Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7960f43-febd-34b2-86ea-9842aad3aaf1.roa
File:                     f7960f43-febd-34b2-86ea-9842aad3aaf1.roa (raw, json)
Hash identifier:          1Q7jSiGmbZ6FxyGxulgBpYVJG2Nb34+I3Ar1K886SV0=
Subject key identifier:   25:40:0E:F7:2E:A8:50:65:14:9D:4E:85:48:66:63:0C:9C:01:B2:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9CBEDE19BDBFC77FF6E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7960f43-febd-34b2-86ea-9842aad3aaf1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.142.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:cb:ed:e1:9b:db:fc:77:ff:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=7286c502-bfe2-4eb1-ac35-7cf08fd79513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:90:80:66:34:89:5d:fb:91:aa:7b:32:61:
                    d8:f9:eb:ba:f2:9f:ae:49:b8:bc:de:8a:16:90:71:
                    75:17:79:1a:2e:7c:19:98:26:76:c5:53:c7:f3:54:
                    e4:f5:27:eb:2d:95:01:f2:e0:cf:ba:e5:c4:50:76:
                    06:c0:cc:b2:da:e2:e5:be:a1:4c:28:ae:76:35:54:
                    45:5e:2f:77:6f:68:f6:4b:48:39:50:13:15:c2:3f:
                    74:52:5d:3b:17:07:3c:80:2d:51:14:04:5c:d7:0b:
                    58:27:1b:38:6f:81:77:df:25:a7:da:cb:4f:3c:30:
                    82:ed:e3:0d:f9:d3:99:12:4e:17:9c:a6:98:ea:72:
                    ee:87:f8:0c:4b:08:15:a3:92:69:e9:0e:43:5f:3b:
                    a7:e3:36:d3:40:01:d5:e3:5e:da:ae:0f:a5:a4:a2:
                    2c:d1:6e:d6:c2:45:33:31:4b:02:a5:32:f3:4e:ad:
                    ed:4e:43:68:74:e7:5c:7a:54:4d:36:50:07:9a:bf:
                    d7:2d:c7:ff:7b:bf:77:3e:9e:1a:81:ef:61:ad:fe:
                    02:8f:dd:52:3e:8d:ea:b0:5d:2d:9a:ef:fd:3f:77:
                    d1:8c:24:af:a7:9c:22:04:20:b3:82:4d:bd:01:ba:
                    07:22:e0:54:0d:d8:fc:c9:db:3d:03:4d:1c:63:23:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:40:0E:F7:2E:A8:50:65:14:9D:4E:85:48:66:63:0C:9C:01:B2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7960f43-febd-34b2-86ea-9842aad3aaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.142.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:76:d1:b2:ba:21:01:30:1d:18:d1:28:ac:c7:29:08:8a:
         10:3b:65:75:ce:93:2c:a7:d0:c9:f1:5e:39:31:33:37:21:f2:
         3c:4c:02:4c:14:35:02:bd:81:08:75:9f:d1:25:b3:13:a1:8a:
         d6:d8:7e:a7:bf:48:8c:4e:67:7c:41:5d:ff:26:46:2f:93:99:
         54:e7:53:40:44:73:bd:c0:5f:9a:33:7d:e0:12:7f:d6:d7:40:
         6e:e4:f5:a5:96:aa:1b:54:b3:bd:57:95:15:58:2f:6e:02:b3:
         55:f7:6d:ac:49:dd:2f:9d:28:bc:91:b6:93:c5:f7:1a:85:66:
         be:01:94:dc:33:8b:34:b7:94:a9:4c:55:40:14:e0:5e:99:f1:
         d7:6b:47:e9:ad:7a:3b:f4:e8:e5:e4:65:35:5b:51:e3:cc:46:
         22:7d:c8:7c:a4:26:fc:a5:57:99:a3:d9:00:a5:de:3e:d2:da:
         15:3f:93:52:bc:ee:03:ae:df:01:1c:6c:a3:63:86:ac:a4:6a:
         65:f1:01:3d:3c:08:fa:e4:da:a2:5b:55:70:79:a4:26:65:45:
         f1:64:d4:46:47:2d:97:1f:7d:16:ad:37:79:ac:90:06:11:78:
         5d:b3:1a:d5:69:a0:7f:37:bc:5c:7b:84:17:7c:ab:78:5f:bc:
         40:35:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:53:48 2025 by rpki-client