Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bc3473-11c8-3f11-b9f8-3c9ebe4d3c2d.roa
File:                     d4bc3473-11c8-3f11-b9f8-3c9ebe4d3c2d.roa (raw, json)
Hash identifier:          j8nS3/6zXWvrEwTT5uPn7j6DCHlD45/Rwef507r5IM4=
Subject key identifier:   F8:2F:13:CD:B7:A5:F5:67:FE:EF:6F:13:2B:0A:7C:70:15:DE:CC:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAAF8917EFE73D291BC700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bc3473-11c8-3f11-b9f8-3c9ebe4d3c2d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.183.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:af:89:17:ef:e7:3d:29:1b:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a4a8a63b-7e3f-40d7-8e40-e960d38945a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:c3:bb:b4:f7:6e:c8:8d:a3:77:24:9e:cf:
                    16:7c:83:a4:56:fb:46:94:c5:10:4c:4d:c4:4c:0c:
                    be:64:f2:c0:e1:bd:39:5c:15:b3:d7:91:fa:a7:83:
                    a2:dc:67:45:2a:0e:ee:e5:4a:22:ec:fa:35:cd:27:
                    a8:d5:2b:9f:7b:eb:af:05:56:93:17:8d:18:3d:b3:
                    f1:87:b1:a1:f7:40:c3:e8:6f:d8:17:38:5b:cc:17:
                    37:66:72:2d:d4:3e:e9:63:02:e9:ed:2c:70:32:b9:
                    31:be:43:ba:b6:dd:13:7c:47:9e:82:fd:a4:56:2e:
                    96:3e:3d:35:f2:5a:3f:85:5e:71:98:a6:8d:cc:60:
                    b7:35:2c:5b:8d:fe:06:90:34:49:f0:02:31:57:ff:
                    41:f7:d0:94:d7:a6:d8:81:58:e8:0d:47:31:3d:c2:
                    2b:be:5b:40:6e:62:2c:59:eb:1c:6a:39:66:f3:08:
                    d6:ab:4f:ac:48:02:90:83:ef:22:df:e7:ab:40:5f:
                    7b:2e:6e:25:8a:25:8a:1e:04:30:4c:5b:34:6e:76:
                    30:4c:7f:49:75:2b:37:b1:29:4c:81:fd:90:da:59:
                    8e:1c:2f:31:db:94:a0:68:6c:7b:20:d4:ed:a8:10:
                    6c:c9:43:58:98:6e:52:e9:5b:d1:ee:09:ca:02:7d:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2F:13:CD:B7:A5:F5:67:FE:EF:6F:13:2B:0A:7C:70:15:DE:CC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4bc3473-11c8-3f11-b9f8-3c9ebe4d3c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.183.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:95:b0:e1:06:bf:aa:b5:69:87:bb:1d:37:c4:e4:1e:8e:
         59:ca:93:df:aa:28:8c:01:73:36:48:38:61:9a:7a:50:8e:48:
         a4:ea:2a:35:45:8e:ec:c4:8a:99:77:a4:da:a8:d5:20:1e:73:
         15:f7:5b:98:82:3f:e0:05:b1:b6:29:e1:07:15:4c:fd:4c:6b:
         62:42:72:67:da:ac:5b:1d:63:e2:c1:05:95:f1:38:c6:80:e8:
         42:7f:74:5a:39:18:96:0a:b4:1b:9d:8c:ff:ec:2f:72:3d:17:
         1d:1b:3a:50:9b:2c:24:1f:9d:70:16:a0:8a:67:aa:17:11:78:
         46:5d:ef:92:7d:7f:57:a7:d3:57:a6:5b:8c:1a:3f:e2:33:03:
         93:ec:d6:f2:2c:10:a8:8b:cc:3c:ef:05:a8:51:9b:f8:e8:c6:
         97:03:c4:f5:b5:d2:3d:b3:77:aa:2c:72:71:6f:08:d0:f1:a2:
         d1:70:fa:ae:63:8a:6a:cb:70:2f:1a:d1:64:74:94:fd:86:e2:
         8b:c7:6a:ab:3d:67:e4:41:b9:f1:36:f5:c7:76:5e:ea:f7:2d:
         93:1f:61:c2:db:99:91:63:1a:2b:1f:0e:17:1e:37:e0:67:d4:
         94:98:6c:e7:1c:fd:2c:e6:4b:03:d5:70:cf:14:1f:5b:f3:42:
         b6:18:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:39:17 2025 by rpki-client