Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa
File:                     435ca439-240f-3cb8-a981-de5080176e6e.roa (raw, json)
Hash identifier:          9xLRE3BY9fVASvvb2oo7ULcC6oooKcMF9Z3dMLyLlUg=
Subject key identifier:   B1:DD:C7:63:F6:56:32:99:DA:24:F4:05:EB:B9:F9:97:B5:22:B1:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD7841A4415CE8F6954F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        75.66.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:78:41:a4:41:5c:e8:f6:95:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ed6e5772-0493-4c77-b2b6-a24b203a9da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:bc:d1:06:9d:bd:c2:1d:75:9b:70:2b:68:
                    47:8f:10:27:68:0c:1d:d1:52:66:cc:d0:98:38:74:
                    1c:4d:a4:a9:fc:a5:30:6e:92:5c:97:d1:1e:5b:54:
                    67:e7:e9:50:6a:c6:62:cf:66:c0:a1:b0:12:b0:fd:
                    f1:3f:ee:8f:42:e8:a1:94:9a:d7:d0:6d:41:45:ff:
                    00:81:8c:86:89:e6:cc:cf:37:4c:f9:60:4f:77:83:
                    7e:9a:10:98:58:7f:62:83:32:5a:5c:d4:00:1a:f8:
                    c1:8b:e4:4b:27:dc:8c:9c:75:39:02:08:89:ed:6b:
                    e0:6c:40:8d:5e:47:41:a2:08:8c:0a:d0:5b:5b:07:
                    6b:39:05:53:aa:79:02:00:c8:bc:e4:90:8c:32:f7:
                    15:5a:45:d3:e9:68:d9:7d:07:e6:10:6e:78:1e:6d:
                    e1:29:15:d1:f1:30:cd:6b:d3:9b:0f:34:27:e8:a2:
                    d0:a1:d2:06:e4:23:70:ec:53:ad:b9:5e:c9:7c:6c:
                    3f:8c:e5:83:cc:71:c2:2a:a1:e7:d3:26:f5:32:68:
                    6b:d9:2c:37:e9:e9:14:f2:d4:8e:3b:2a:ec:8f:d2:
                    ba:c8:6f:ba:70:c4:48:e7:54:0e:52:26:25:99:04:
                    75:f5:3e:8b:6b:4e:8e:90:9f:51:7f:84:2e:c6:93:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:C7:63:F6:56:32:99:DA:24:F4:05:EB:B9:F9:97:B5:22:B1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:5b:55:fd:fe:7a:db:44:89:7d:ad:b2:44:a4:2f:0b:af:0b:
         7f:74:bc:cc:21:73:d7:85:56:37:4a:d1:99:c1:bf:3a:8c:f6:
         27:f2:73:0c:76:28:23:bc:fe:23:e4:2d:79:37:ad:e7:38:0c:
         60:77:10:4a:b8:aa:44:0e:33:15:3a:87:3e:f5:04:00:5d:46:
         ef:0c:14:a9:60:2f:cf:8a:4e:c8:0e:d8:7b:b7:8f:21:b2:21:
         fc:13:f1:02:ad:2f:4d:de:75:b4:4b:8b:d6:f8:f8:12:b1:a5:
         fb:1e:ca:4f:cd:da:fb:bc:69:80:d8:1f:4c:03:ab:73:4e:af:
         11:7c:bf:29:0d:59:bb:35:e1:c8:09:e5:73:b1:e8:85:9b:6b:
         62:65:ed:58:cc:c1:37:bc:10:07:79:ed:01:c5:0f:39:fb:c9:
         a4:1a:f2:db:e5:ae:f2:0c:87:a3:53:90:90:83:77:9d:39:6c:
         9c:7e:bc:88:c8:47:a2:40:0f:05:d5:ee:24:e0:89:16:6a:91:
         ee:47:56:64:d3:86:b0:7a:c1:e4:93:34:dc:79:0c:6b:62:f1:
         1b:db:a5:f1:f1:0a:9e:20:76:0d:78:fa:45:85:7b:72:b8:2d:
         c0:db:79:cd:6b:84:57:2b:8e:c1:f0:fe:b1:95:8b:a4:71:ad:
         97:3d:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:15 2025 by rpki-client