Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c92fbd12-979d-3765-bab7-cb95f272ba12.roa
File:                     c92fbd12-979d-3765-bab7-cb95f272ba12.roa (raw, json)
Hash identifier:          Vhwl3K9/REWvtiMslK12H1L8nfEX7Syenx9VBQ2Yuk8=
Subject key identifier:   F9:1A:56:AB:87:1D:7E:4A:13:D6:1C:04:12:1A:79:2A:9F:92:41:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7B7FE9CA52470D4F815C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c92fbd12-979d-3765-bab7-cb95f272ba12.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        71.237.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:b7:fe:9c:a5:24:70:d4:f8:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c14081df-26af-44b5-9dec-bdf15bc0f86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:84:73:6e:bd:2b:66:0b:f9:fc:2c:ce:e2:
                    b4:3c:9c:c9:68:8b:bb:e2:2c:53:87:09:47:13:5c:
                    af:4e:f1:6c:31:26:b4:9b:5e:18:df:82:8e:ea:93:
                    1f:2c:10:d9:e3:4f:8f:a6:2e:51:79:74:28:e0:a7:
                    f3:9b:80:3d:d4:94:84:33:34:aa:67:cb:0a:11:91:
                    4e:d9:86:2d:f9:5a:83:a6:7f:45:98:68:43:56:01:
                    4c:ac:d8:0b:1a:89:12:85:bf:e7:0d:dc:35:52:00:
                    f2:b1:d0:72:b8:91:69:10:9e:af:ba:69:59:df:c3:
                    bc:9b:e9:a4:69:8d:5d:76:67:6e:02:66:b0:26:27:
                    b2:7a:ce:dc:d4:49:67:a9:27:84:b1:b6:56:ec:0b:
                    1f:0e:6c:80:9b:d2:ca:11:87:a0:b9:28:cf:fe:36:
                    80:76:b9:ba:bd:4d:8c:a3:09:68:2b:30:00:f4:96:
                    e1:a1:61:e2:91:2b:b2:bb:82:af:3d:7a:d8:c1:f9:
                    e3:de:08:cf:59:6d:de:6f:63:8b:e6:ba:0a:0d:6a:
                    4c:58:e9:b7:98:a6:9a:a1:19:43:a7:4d:23:44:44:
                    ed:f2:fc:35:13:36:e7:a0:16:93:b5:5d:9d:5e:3f:
                    da:8e:dd:7a:83:a2:b3:c2:c5:0d:5b:a6:d1:d6:00:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:56:AB:87:1D:7E:4A:13:D6:1C:04:12:1A:79:2A:9F:92:41:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c92fbd12-979d-3765-bab7-cb95f272ba12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:f6:9b:47:c8:c8:c1:d4:f7:16:fe:fd:25:e7:6b:54:f4:e4:
         ff:c8:08:ad:8e:1e:10:aa:39:d6:92:e1:64:82:22:24:a3:3d:
         3d:9e:a1:4d:e1:d3:f7:9f:6f:60:9b:fd:aa:8a:c4:75:67:3c:
         1a:83:8c:0b:15:52:64:26:0c:04:df:68:c0:8f:0e:77:81:77:
         e2:9c:da:fb:64:54:65:13:c7:64:9c:20:b1:cd:df:df:de:f4:
         fc:8c:bf:23:c7:66:70:84:1c:4a:90:5e:51:cc:60:15:8b:5f:
         34:f2:c8:6b:06:4a:36:ae:38:65:a3:03:98:bc:ed:46:93:39:
         ac:4f:1d:66:48:23:c9:04:bc:0f:90:f2:76:1d:f9:5f:6e:2a:
         33:01:05:29:5e:fc:7b:93:fc:7a:d8:24:2f:6d:16:bf:48:fd:
         38:3c:b9:f6:c8:87:44:3c:8e:a6:98:1e:4b:d5:5c:2f:13:ca:
         86:db:10:f2:fc:aa:14:30:8f:c3:3f:44:11:f9:71:bb:a2:e5:
         cf:71:3b:b5:ae:57:78:11:98:71:33:ca:d5:60:68:7d:e8:32:
         6b:e0:17:be:84:8f:43:e9:01:f8:55:0f:6f:97:ea:7e:ec:af:
         b6:b2:20:11:10:21:82:f7:9a:1b:18:bb:e3:37:e9:ee:bf:09:
         2b:1e:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:39:42 2025 by rpki-client