Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa
File:                     f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa (raw, json)
Hash identifier:          tCR6eLsJxmhQeJU7/KjS8fNpDYU3ESzRxavASAJfmIU=
Subject key identifier:   2B:00:99:36:C5:3C:06:F0:69:34:7D:B6:52:A5:9C:54:CB:6A:7D:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8E1E228D304EAB9645700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        73.161.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:e1:e2:28:d3:04:ea:b9:64:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2bfc68c2-a328-4d96-8f94-440780f091e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:c6:da:9c:70:4d:96:78:17:bc:cb:01:e6:
                    d6:a1:6f:6c:bb:0c:91:2e:05:bb:08:fc:77:aa:49:
                    5b:a0:aa:32:c7:46:11:6a:ad:d1:0d:82:73:0a:83:
                    b8:de:d0:dd:8a:dc:ed:92:b7:93:fc:ea:39:44:fd:
                    0f:55:15:3d:3e:25:5d:1f:25:82:08:97:8a:1b:36:
                    76:df:24:f8:ee:da:cf:b2:41:52:16:5e:63:a4:9e:
                    f0:4b:f2:7f:64:55:07:40:de:8e:20:d6:30:d3:9f:
                    cb:07:b5:0c:45:b7:b6:19:1e:d6:2c:03:af:38:5f:
                    76:b1:cc:d9:9c:42:8a:f5:1d:6a:9b:36:e0:ec:1a:
                    09:a6:79:cd:71:ba:60:81:68:b8:74:a5:bf:97:7d:
                    d9:4d:8d:cf:83:6d:e7:6d:ab:2f:28:d1:65:9d:57:
                    c9:41:3d:78:5d:a8:b0:41:78:01:49:f6:05:cf:67:
                    ee:b3:f0:14:0c:0e:63:af:50:6d:9d:36:77:5f:fa:
                    98:f3:cd:ae:93:64:f2:7a:79:e8:4a:17:4b:e3:c6:
                    10:46:ca:73:f9:2d:1a:e4:c4:cc:73:b3:b5:a7:ff:
                    c5:1a:fe:89:8a:85:38:54:01:e6:8a:75:61:85:a7:
                    41:70:b0:0e:0c:72:8a:3f:7b:36:51:31:8d:ba:72:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:00:99:36:C5:3C:06:F0:69:34:7D:B6:52:A5:9C:54:CB:6A:7D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6cf2c3d-c888-3bd0-8c1b-63cdd417d7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:16:57:b5:20:c7:4a:81:b8:89:15:74:90:04:c7:a0:7b:74:
         75:87:5c:b5:5b:02:b1:f9:39:1f:3d:37:82:38:ba:6e:d9:54:
         33:38:98:9d:fd:48:50:a1:2c:c6:c0:39:5a:50:88:98:86:b8:
         95:f1:c1:2d:cc:bc:c3:44:0a:25:81:8e:1b:f9:18:a5:9f:ad:
         e9:89:75:aa:10:ba:fa:4d:58:2d:38:13:e6:89:87:57:ae:00:
         62:82:1d:40:91:81:25:7b:46:75:19:f1:14:52:1f:d9:ef:bd:
         69:a5:73:bd:37:c3:4d:50:7b:eb:1a:ee:04:15:85:d0:85:be:
         58:7f:c7:15:fa:47:0c:5e:43:31:54:ea:6a:92:b1:a9:76:48:
         09:02:52:d5:85:58:f0:06:5e:e6:56:f3:b8:bb:1a:c5:86:46:
         13:86:03:d1:2e:83:a4:52:c7:5f:05:1c:46:77:0f:8f:25:cd:
         5f:61:0d:6f:8e:09:73:0b:ad:9d:39:1c:9a:77:f5:44:9d:82:
         87:a3:4f:e8:af:b5:47:73:f4:4a:ec:92:53:7a:1b:5b:60:0f:
         1e:43:9f:75:13:95:fb:75:34:4e:40:d6:6d:12:97:53:14:51:
         9d:b8:db:99:42:86:b5:fa:d1:ba:20:96:20:56:b8:ba:02:50:
         96:98:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:58:16 2025 by rpki-client