Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa
File:                     faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa (raw, json)
Hash identifier:          qKJr1CaoTxm0CuU1CO/64JG1s3acIxelb3E7gphwkno=
Subject key identifier:   42:52:C1:A3:F2:26:C8:F6:8A:BF:A2:7C:86:8F:AD:4B:38:43:9A:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA870A7400A4F5A586D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        76.112.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:87:0a:74:00:a4:f5:a5:86:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a6ba4196-3abf-426e-9b95-4070fb744101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9d:89:a9:39:2e:f0:a7:36:77:79:8e:28:78:
                    f6:e4:f9:b1:c5:79:a2:dd:80:8f:3b:26:c7:68:a6:
                    0c:7f:f1:83:90:22:5f:1b:27:8c:f7:07:c7:06:7b:
                    5c:e1:8c:92:d8:8e:e0:29:54:73:ea:30:a3:c2:e5:
                    d2:d3:f1:b4:8a:bd:b8:91:e9:d6:57:9e:90:b9:0c:
                    26:34:f0:83:0b:a3:59:b2:e7:b5:f4:de:d5:6a:52:
                    9f:34:7d:47:bd:ff:0e:80:6b:7c:ee:ab:dc:1e:27:
                    e5:6b:48:e6:9e:0a:54:03:14:00:89:b5:56:bd:f0:
                    f0:4e:01:9d:ff:61:97:1d:b7:b6:39:45:d7:ba:99:
                    00:8c:43:7f:7e:e1:c4:ef:ed:99:26:69:1f:61:16:
                    ae:cc:c7:2c:ce:23:34:0a:e6:ac:db:37:0e:da:98:
                    5b:46:66:3c:b8:e4:3b:50:a2:8e:cd:6b:e0:d0:0f:
                    05:00:1c:6b:43:e6:53:18:7a:02:d5:62:b8:c1:87:
                    7d:d5:db:a6:f9:78:0d:51:e3:95:b9:e4:47:b0:51:
                    d1:1e:c8:d4:0d:2d:cf:ea:4e:c0:e6:3e:45:bf:1f:
                    84:ef:64:12:0e:ee:60:21:ae:14:c3:9f:9f:e8:fe:
                    bb:19:96:84:49:39:e7:25:32:59:3b:29:ea:1d:fb:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:52:C1:A3:F2:26:C8:F6:8A:BF:A2:7C:86:8F:AD:4B:38:43:9A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:33:44:18:90:92:f9:d1:c3:0c:3d:05:62:ab:58:5d:9f:
         25:0a:a6:7b:85:1b:b5:05:c6:96:e6:f7:cf:d2:21:7b:5e:9f:
         68:3c:20:4d:1e:14:8c:c5:4f:0f:94:95:36:05:72:f2:02:1d:
         59:ae:ad:8f:dd:ec:6e:81:e0:7d:b5:4c:08:ae:f6:cc:fa:70:
         e6:ad:8e:7d:3d:7c:ff:08:35:9b:02:9d:72:08:7f:d4:ed:6b:
         f1:84:b1:ed:6e:aa:ce:2d:a9:05:c2:8c:ee:d0:32:bd:21:a2:
         08:ef:b7:75:2c:97:13:9c:19:31:db:d0:5a:dc:02:bc:60:fa:
         cf:58:eb:65:71:d7:62:dc:e2:1e:00:c7:ab:30:dc:49:6b:f6:
         9d:87:3a:43:22:42:49:7b:f2:36:43:e0:b3:01:8b:19:f1:de:
         95:12:ca:50:f9:c5:52:42:59:3f:3e:3a:c9:b9:94:93:d2:af:
         20:79:65:5d:9a:04:09:8a:16:14:6c:48:60:8b:ff:3b:d0:07:
         d4:2b:6f:00:b7:22:26:cf:40:12:c9:9d:42:13:76:6e:c3:9e:
         96:ef:48:b9:94:92:ff:c6:df:6a:0e:bb:f1:48:00:c4:d8:2f:
         56:96:7b:91:0f:d1:11:df:37:d8:0e:d2:cc:5e:c1:e0:88:4c:
         c8:e9:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:54:29 2025 by rpki-client