Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da803050-3402-3271-b8d7-3c72b7e19a8b.roa
File:                     da803050-3402-3271-b8d7-3c72b7e19a8b.roa (raw, json)
Hash identifier:          bNHg62Nv4VeEjrdYDWRIYYPIY9f90QCuSZ75yNU41+k=
Subject key identifier:   FB:E6:89:2D:91:4B:95:F6:B7:30:A1:BD:38:44:AE:16:DB:79:23:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA1833CC5A7864E9998D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da803050-3402-3271-b8d7-3c72b7e19a8b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.68.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:18:33:cc:5a:78:64:e9:99:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=61a609da-6992-4f07-96c1-885adcc06ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:23:52:86:12:be:fe:84:38:0a:29:7e:2a:74:
                    53:aa:41:df:86:d4:1f:3c:a8:2f:99:91:0c:26:6b:
                    be:8f:9e:ae:f3:19:01:c2:c3:82:e2:10:e4:49:e0:
                    e5:30:0d:c2:82:c8:f3:b5:3a:4e:db:52:61:82:b0:
                    6c:89:ab:30:f8:28:2d:dd:b1:ed:4b:74:c8:0b:17:
                    ea:73:8b:1f:7a:e1:dc:0d:35:64:f1:27:84:52:a0:
                    cb:40:2c:56:6a:e5:0a:ee:80:a9:ac:6c:e5:5e:a4:
                    ad:95:d4:0a:b5:92:7b:de:25:c7:7e:90:7c:2a:e7:
                    63:1f:fe:02:18:3b:53:6e:f9:b0:e3:d8:77:de:6b:
                    7e:00:c4:0a:ef:f1:4a:fa:da:67:44:22:df:e5:02:
                    e3:56:dc:21:1f:dc:38:a7:a5:bc:80:04:b0:d0:58:
                    61:a4:00:83:42:ad:45:ea:c0:8d:9e:76:6a:23:0a:
                    59:9e:f1:49:10:92:4b:65:bf:d8:ca:0a:4c:37:e9:
                    e1:73:24:7a:df:74:09:c8:8d:a6:3c:b6:78:50:db:
                    4e:a6:d4:75:35:89:90:bd:3c:90:07:03:b8:8f:b4:
                    25:e2:90:93:88:01:bb:5c:aa:ff:84:5a:b8:bc:ba:
                    1e:93:d6:34:94:b0:16:3c:22:cd:76:b5:96:86:72:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E6:89:2D:91:4B:95:F6:B7:30:A1:BD:38:44:AE:16:DB:79:23:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da803050-3402-3271-b8d7-3c72b7e19a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:77:ac:29:42:1c:a7:61:97:ce:6c:ec:37:14:69:61:5c:
         46:6e:33:74:0f:3c:67:fe:b3:da:df:a0:4e:3a:b3:63:c8:06:
         53:c6:68:9e:de:61:d9:26:b2:f0:3b:2a:01:95:ca:bd:99:cd:
         41:8d:f2:4a:f1:ff:f8:d3:7a:31:ae:78:4e:7a:dd:2f:17:89:
         3a:1d:a9:69:39:6c:ee:77:10:44:7b:33:0b:b3:15:c6:15:20:
         c4:7e:44:6a:7f:cb:08:88:20:2f:6f:e6:3e:08:d0:a9:7b:0c:
         f2:50:04:9d:85:63:4d:f1:f9:10:bb:b2:ec:e2:7d:1b:91:d7:
         9e:72:c5:ce:9f:45:92:ec:47:0c:d5:91:fe:f2:df:e0:ed:60:
         b6:ad:66:d9:dc:2f:85:45:75:2a:2b:48:91:88:07:9f:32:e6:
         ec:54:71:95:c6:ae:5a:f6:e6:06:af:62:07:96:f5:b2:d7:18:
         8d:5d:e6:df:24:0d:f5:11:7c:86:20:40:fe:be:42:61:fc:d3:
         0c:10:78:df:87:69:8c:07:a3:0d:d9:bb:32:87:db:12:b1:7b:
         f5:ba:a1:c0:04:48:b4:c6:72:3f:02:8c:ff:3c:8e:5a:8d:be:
         8c:14:1a:f4:bc:9b:1e:2e:d7:97:90:c9:84:1c:d5:04:b7:fd:
         15:3c:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:31:58 2025 by rpki-client