Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518a3242-675f-3730-a855-de4fede1b3bd.roa
File:                     518a3242-675f-3730-a855-de4fede1b3bd.roa (raw, json)
Hash identifier:          WyF4ESsyf2wft9uM2+NImSbY3rkRIOhDio2zE8DDrDs=
Subject key identifier:   0D:BD:F4:41:D7:5A:96:C5:04:73:3F:6D:EE:E5:30:4C:2E:AD:BE:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD2719A12826AE9726FF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518a3242-675f-3730-a855-de4fede1b3bd.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     13367
IP address blocks:        73.94.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:27:19:a1:28:26:ae:97:26:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6b636c65-4543-4a02-b1de-63664af8ae05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:f1:b4:d1:4f:bc:c1:0b:53:d0:c4:b6:bb:
                    de:09:d2:65:e4:3d:1c:05:4b:6d:e9:75:8d:ee:27:
                    6b:6d:5e:6e:a2:26:aa:76:03:80:c7:5c:01:39:00:
                    0b:0d:2f:23:b1:f0:a9:d2:12:7f:0b:01:ea:64:36:
                    57:68:28:0c:e7:b1:41:aa:ad:e1:de:ec:78:cd:61:
                    f4:7c:b2:f0:9d:8c:4f:c2:05:61:34:1e:3a:a8:df:
                    7d:f1:3e:80:2a:4d:4e:9b:7b:f5:24:c3:87:a7:4f:
                    c9:66:ed:99:cc:ff:2c:c6:87:4b:c7:74:ff:9e:bc:
                    c9:78:10:1d:6e:36:36:9f:71:b3:3a:c6:ff:e5:0d:
                    59:e8:46:02:bc:3f:f0:c4:72:3c:69:11:23:9f:14:
                    67:30:38:85:d6:de:34:18:0e:d2:a3:b3:a7:bc:20:
                    1a:df:c3:6f:14:da:1d:4f:67:05:77:c5:fb:d1:1c:
                    c7:e3:46:55:77:ff:28:b9:52:b6:de:48:5e:61:22:
                    44:d5:ac:f4:22:b1:6e:48:af:31:cd:16:20:5e:97:
                    75:6b:e7:d4:38:06:ff:f4:fb:05:91:84:69:82:23:
                    36:cd:f3:3a:af:93:6a:71:45:79:66:35:e2:2e:2e:
                    e9:20:78:81:23:f8:29:0b:a3:d5:6a:41:3a:a3:de:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:F4:41:D7:5A:96:C5:04:73:3F:6D:EE:E5:30:4C:2E:AD:BE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518a3242-675f-3730-a855-de4fede1b3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:ee:75:b3:3f:2e:16:ce:e7:ca:61:53:a9:ed:83:38:29:
         ee:6a:95:24:de:67:cc:aa:ba:9b:00:42:49:0b:4f:f7:34:fe:
         0e:18:81:a5:21:ee:5b:35:4c:0e:3d:f9:72:8e:4b:20:39:a1:
         60:56:55:1c:73:d2:aa:68:21:fc:b0:56:5e:c8:91:80:68:07:
         42:82:b1:b0:50:f0:b9:ef:22:0f:82:39:91:a7:9f:d4:34:63:
         c1:30:c7:66:63:72:20:d2:85:6e:10:6a:d9:06:78:42:95:e9:
         3f:7f:3c:9b:38:a5:94:d2:1e:ba:43:f5:be:4e:02:29:fc:a6:
         26:40:fd:11:79:c4:94:ab:18:47:74:b3:8e:45:12:57:bd:f9:
         9c:51:73:c9:58:0b:f5:6f:66:3b:8d:53:d0:a7:61:7f:51:c6:
         ef:f3:c1:ae:6d:51:a5:b9:d8:44:6a:86:f6:f1:99:d3:30:92:
         fc:cd:f5:8f:c4:e8:78:99:1f:c8:3c:2e:ca:94:35:61:47:66:
         0c:a0:9d:59:b4:34:10:0b:da:37:bf:3c:47:44:28:4b:0c:a3:
         05:bd:9e:64:db:af:c2:13:30:cc:68:39:ad:57:b7:b0:48:db:
         f0:ee:16:87:be:c4:03:b3:5c:bc:80:73:31:c7:49:00:97:be:
         79:04:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:23 2025 by rpki-client