Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/467b952f-2731-3479-af86-aff01fc4465e.roa
File:                     467b952f-2731-3479-af86-aff01fc4465e.roa (raw, json)
Hash identifier:          nhxg0RiwRJJDXZOjkLs0niphPZcpl9eBdsS7CFodlXY=
Subject key identifier:   1F:53:0D:B7:9D:DC:DD:99:B5:80:78:22:0F:9F:35:F2:76:1B:CC:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB909CEFCD66A48DD3070C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/467b952f-2731-3479-af86-aff01fc4465e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     20214
IP address blocks:        73.138.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:09:ce:fc:d6:6a:48:dd:30:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9f3fcd4e-23fb-43b2-a034-f647cb774795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:19:10:0d:98:dd:44:65:5b:a9:ce:a7:9d:d5:
                    23:df:69:a8:f6:d9:19:e9:21:76:d9:84:f4:26:9a:
                    d8:17:0c:c6:9e:8a:e3:63:93:2a:45:da:db:00:84:
                    1b:bc:65:89:48:e5:04:8e:18:af:47:b9:d3:2f:d5:
                    3e:f3:3c:c6:83:36:e7:6c:62:8a:1b:dd:a6:d7:36:
                    c5:81:9e:a3:dc:75:db:0c:17:c6:56:c6:02:ee:5c:
                    58:28:af:00:12:de:38:7a:6f:a4:da:47:a7:ba:0f:
                    de:80:6e:b3:76:4e:fb:0f:7f:a2:4f:e7:d7:b8:64:
                    50:1e:ad:aa:be:af:f0:92:cc:61:04:85:4f:3f:8c:
                    2c:5b:cc:d6:89:84:35:8f:69:17:c7:52:a7:ef:3e:
                    68:f6:33:b6:52:39:fb:b9:08:2f:47:f2:3c:f4:43:
                    3f:76:ef:50:73:93:05:2b:3d:82:b8:40:50:ea:8d:
                    49:6e:ce:4a:5b:81:bb:70:ec:bd:7f:de:a7:55:fd:
                    47:fe:53:6b:a0:f9:f6:19:03:1b:82:d9:ca:e9:fc:
                    e9:e3:6d:ee:c6:e1:3e:e2:e7:13:e8:e1:4e:d7:57:
                    66:b7:e5:b9:29:3f:a5:18:aa:08:f7:aa:ec:39:e8:
                    88:7d:12:8c:13:da:5c:51:39:97:cf:3c:df:85:f1:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:0D:B7:9D:DC:DD:99:B5:80:78:22:0F:9F:35:F2:76:1B:CC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/467b952f-2731-3479-af86-aff01fc4465e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.138.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:c0:14:fd:fc:8d:d6:e8:f6:a7:16:e9:d8:a8:59:49:25:
         04:0e:14:10:b8:2e:a6:8c:72:2a:29:42:d7:1c:42:37:23:ae:
         9a:f5:f8:08:07:1b:30:89:10:ab:de:ba:b1:78:5d:22:a9:77:
         a3:34:64:89:eb:a9:e7:e3:76:09:2d:df:b4:bb:34:05:e0:65:
         84:11:cf:9a:f0:5f:87:e9:7c:58:77:30:d0:43:e6:9f:df:1e:
         d7:02:49:10:1c:15:bc:18:72:4a:eb:0c:fd:43:d2:54:fd:30:
         56:13:88:04:3d:4e:87:e7:04:72:f1:e0:57:d2:09:c9:2c:26:
         47:19:5d:3a:14:4e:24:dd:13:62:96:19:0b:49:df:8c:9f:e6:
         05:18:4b:74:c5:a2:2c:96:e1:bf:62:ec:21:61:f2:30:01:27:
         5f:1d:82:5d:04:52:b7:b8:0b:da:ae:fc:7b:f9:48:1c:87:e7:
         9d:a2:bb:9a:e6:9f:34:dc:b2:fc:f5:8f:a8:48:93:76:96:49:
         18:cc:ec:d5:40:d2:56:78:60:20:39:83:f1:62:7d:84:d2:fb:
         fc:f7:ff:2b:75:99:f8:6f:f5:d2:f4:bf:ea:0d:73:8f:ee:3b:
         42:53:35:89:09:5b:df:67:d1:b2:c4:c4:3c:b8:95:b5:6b:65:
         c9:05:cd:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs9uQnO/NZqSN0wcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OWYzZmNkNGUtMjNmYi00M2IyLWEwMzQtZjY0N2NiNzc0Nzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BkQDZjdRGVbqc6nndUj32mo9tkZ6SF22YT0
JprYFwzGnorjY5MqRdrbAIQbvGWJSOUEjhivR7nTL9U+8zzGgzbnbGKKG92m1zbF
gZ6j3HXbDBfGVsYC7lxYKK8AEt44em+k2kenug/egG6zdk77D3+iT+fXuGRQHq2q
vq/wksxhBIVPP4wsW8zWiYQ1j2kXx1Kn7z5o9jO2Ujn7uQgvR/I89EM/du9Qc5MF
Kz2CuEBQ6o1Jbs5KW4G7cOy9f96nVf1H/lNroPn2GQMbgtnK6fzp423uxuE+4ucT
6OFO11dmt+W5KT+lGKoI96rsOeiIfRKME9pcUTmXzzzfhfFFNwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB9TDbed3N2ZtYB4Ig+fNfJ2G8xhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDY3Yjk1MmYtMjczMS0z
NDc5LWFmODYtYWZmMDFmYzQ0NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBSYowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdi7AFP38jdbo9qcW6dioWUklBA4UELgupoxyKilC1xxCNyOumvX4CAcb
MIkQq966sXhdIql3ozRkieup5+N2CS3ftLs0BeBlhBHPmvBfh+l8WHcw0EPmn98e
1wJJEBwVvBhySusM/UPSVP0wVhOIBD1Oh+cEcvHgV9IJySwmRxldOhROJN0TYpYZ
C0nfjJ/mBRhLdMWiLJbhv2LsIWHyMAEnXx2CXQRSt7gL2q78e/lIHIfnnaK7muaf
NNyy/PWPqEiTdpZJGMzs1UDSVnhgIDmD8WJ9hNL7/Pf/K3WZ+G/10vS/6g1zj+47
QlM1iQlb32fRssTEPLiVtWtlyQXNEw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:21 2025 by rpki-client