Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fea2e4-3ae2-3291-95d3-f198e9df79b5.roa
File:                     f0fea2e4-3ae2-3291-95d3-f198e9df79b5.roa (raw, json)
Hash identifier:          BmGDmQlwti+Ls3lRBTfE/uwVv7hnU8GYSuwM2t0z2/M=
Subject key identifier:   BC:3C:E7:C9:FB:43:4A:5E:65:2D:F3:3B:E3:94:1A:71:EF:00:76:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9CA99FBDD7C8F5A114100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fea2e4-3ae2-3291-95d3-f198e9df79b5.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.142.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:ca:99:fb:dd:7c:8f:5a:11:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=167cdb2b-fe83-4258-a42b-8f2ea09bc4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:f6:7b:7e:c6:23:5c:16:f5:cb:b9:b5:a5:
                    5f:aa:ed:4d:33:6d:a9:52:15:cd:d9:7b:0d:bd:d0:
                    7b:70:0e:4e:6e:d7:78:21:49:a7:57:07:b3:b7:eb:
                    01:cc:d6:5f:94:4a:29:00:29:af:93:c0:9b:cd:4f:
                    ad:0e:cb:cc:5f:11:84:ac:f6:73:06:bc:f7:32:d4:
                    e5:59:f4:c5:59:21:ad:ad:7c:72:00:c8:31:64:4e:
                    93:cf:6c:fc:ab:ae:28:f7:55:a8:db:9b:0d:41:41:
                    42:0e:be:8e:4c:ae:0e:3c:ca:84:70:e9:e1:c9:fe:
                    20:f4:58:45:24:17:30:54:71:73:a8:50:71:1e:89:
                    01:54:88:0b:cc:75:d2:ac:5e:3b:15:7b:5f:2c:30:
                    ac:e6:7b:59:9b:be:cd:0f:c7:aa:d3:1a:c1:37:ba:
                    d9:cc:65:9b:02:9f:fa:20:60:91:08:44:0c:55:52:
                    88:a5:e1:3f:6c:1e:87:ab:ea:7e:79:32:e8:fe:e5:
                    17:e6:a0:4c:42:e0:92:9a:c3:ce:0b:b9:5f:d8:04:
                    ec:57:0b:62:32:87:46:dc:f9:67:ef:a5:cc:2a:46:
                    73:ff:ac:62:7c:fd:47:64:30:3a:67:3d:13:95:21:
                    df:26:6d:04:72:a5:a5:ab:f9:f6:e6:14:fb:08:1b:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:E7:C9:FB:43:4A:5E:65:2D:F3:3B:E3:94:1A:71:EF:00:76:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0fea2e4-3ae2-3291-95d3-f198e9df79b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.142.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:14:f9:8a:39:65:2f:89:05:0a:60:35:90:dc:4b:eb:2b:
         d2:d4:69:26:72:2e:4c:1e:cc:cf:0e:99:11:7d:dd:b1:6a:1e:
         de:76:d4:ed:b4:40:b7:fd:78:09:c6:8e:2a:c1:c6:6a:aa:7f:
         a1:72:8c:50:4b:80:bb:c8:8f:bd:e8:fa:65:45:8c:3c:0d:04:
         ea:5a:18:ee:c9:e4:99:61:c6:2e:ea:f5:de:46:d1:09:ad:6e:
         2d:18:22:01:c4:88:4d:57:d5:64:8e:8d:7d:7e:3a:5f:24:f4:
         42:19:b7:6e:d7:6f:e7:d4:25:64:ce:39:5a:de:ad:54:fe:30:
         6d:89:f3:cc:7c:5d:1e:61:3a:d7:b7:b1:9a:38:f4:f5:09:1f:
         c8:34:37:de:fc:d1:e4:04:71:b3:aa:4e:4f:29:f8:16:c5:9c:
         47:92:f4:3b:f6:9c:de:19:d1:d5:1d:ef:33:44:01:cd:ec:08:
         7e:a9:86:28:d7:69:5c:20:b7:20:d3:bb:10:3f:65:65:79:25:
         ac:ce:66:9f:73:0b:43:69:f1:dd:7e:b6:06:d2:89:7d:80:57:
         7b:d7:0e:18:e6:b9:5b:36:d0:b8:17:78:cb:c1:9f:b7:4d:52:
         12:d9:6f:16:f1:1d:68:e1:e8:1e:90:2a:63:5a:97:4f:d3:18:
         8e:7a:8b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:25:48 2025 by rpki-client