Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4435e143-9aad-3c79-97ea-eb8dbc168c77.roa
File:                     4435e143-9aad-3c79-97ea-eb8dbc168c77.roa (raw, json)
Hash identifier:          OlWfTVmKnpBdi9KUdGvMIa3C8+V9iBYFZsjLmfRdDxI=
Subject key identifier:   39:42:2B:08:79:5D:C4:D2:4C:5A:77:3D:96:BE:BD:87:66:0B:F3:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD5D955CA5FB56353C2C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4435e143-9aad-3c79-97ea-eb8dbc168c77.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.203.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:5d:95:5c:a5:fb:56:35:3c:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=2ba49019-dcde-4cc4-bb9a-abb7f13cbf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:a4:60:0b:17:ef:a8:14:99:5c:e8:73:0c:
                    71:24:fc:28:0d:ea:58:a9:23:1f:2a:26:43:7d:3c:
                    23:77:03:e8:19:da:2f:54:d1:e3:03:92:50:d9:c6:
                    dd:2d:ce:56:76:b4:9b:15:a9:c3:1c:7c:b6:87:03:
                    c6:ae:9b:08:f7:75:c9:f3:75:49:5e:14:bd:bc:12:
                    b9:ca:0f:39:d9:84:be:61:e5:1a:04:cd:70:d3:5c:
                    96:7b:ec:ea:0a:68:cf:2b:1d:56:27:a9:0c:0b:75:
                    e5:7f:24:ad:a3:58:4e:fe:cc:88:cb:80:a8:4b:01:
                    af:de:69:4a:ef:23:49:b8:93:0b:5c:67:55:a6:1e:
                    59:67:d5:70:35:d5:d2:15:c5:fe:f8:d7:d8:e9:46:
                    44:6d:cf:0e:6d:b6:01:fc:a6:f4:3e:71:dc:a7:3a:
                    49:ea:74:b6:1d:c6:81:14:7e:fc:4d:3a:32:51:48:
                    75:d7:a3:44:41:85:23:2d:99:0f:0f:63:21:9f:05:
                    61:4f:42:db:24:2b:31:e8:11:94:4d:2d:77:5b:17:
                    ab:a3:f0:a0:b1:3f:21:93:37:e0:3a:d2:12:68:19:
                    99:2d:62:60:d8:02:0e:d2:15:dd:6b:cd:3b:95:0a:
                    de:3e:f2:fe:46:3a:21:e4:b8:41:be:26:16:1e:0a:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:2B:08:79:5D:C4:D2:4C:5A:77:3D:96:BE:BD:87:66:0B:F3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4435e143-9aad-3c79-97ea-eb8dbc168c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:9e:b7:99:02:0a:b7:b8:e2:15:0d:ea:98:2a:40:75:1a:
         51:a5:44:be:52:60:04:ca:18:9d:33:6f:73:e6:87:30:c4:68:
         2f:ca:af:60:c8:f4:54:1a:8f:dd:32:33:da:9c:d1:80:a2:8c:
         68:cc:41:58:c3:3b:b2:e0:ed:82:5f:08:95:ad:77:f3:0e:76:
         41:f9:cd:2a:34:28:f8:d5:fb:e2:14:97:f5:58:3a:fc:a6:63:
         4a:ae:4a:a1:82:74:29:22:58:07:47:78:8f:10:bb:3e:41:b0:
         32:7e:08:78:02:91:9d:a7:5c:22:29:f7:29:7c:ca:44:54:07:
         eb:96:11:3d:92:7b:a2:c4:bb:d8:07:84:22:c7:b4:97:4c:d3:
         11:d2:cc:13:24:21:55:5a:f2:21:03:fd:c0:b4:14:1c:ea:78:
         37:37:9c:89:60:37:ed:83:c9:45:f4:e2:78:af:c3:84:4a:90:
         05:3c:0f:d4:db:91:1e:af:c3:64:ab:89:96:5e:14:a8:df:4a:
         4b:58:8e:84:ca:60:6a:c0:b1:b6:ad:c4:3b:af:1b:08:15:91:
         6b:c6:e6:7c:5e:18:22:fb:f0:2d:4e:73:d0:b9:e9:ec:02:0d:
         d1:0f:94:22:1d:6b:ac:a0:7f:a4:17:98:90:ef:0a:c3:a1:49:
         b0:63:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:44 2025 by rpki-client