:
                    38:8b:b2:97:c8:de:d3:ed:ed:c5:9a:bf:e2:43:0f:
                    3f:38:fe:c8:bd:82:05:41:a2:b4:30:2e:65:bc:74:
                    8a:54:6f:e3:c8:96:8d:01:08:4d:95:08:ba:af:38:
                    08:5f:4b:0a:90:b5:b2:0e:01:9d:c6:bb:06:62:ce:
                    01:a1:2f:be:a6:b6:d4:85:6b:44:29:b9:e7:72:36:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AF:A9:A5:75:B4:42:86:D1:12:F3:E5:AE:6C:72:B4:4C:17:ED:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4264563-296a-3c11-8995-5c14c48e43d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.255.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:ef:4e:ec:99:19:64:ed:29:21:8f:32:1b:65:7a:5f:9a:22:
         20:b1:37:c1:4c:56:30:88:7f:cf:48:36:00:93:36:3d:5f:17:
         09:86:e1:d9:61:3e:56:1a:24:55:5b:61:18:33:3b:72:e0:26:
         34:b6:cc:76:ff:df:53:0d:09:79:17:a7:3a:84:ed:d7:6d:e5:
         79:2d:ae:75:ef:27:65:2d:21:51:43:f5:53:fd:88:e2:6b:94:
         a6:51:16:a2:89:1d:06:67:d1:2a:c9:b8:32:5b:a0:08:15:6f:
         22:ea:b4:07:5e:bb:5c:bd:6a:0f:6e:5c:03:8e:f0:00:8f:c9:
         0f:55:f9:e9:b2:be:49:4a:75:74:bc:f8:3b:0a:7e:a1:e2:1e:
         32:09:84:95:26:6d:c7:eb:e8:90:d2:0c:a5:75:a5:1a:48:a5:
         36:b9:ec:b9:2c:6c:d9:1c:f0:2b:0f:86:49:8c:13:2b:1d:c4:
         3e:a2:7a:43:14:71:97:54:df:74:90:c1:ef:1e:cf:b8:74:59:
         26:c6:fa:a3:9d:09:73:a9:83:bf:ca:ad:df:48:35:c5:6e:47:
         97:cc:ed:c3:73:25:1b:f7:7f:00:5a:37:cb:61:16:d7:3b:d1:
         9d:b2:89:58:ac:24:84:5d:40:f6:17:42:ff:78:ac:f8:26:0b:
         6b:61:10:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqrWatkwmKalLR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZmE5Y2ZlZGQtNGQ5Ny00NjEzLWEyNGQtMmJlMjFkYjU4MGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoXR1g0autas/6hGzswTa55f0l6PVUoT/05c
sM2mtqJ9B5ISVuJmUP7+/BOKnhUPiBvOV7pmE7iDyetzCqYgR+oyxGSjradK9qH/
HfSkB3D2xu8KCQZv0FqRR1fk39a9kvkE1je3ZqizGmAJjP3y+OgwqcvU9jFEX21n
XHxkcddzEP2MSsSikltZOFzM69G07PJvpbYu298Sl6MmrLmFHYvgRHRvwWkyLVoq
N6iAEOZALEo4i7KXyN7T7e3Fmr/iQw8/OP7IvYIFQaK0MC5lvHSKVG/jyJaNAQhN
lQi6rzgIX0sKkLWyDgGdxrsGYs4BoS++prbUhWtEKbnncjb8+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKvqaV1tEKG0RLz5a5scrRMF+12MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQyNjQ1NjMtMjk2YS0z
YzExLTg5OTUtNWMxNGM0OGU0M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf92MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANbvTuyZGWTtKSGPMhtlel+aIiCxN8FMVjCIf89INgCTNj1fFwmG4dlh
PlYaJFVbYRgzO3LgJjS2zHb/31MNCXkXpzqE7ddt5XktrnXvJ2UtIVFD9VP9iOJr
lKZRFqKJHQZn0SrJuDJboAgVbyLqtAdeu1y9ag9uXAOO8ACPyQ9V+emyvklKdXS8
+DsKfqHiHjIJhJUmbcfr6JDSDKV1pRpIpTa57LksbNkc8CsPhkmMEysdxD6iekMU
cZdU33SQwe8ez7h0WSbG+qOdCXOpg7/Krd9INcVuR5fM7cNzJRv3fwBaN8thFtc7
0Z2yiVisJIRdQPYXQv94rPgmC2thEPY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:48:59 2025 by rpki-client