Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256de690-d4c2-3bbb-ad39-bdd218f9aae9.roa
File:                     256de690-d4c2-3bbb-ad39-bdd218f9aae9.roa (raw, json)
Hash identifier:          4kMBQ8gVFKEcM5DnhVu+ZpgsqkoZaMQuySdblxB6bCU=
Subject key identifier:   3B:74:DE:73:C2:30:A6:DF:4E:E1:6F:F5:FF:9A:83:83:34:F8:24:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD1C513F2F30520BE6A760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256de690-d4c2-3bbb-ad39-bdd218f9aae9.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.2.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:1c:51:3f:2f:30:52:0b:e6:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0c23f3dd-7a24-4c6c-b25a-b313d6836a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:2b:80:88:50:e8:56:8b:38:bc:3e:ec:5a:
                    e9:46:f6:b0:81:37:27:29:7d:ba:b5:3d:77:26:0b:
                    ce:c5:89:7a:a7:be:26:0c:85:8c:d4:fc:a5:02:64:
                    0f:0b:6f:69:6b:60:66:95:8c:d4:8c:82:e2:38:2e:
                    41:2d:7e:e9:61:6d:3d:03:ad:59:e0:7a:60:71:ef:
                    06:25:82:e2:e9:37:ac:93:b8:9b:15:f0:95:5e:72:
                    0b:dd:e6:5f:03:c2:b0:8a:70:3c:b2:51:0d:08:1c:
                    a5:83:5d:09:c2:16:c8:b6:9d:12:0a:6f:b1:6e:3f:
                    93:6b:5c:49:c4:b4:df:43:3d:bd:02:65:b5:a6:04:
                    9d:d2:a0:0d:30:ab:7e:22:46:33:3f:a7:16:8d:31:
                    86:1d:89:bc:1a:07:a9:35:d7:a9:2f:0f:7c:2a:bd:
                    bd:54:fe:41:16:18:dd:d1:8d:a1:9b:e9:a7:7e:cb:
                    79:d5:d8:f7:98:63:89:35:d1:71:a1:52:c4:c8:68:
                    2f:66:9e:f7:4a:76:8d:87:43:b5:ac:6c:65:f4:1e:
                    e0:a0:82:7d:5a:94:a2:be:f6:d5:08:37:08:16:c9:
                    a7:ef:05:f9:bf:3d:3f:fb:74:4e:65:a4:d8:db:e3:
                    05:f9:28:b0:c8:46:61:34:73:47:29:c4:57:01:04:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:DE:73:C2:30:A6:DF:4E:E1:6F:F5:FF:9A:83:83:34:F8:24:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256de690-d4c2-3bbb-ad39-bdd218f9aae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.2.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:f8:c4:46:16:40:5d:45:2b:f7:dc:68:3e:a6:98:3b:b5:
         f1:3e:bf:de:89:ff:0b:a9:e7:2b:bd:e5:74:66:e7:c1:65:23:
         05:14:62:d1:db:f8:22:fd:f5:45:16:03:ac:d4:55:73:0b:d4:
         17:46:d9:63:c5:38:ef:74:2b:14:74:8d:ab:f7:ae:2b:bb:9d:
         49:5d:6d:50:02:75:0c:31:5c:f4:3c:ba:f3:e2:e5:a2:10:7c:
         7f:4a:09:4b:2f:b3:21:e7:2b:8f:e7:df:b9:42:cb:43:be:d6:
         1e:7d:bf:a7:d9:30:62:48:09:ca:c8:fa:ac:0d:a4:e8:dd:c2:
         84:61:03:bd:79:56:1a:d2:39:1b:80:24:96:0e:55:09:f8:5b:
         74:40:40:52:51:1d:5a:a8:ab:18:db:f7:31:f4:28:8f:11:08:
         05:8c:2c:87:55:10:c4:74:48:9b:c9:a4:5d:55:14:2f:96:5f:
         36:ad:f3:90:33:b9:ff:ac:c5:dc:9c:18:7c:c9:54:8f:76:16:
         b4:25:fd:93:03:34:d5:3b:dc:c6:15:ea:25:78:cc:8b:94:83:
         48:eb:19:44:df:4f:e7:64:4e:f5:6b:0c:0f:e0:01:8d:d8:8f:
         24:4a:b3:7c:01:9c:2e:76:f7:73:7b:8b:81:f7:0a:64:9c:53:
         5e:0a:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:46 2025 by rpki-client