Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45a33f82-0869-3caf-a466-1534fde25b32.roa
File:                     45a33f82-0869-3caf-a466-1534fde25b32.roa (raw, json)
Hash identifier:          bQ1iupmR+fMrVdLuKK4QDz2k3T9GA0jG+w/oVy9ZdEI=
Subject key identifier:   C5:D0:A8:EF:4D:8C:41:5D:6A:F5:B6:D3:09:5B:33:51:5E:6F:5B:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD6E23831520A02C1B7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45a33f82-0869-3caf-a466-1534fde25b32.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.91.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:6e:23:83:15:20:a0:2c:1b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0492d7e3-199e-42ea-8a83-32495689917f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:ef:42:ff:09:c5:3e:7d:68:9b:82:94:f8:
                    14:fb:ba:8e:8c:92:84:69:21:69:97:8e:a5:97:35:
                    44:6e:2e:bf:42:45:ee:de:d3:88:9c:31:d8:33:89:
                    66:46:10:73:ac:af:7c:74:51:25:c8:00:e2:b5:96:
                    29:f6:73:45:71:d2:dd:c8:03:7e:ed:61:02:10:57:
                    48:70:94:fd:5d:4f:59:3a:91:ed:a2:33:aa:40:14:
                    fa:a2:ce:32:62:b8:df:3b:0e:ef:bf:95:a7:6e:ba:
                    e7:5f:95:f5:53:ed:53:34:a2:1a:46:2d:9f:21:64:
                    24:f1:ca:a2:6b:23:9a:0d:ce:e5:e4:a3:13:e4:48:
                    08:5b:28:a1:32:c3:2c:05:a0:03:62:1c:46:83:90:
                    fd:3f:cf:cb:89:cb:be:a2:b2:38:cd:71:ef:3b:67:
                    73:12:82:6f:c5:75:91:f8:8c:93:c0:34:f3:61:81:
                    bb:86:c9:e0:cc:f6:f1:94:69:47:40:0a:0b:7b:0b:
                    3c:86:9c:d4:bb:7f:29:73:6b:c9:aa:63:2e:76:5a:
                    a9:4f:61:f2:bf:e0:98:7b:e1:c5:92:e9:65:73:69:
                    ca:36:47:9d:a2:1c:7b:6f:07:db:58:33:0c:6a:d6:
                    7d:e7:72:11:75:d6:bc:f3:fb:75:22:70:5a:8d:41:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D0:A8:EF:4D:8C:41:5D:6A:F5:B6:D3:09:5B:33:51:5E:6F:5B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45a33f82-0869-3caf-a466-1534fde25b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.91.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:36:87:86:8a:2f:af:ee:f6:92:35:72:b0:07:7d:2a:4c:
         5d:28:36:38:3e:bf:f0:31:30:6e:cc:15:f0:dd:7c:97:60:b4:
         31:79:0c:99:91:de:08:f8:11:e1:c7:da:1e:4d:e3:61:eb:15:
         bf:79:fd:4e:44:0c:5b:75:13:e6:30:9b:ed:a7:60:c5:a1:60:
         0b:9c:8d:16:ad:44:ad:e9:ca:24:5b:2b:6f:c0:ee:a5:98:78:
         6d:4e:9e:b6:75:be:87:2e:9d:b3:d8:23:4c:35:59:4d:45:04:
         57:ba:8a:b5:fe:e6:8a:79:bd:24:b4:ee:67:34:20:77:c5:e7:
         c8:30:f4:fc:ca:e6:fc:85:a4:e4:0f:f3:ac:44:97:18:30:62:
         54:5f:09:5b:10:4f:84:bd:0c:2e:ee:83:00:84:2a:a8:d0:5f:
         35:4a:5d:04:63:48:46:1c:f1:cf:c2:3a:21:f0:69:04:2e:24:
         12:30:03:c5:2c:06:76:7e:5f:de:20:72:fc:f6:03:c0:8f:91:
         cf:7c:5c:9a:18:c3:53:70:83:c8:5f:e3:e6:40:e1:3f:09:26:
         91:5e:b5:65:f4:a7:2d:26:d6:db:46:fc:6a:a6:54:3c:d6:ee:
         48:94:9d:ed:0d:6a:0a:3b:f0:21:5b:16:13:ef:90:35:da:fe:
         35:e2:d7:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3W4jgxUgoCwbdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDQ5MmQ3ZTMtMTk5ZS00MmVhLThhODMtMzI0OTU2ODk5MTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KXvQv8JxT59aJuClPgU+7qOjJKEaSFpl46l
lzVEbi6/QkXu3tOInDHYM4lmRhBzrK98dFElyADitZYp9nNFcdLdyAN+7WECEFdI
cJT9XU9ZOpHtojOqQBT6os4yYrjfOw7vv5WnbrrnX5X1U+1TNKIaRi2fIWQk8cqi
ayOaDc7l5KMT5EgIWyihMsMsBaADYhxGg5D9P8/Licu+orI4zXHvO2dzEoJvxXWR
+IyTwDTzYYG7hsngzPbxlGlHQAoLews8hpzUu38pc2vJqmMudlqpT2Hyv+CYe+HF
kullc2nKNkedohx7bwfbWDMMatZ953IRdda88/t1InBajUHSkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXQqO9NjEFdavW20wlbM1Feb1uOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDVhMzNmODItMDg2OS0z
Y2FmLWE0NjYtMTUzNGZkZTI1YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVuOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+zNoeGii+v7vaSNXKwB30qTF0oNjg+v/AxMG7MFfDdfJdgtDF5DJmR
3gj4EeHH2h5N42HrFb95/U5EDFt1E+Ywm+2nYMWhYAucjRatRK3pyiRbK2/A7qWY
eG1OnrZ1vocunbPYI0w1WU1FBFe6irX+5op5vSS07mc0IHfF58gw9PzK5vyFpOQP
86xElxgwYlRfCVsQT4S9DC7ugwCEKqjQXzVKXQRjSEYc8c/COiHwaQQuJBIwA8Us
BnZ+X94gcvz2A8CPkc98XJoYw1Nwg8hf4+ZA4T8JJpFetWX0py0m1ttG/GqmVDzW
7kiUne0Nago78CFbFhPvkDXa/jXi15E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:36 2025 by rpki-client