Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3a790-235e-3d4f-97d6-ae9dedc1b5cb.roa
File:                     08f3a790-235e-3d4f-97d6-ae9dedc1b5cb.roa (raw, json)
Hash identifier:          C+dpLnfH5xrbk5iKAutBI9Ahqlf0pNIpA+0UBQ73v0o=
Subject key identifier:   04:DB:B3:FF:77:26:84:EE:14:F8:B0:72:DD:E3:E9:97:C3:2B:BB:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD81FFDC6034AB5497FB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3a790-235e-3d4f-97d6-ae9dedc1b5cb.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        76.138.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:81:ff:dc:60:34:ab:54:97:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=e5d6d0b5-e2ff-496f-9259-2c3ff5fd11d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:a1:b5:63:f8:bf:2f:f6:e8:7b:80:2d:d9:
                    57:f4:ff:1b:8b:34:2f:63:07:d3:1d:aa:74:9b:f3:
                    8a:ab:8a:69:b4:2a:07:0d:7e:8d:ef:87:b5:33:1d:
                    3c:1b:ba:ca:30:44:82:01:35:1e:4e:ff:d0:a6:84:
                    84:53:37:5c:6a:2e:c2:92:8b:b7:e3:ca:50:b8:27:
                    2f:9c:70:5a:1f:c3:d1:fc:c5:3d:97:2e:2c:2b:e3:
                    82:12:86:38:0e:58:2c:9d:74:9a:97:d0:7b:32:6b:
                    81:49:56:48:77:23:06:0b:2c:0a:1c:51:61:d2:57:
                    18:18:46:69:6d:09:6c:90:21:65:4b:1a:f8:68:df:
                    56:c0:9a:c4:b6:22:41:de:8b:78:56:17:d1:cf:f3:
                    cd:58:24:32:7e:9e:36:7d:2e:7f:85:bd:56:7f:03:
                    24:0f:3c:a5:81:56:06:d3:b5:c4:4a:7b:b9:94:38:
                    d1:db:a5:2d:6d:5e:51:e9:70:bf:4c:0e:93:3d:77:
                    6b:6f:1a:54:49:cf:5c:65:59:9b:81:18:b4:70:8e:
                    fc:f3:0a:51:1a:34:fb:4c:11:69:9e:52:b3:83:c4:
                    62:68:f4:c9:48:5f:e1:31:99:7d:83:74:97:d8:44:
                    db:f0:3e:84:03:e6:fa:17:8b:ae:e4:25:db:5a:79:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:B3:FF:77:26:84:EE:14:F8:B0:72:DD:E3:E9:97:C3:2B:BB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3a790-235e-3d4f-97d6-ae9dedc1b5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:92:13:0a:38:36:17:8c:1f:79:de:3b:7a:d5:a9:3f:28:df:
         07:7b:79:95:d5:0b:8d:92:1c:b0:2a:c4:2f:f4:e6:2c:e3:44:
         fc:2f:7a:0b:2f:88:67:fe:8c:5b:a1:ce:9e:8b:0b:0a:52:59:
         58:13:78:bb:d6:47:08:4f:87:1e:c7:8d:ce:ac:db:cf:50:37:
         02:ba:fd:20:71:fd:25:f7:04:e3:b6:ff:8a:90:eb:8c:bb:4a:
         63:76:dc:c7:6c:15:de:69:bf:dc:90:26:e8:cb:60:76:c2:44:
         7d:2e:17:6f:47:0b:40:df:f2:31:3a:41:b2:c5:87:de:30:70:
         a1:ff:b5:cb:ec:bd:cf:9d:38:ff:93:8b:73:e1:c4:35:5a:9d:
         28:b4:9e:54:d4:61:d1:ac:49:ab:54:34:cf:e6:d9:5c:d4:92:
         df:f4:45:fb:00:55:21:16:e4:d7:0c:f1:92:3f:8f:96:73:e0:
         b2:02:bc:0f:0a:04:d9:9a:52:f9:0b:a1:2d:ca:8f:0a:37:19:
         50:7d:7f:39:23:25:c8:0f:76:7a:c2:51:dd:d4:a8:16:c1:72:
         f6:b5:f0:79:5b:47:81:17:b3:fb:88:65:ed:1f:5e:04:79:6d:
         d7:66:62:da:90:63:3a:ff:e8:37:f7:45:27:73:5a:c9:a7:67:
         67:26:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:34 2025 by rpki-client