Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbb54c71-f53f-3f04-9d5e-67213cf52f5b.roa
File:                     dbb54c71-f53f-3f04-9d5e-67213cf52f5b.roa (raw, json)
Hash identifier:          EdmQuLmNOrEhabsjiAK2bpeoc/RKSuqG90kMQzGpZYE=
Subject key identifier:   13:D9:38:43:D5:30:35:68:76:32:1C:B3:38:43:48:78:53:BF:3A:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A83591BBD5C58A03989468
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbb54c71-f53f-3f04-9d5e-67213cf52f5b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.159.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:35:91:bb:d5:c5:8a:03:98:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=33df34aa-1de5-4ef0-902f-9e876550e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:92:1e:c6:c3:b3:82:5f:d2:de:53:e1:0a:
                    19:7b:b1:7a:d8:b3:df:cb:17:57:ae:8e:43:cc:35:
                    ca:7d:51:e8:de:0a:01:1b:b2:36:3c:01:8d:da:d2:
                    d3:8d:a5:a4:50:15:2f:02:2f:8b:70:40:9a:a4:8a:
                    0b:89:01:34:be:2e:bb:58:d0:70:64:17:26:d9:fb:
                    3d:fa:f1:87:f8:38:90:52:1e:af:4d:35:12:87:5a:
                    cf:0e:82:42:38:86:8c:ed:46:f0:ed:9d:7e:3e:49:
                    6f:33:96:3f:b2:49:cb:e9:06:c9:36:7b:35:fd:ec:
                    6a:88:16:38:9d:0f:44:4e:4d:a0:0b:c5:76:64:8e:
                    75:c1:69:2f:52:3e:09:f5:33:22:77:6b:eb:62:9a:
                    17:bd:cd:15:f2:31:6d:92:86:e6:d5:fd:ff:d8:88:
                    0c:fe:73:56:67:b4:38:18:47:76:24:3c:43:28:24:
                    ef:a1:8b:39:72:c4:a5:f1:f6:b3:36:ce:97:4f:de:
                    39:53:97:3e:08:9c:6f:18:08:23:12:fd:6f:d7:da:
                    84:ac:19:b6:26:44:8e:83:70:7a:47:a1:37:12:21:
                    b8:27:05:8a:94:4b:3e:98:2f:80:10:03:ad:c2:5e:
                    d7:f0:37:3f:32:08:e4:5f:c6:8a:f5:66:22:62:c5:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:38:43:D5:30:35:68:76:32:1C:B3:38:43:48:78:53:BF:3A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbb54c71-f53f-3f04-9d5e-67213cf52f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.159.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:8f:7f:ed:0e:bf:e3:2c:e1:61:97:55:8b:79:54:96:52:
         26:a2:f1:37:2e:bd:ff:d1:e7:73:48:9b:39:58:78:12:f0:50:
         ca:cf:fd:e4:ef:5d:13:12:ee:45:2e:7f:0f:c0:e3:88:69:44:
         53:9f:13:98:37:a0:29:0f:90:1a:48:10:1f:16:d6:b9:0d:48:
         70:3b:ef:9f:0b:69:98:9d:ec:47:f2:f9:b7:69:75:71:cb:e4:
         0a:78:cf:6b:25:63:48:0a:ed:48:81:82:f5:94:b0:a8:c1:98:
         d0:20:13:fd:63:01:07:72:64:46:35:a1:16:b0:83:66:7a:0b:
         8f:d2:68:ea:80:e1:d3:af:f8:9d:4e:69:72:92:36:40:2e:a7:
         3c:70:88:a9:fe:ac:a3:92:2d:c8:ff:90:3b:43:99:9e:fa:9f:
         e8:fa:1b:9e:fe:41:8d:d8:31:66:1e:b5:cd:aa:c3:22:fe:1b:
         a1:2d:a6:30:b9:9d:38:d5:56:f9:ab:5a:ab:34:59:34:07:d2:
         43:8d:c2:93:9a:3d:96:de:6a:73:71:f3:47:5c:f2:4a:7b:85:
         18:05:36:68:52:8b:97:02:c2:83:bd:86:da:75:51:49:b9:0f:
         da:e2:6d:62:31:5e:c3:d2:03:b5:14:2a:f5:b6:16:b4:b5:d8:
         bb:f0:14:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqDWRu9XFigOYlGgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
MzNkZjM0YWEtMWRlNS00ZWYwLTkwMmYtOWU4NzY1NTBlOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApomSHsbDs4Jf0t5T4QoZe7F62LPfyxdXro5D
zDXKfVHo3goBG7I2PAGN2tLTjaWkUBUvAi+LcECapIoLiQE0vi67WNBwZBcm2fs9
+vGH+DiQUh6vTTUSh1rPDoJCOIaM7Ubw7Z1+PklvM5Y/sknL6QbJNns1/exqiBY4
nQ9ETk2gC8V2ZI51wWkvUj4J9TMid2vrYpoXvc0V8jFtkobm1f3/2IgM/nNWZ7Q4
GEd2JDxDKCTvoYs5csSl8fazNs6XT945U5c+CJxvGAgjEv1v19qErBm2JkSOg3B6
R6E3EiG4JwWKlEs+mC+AEAOtwl7X8Dc/MgjkX8aK9WYiYsXeAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPZOEPVMDVodjIcszhDSHhTvzqIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJiNTRjNzEtZjUzZi0z
ZjA0LTlkNWUtNjcyMTNjZjUyZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ/2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJrj3/tDr/jLOFhl1WLeVSWUiai8Tcuvf/R53NImzlYeBLwUMrP/eTv
XRMS7kUufw/A44hpRFOfE5g3oCkPkBpIEB8W1rkNSHA7758LaZid7Efy+bdpdXHL
5Ap4z2slY0gK7UiBgvWUsKjBmNAgE/1jAQdyZEY1oRawg2Z6C4/SaOqA4dOv+J1O
aXKSNkAupzxwiKn+rKOSLcj/kDtDmZ76n+j6G57+QY3YMWYetc2qwyL+G6EtpjC5
nTjVVvmrWqs0WTQH0kONwpOaPZbeanNx80dc8kp7hRgFNmhSi5cCwoO9htp1UUm5
D9ribWIxXsPSA7UUKvW2FrS12LvwFFQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:26:01 2025 by rpki-client