Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb58730e-ad7c-3e2b-925f-1ce9199c286a.roa
File:                     eb58730e-ad7c-3e2b-925f-1ce9199c286a.roa (raw, json)
Hash identifier:          6kLHXPWjDaYphKWRn9F8S76CKSkm27Mc5Fl51EHjFr4=
Subject key identifier:   0F:F2:27:58:93:82:15:77:11:60:E5:D4:D5:A1:AC:7B:5A:9A:DF:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A98D9A2F8BD6D22A859A32
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb58730e-ad7c-3e2b-925f-1ce9199c286a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        76.144.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:8d:9a:2f:8b:d6:d2:2a:85:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=501f5aa4-8c61-4295-a103-6abe49c90071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:7b:19:06:26:e3:6c:20:c5:e2:38:bf:f7:
                    5d:af:f2:04:fd:21:b1:25:0c:eb:9a:1f:08:6f:be:
                    6f:66:4b:cc:05:84:dd:5b:6d:ab:30:5e:aa:d5:6a:
                    8d:61:34:48:8b:07:00:90:14:d4:43:30:0e:71:07:
                    f8:0a:b7:94:05:98:e0:8f:1d:48:85:c9:90:4b:be:
                    13:f2:29:e4:f5:e6:c2:c9:f8:74:4f:b5:63:01:07:
                    24:66:1d:be:ca:d4:14:8f:8f:c0:4a:ae:3e:4e:83:
                    f9:42:00:e7:7b:6f:a0:91:55:af:0d:88:8b:9d:62:
                    51:c5:3c:a3:b8:e0:e2:e9:e5:98:41:13:93:ca:fb:
                    2f:03:20:79:e2:2d:11:25:a8:aa:64:81:77:23:ea:
                    09:db:7e:5e:5f:41:f4:4b:77:4c:2e:fb:f3:75:39:
                    77:af:c2:9f:38:cd:9a:41:4a:76:41:b3:df:21:b2:
                    3a:10:f7:72:bf:29:29:86:f2:dd:6c:ae:d1:c3:e1:
                    9c:73:c4:69:15:a4:9c:2e:be:20:a6:e8:47:74:0f:
                    02:b5:d6:28:6c:b0:8a:6b:e2:70:19:dc:1b:ab:fa:
                    5b:20:f6:ef:a0:c8:54:f8:84:5e:dc:91:8d:b6:11:
                    7c:9e:f9:10:1d:ff:ee:6d:42:9e:46:59:b2:b5:7c:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F2:27:58:93:82:15:77:11:60:E5:D4:D5:A1:AC:7B:5A:9A:DF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb58730e-ad7c-3e2b-925f-1ce9199c286a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:0b:f7:b8:57:9d:6d:76:23:26:04:fc:26:49:40:a2:0f:fb:
         06:2b:b8:ea:6d:f4:b2:f3:95:63:8a:2f:c7:71:33:6d:2a:e4:
         20:74:60:6c:d1:73:ef:60:ab:a5:80:72:f7:85:54:79:30:68:
         bd:8d:a4:e2:8f:ee:79:e0:c0:49:12:cb:7b:36:e4:ae:4b:be:
         ee:86:d0:3c:7e:1e:be:9c:80:a6:d7:5d:d9:6d:8e:0e:14:f9:
         5c:2e:70:ac:54:8e:f1:2d:aa:98:13:d4:a7:b5:21:e1:f5:00:
         29:e4:28:9d:2e:88:5c:78:7f:3d:b2:93:b0:71:23:e6:ff:66:
         0c:b4:55:13:08:71:67:db:85:da:b7:27:29:58:8a:f6:c7:ae:
         26:fc:33:2b:0f:11:56:f7:19:3b:d6:a2:65:93:80:a9:b8:39:
         5d:d1:f1:78:7c:49:8e:95:06:80:0d:86:e9:ad:60:3b:ba:38:
         89:d5:c5:4f:50:22:c6:b5:7f:90:e2:f2:90:a0:76:f2:8e:39:
         3b:3b:25:15:62:5a:12:7d:fb:2d:ac:d4:89:e0:72:f0:6a:61:
         2e:68:64:78:64:26:51:01:3e:04:81:e5:2e:f0:c8:19:99:fe:
         0c:be:16:3d:e2:c2:1d:52:04:e1:bf:a1:c1:81:58:66:63:29:
         f7:22:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:07:19 2025 by rpki-client