Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a7668c-3f90-3a8d-85d1-482310b2666b.roa
File:                     f7a7668c-3f90-3a8d-85d1-482310b2666b.roa (raw, json)
Hash identifier:          T78HxG8+fE1kMhChKpyu3NdUWjLfrprMlR6Ttehlua8=
Subject key identifier:   18:64:A2:EE:BA:4F:F1:0B:5B:F8:9E:33:D1:9F:4B:CA:F2:68:AE:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A90D0891BDA561F0B11C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a7668c-3f90-3a8d-85d1-482310b2666b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.136.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:0d:08:91:bd:a5:61:f0:b1:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=24adb04b-a1c7-45e3-9930-dac978571b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:5e:d6:dd:1a:b8:b0:d4:3f:c3:f4:c9:9e:
                    3d:a0:3b:86:39:bd:1a:09:cb:eb:be:77:1d:e2:4d:
                    83:d0:34:37:d0:70:dd:3f:5f:ab:ed:67:e7:04:1a:
                    52:5a:e7:8f:20:80:bf:1d:27:f6:69:42:5c:96:da:
                    d6:bd:00:ad:db:31:a3:b8:be:b9:68:01:e7:fb:4b:
                    06:ca:7b:c0:26:9a:96:98:56:39:54:62:2d:ef:bb:
                    fc:66:b8:06:7c:64:46:9c:46:da:6e:0d:e7:13:af:
                    01:73:88:f2:fc:a2:63:ad:50:76:dc:34:67:83:f9:
                    59:86:bc:d8:f0:76:a2:01:b1:34:83:65:51:ae:b1:
                    a9:d6:96:94:7a:ef:b4:96:e3:f2:4c:a7:b2:a8:f7:
                    f3:06:c3:08:f4:b6:ad:97:ea:2e:8b:a9:ec:81:51:
                    a0:be:e4:de:db:5a:9c:7c:95:7e:23:b2:2d:ad:4e:
                    3d:28:a5:c7:18:c4:6e:68:aa:48:3c:0f:53:1e:5f:
                    79:e2:16:60:c3:46:8a:12:59:00:6e:64:6d:1a:c9:
                    49:6a:97:3b:85:d8:ea:7b:3f:79:89:63:00:55:1f:
                    7c:48:69:3f:d8:2c:20:f2:3c:03:25:4b:03:28:c8:
                    64:fd:ad:a7:92:f7:c6:6e:32:d7:53:48:1d:46:7e:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:A2:EE:BA:4F:F1:0B:5B:F8:9E:33:D1:9F:4B:CA:F2:68:AE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a7668c-3f90-3a8d-85d1-482310b2666b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:c3:e0:d1:9f:03:a3:fd:2d:9b:11:18:31:2d:31:18:99:
         8a:fd:6a:12:44:ff:2d:c0:e6:3a:f9:ad:fe:f6:ef:11:dd:75:
         67:f4:bf:ae:85:04:5e:4c:94:4a:c7:b8:57:bf:0a:55:dc:27:
         13:56:4a:33:8f:75:0d:fd:48:43:6b:48:3c:04:bd:4e:7b:91:
         83:ff:ad:84:98:81:0a:12:44:54:63:6b:76:17:31:c1:4c:a8:
         37:0f:b4:22:8e:3e:0d:87:bb:ad:9e:55:2d:4a:7d:e1:e9:5a:
         26:73:bc:f1:35:d6:ca:fe:8c:00:eb:f6:b9:3f:f5:3b:d0:3b:
         cb:f5:48:69:9a:41:4f:01:77:69:13:0b:7c:03:44:6b:f3:34:
         f0:89:25:96:dd:c4:9b:07:8b:31:53:a5:79:37:16:49:ab:bf:
         bc:73:38:4d:2f:1a:d5:81:de:9a:f2:ac:e4:6f:ba:bf:e0:fe:
         b8:97:68:16:7e:f4:91:ac:ac:a3:10:fa:61:f6:8e:92:7f:7a:
         ed:d6:1a:21:33:d7:2e:87:af:3f:65:e8:24:03:72:79:0c:0f:
         f9:3e:dc:b6:bd:6a:1b:32:1b:a9:1f:02:fc:cd:6c:ae:d0:5f:
         54:45:62:65:0f:6f:89:47:91:bc:f2:47:f4:c9:84:2a:d6:46:
         ea:52:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:30:04 2025 by rpki-client