Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5bb6260-3656-36e8-ab1d-912cb63d424e.roa
File:                     d5bb6260-3656-36e8-ab1d-912cb63d424e.roa (raw, json)
Hash identifier:          63Q3q2jWxSXoqowiOgzzwkyQlaZatfGxGULTa2RiuVg=
Subject key identifier:   8E:66:A3:58:C9:F0:8F:3A:21:61:AD:CC:86:03:59:BD:3A:43:16:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9F78C156981EAA9CECE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5bb6260-3656-36e8-ab1d-912cb63d424e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.227.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:f7:8c:15:69:81:ea:a9:ce:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0e8dcffa-eea9-46ff-9862-7a93208ac916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:4e:8a:79:ac:94:55:a8:44:00:7d:3f:13:
                    d4:21:61:79:69:d2:2e:32:02:fd:05:92:cc:1a:22:
                    a4:b0:7f:27:ed:99:5e:08:8b:42:64:df:49:51:61:
                    b5:42:8f:f7:c9:db:ed:4e:70:4f:4d:fa:e1:db:76:
                    83:ef:f2:fb:eb:3c:1d:8d:11:7d:24:e0:e7:31:99:
                    1d:43:60:d1:fe:6b:1d:eb:5b:e4:d0:82:70:56:0e:
                    46:9a:2b:92:db:15:b9:4e:f4:e7:5a:3d:6d:40:57:
                    fb:59:50:b4:40:20:2f:5f:9a:45:c4:cf:d2:55:f0:
                    84:1f:e9:2d:98:ae:91:ba:8e:ea:01:44:dd:05:8b:
                    05:4c:6f:bc:c6:69:88:2f:13:44:fa:b6:21:b5:dc:
                    a0:79:68:ea:16:c2:e5:54:da:ec:00:4a:8a:24:8a:
                    65:16:9e:12:b5:b5:2e:99:de:d7:13:3b:ef:10:15:
                    56:7d:1d:f3:f1:2f:7b:93:15:ae:bc:36:6e:6b:ff:
                    d5:9a:e9:b0:41:2b:f0:42:48:f8:fd:aa:09:6e:2a:
                    67:0e:a0:2b:51:09:8e:6e:b5:56:c2:70:ed:5e:08:
                    af:0a:f0:20:8e:bf:8d:cd:27:cf:62:4d:9a:3f:0c:
                    ea:77:35:41:70:74:48:b6:45:3d:d1:12:b2:97:5e:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:A3:58:C9:F0:8F:3A:21:61:AD:CC:86:03:59:BD:3A:43:16:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5bb6260-3656-36e8-ab1d-912cb63d424e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:64:f5:10:09:52:c2:38:2d:bd:2d:5b:0f:81:04:f1:80:95:
         ee:34:f6:22:0c:d7:17:85:6c:b3:08:a7:48:1f:a5:e5:40:d4:
         9d:35:76:bd:f8:2f:8d:c7:c9:b3:db:5b:39:a2:b8:68:e8:a3:
         c2:c9:6f:3e:87:10:85:a8:0e:a4:f2:ca:d7:7a:1b:c3:62:d8:
         01:60:2b:d8:a8:3c:22:c7:18:89:0f:2c:7e:e6:59:cb:ec:06:
         40:5c:26:bf:18:bf:e8:b0:26:8a:63:30:85:b7:1e:fb:d7:5b:
         fb:a4:15:fc:67:5e:5b:96:1f:fd:ca:2c:55:98:89:16:58:82:
         bf:87:82:f5:25:b9:35:21:e5:b9:d6:58:81:fd:e4:3e:35:ee:
         b6:35:41:be:80:96:79:32:59:18:77:20:84:cd:a5:b6:67:1f:
         1a:63:67:2c:f4:47:ce:be:d4:6e:75:51:5f:3f:85:fb:e9:02:
         c0:37:9f:e0:0f:5c:b4:12:c0:62:79:17:01:df:2c:77:46:59:
         4b:b9:ef:3e:60:e2:90:36:3f:87:8c:ea:f7:b1:39:b8:94:4d:
         be:ba:c6:44:f9:4d:2f:76:92:78:5e:e7:11:54:c7:a1:04:87:
         a9:33:56:80:ca:55:00:6b:fc:c1:72:ce:68:12:be:a2:ad:c7:
         9d:04:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:24:20 2025 by rpki-client