Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56142c95-1684-3b7f-87a7-066cc9934e4d.roa
File:                     56142c95-1684-3b7f-87a7-066cc9934e4d.roa (raw, json)
Hash identifier:          oyZZmANlI/9lvq+fngc1dfzRDkOBxOeWqLJyodwfIsg=
Subject key identifier:   98:1C:64:EE:C9:68:DB:48:CA:78:E0:F4:A8:54:C7:DF:96:D9:B4:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB963755DADF17748D45960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56142c95-1684-3b7f-87a7-066cc9934e4d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33668
IP address blocks:        70.88.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:63:75:5d:ad:f1:77:48:d4:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=4e833cbb-5ca6-47ab-859a-7dd3bf9f79e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:66:b7:1d:d6:7b:e2:4f:80:54:ce:fc:b9:
                    b4:d8:ec:0d:9e:06:5f:1c:5c:38:15:e4:1f:a0:f0:
                    bb:13:ef:f2:39:71:56:28:1d:38:f6:c0:ae:0a:c8:
                    d1:a5:0f:28:7d:b1:87:40:2b:47:96:ff:b7:2f:d8:
                    f9:a7:1f:8e:a8:7b:5b:64:08:2d:2b:5d:73:a6:81:
                    f5:cc:42:6e:71:4b:72:53:bf:99:a0:c5:5e:6f:1c:
                    13:3a:3e:9b:2a:a3:41:a2:98:83:1f:9a:dc:ff:ce:
                    dc:55:7f:fa:e8:24:04:fc:1b:b8:0e:8b:05:14:b2:
                    ec:91:8a:c6:3d:cd:52:c6:30:b2:b8:8e:b6:19:6f:
                    8e:63:a0:98:c0:ec:c2:af:fa:bb:ce:34:35:0a:cc:
                    f0:af:a0:ea:00:db:29:6d:8b:9b:84:62:7b:fd:62:
                    ec:e7:78:94:cf:b8:a4:86:dd:35:11:59:ee:4c:6e:
                    b7:a7:7a:67:31:77:f2:ed:4d:84:b9:a1:a8:b9:79:
                    bf:91:6b:c0:56:d3:13:77:03:96:49:3f:13:7e:6d:
                    c6:fd:35:ec:b3:3c:35:9c:2a:11:4e:d5:18:53:67:
                    28:5d:be:ae:41:06:51:ea:f0:f5:f5:d3:84:d9:84:
                    56:42:db:44:93:8f:b3:1b:ce:99:84:dc:9b:d5:bf:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1C:64:EE:C9:68:DB:48:CA:78:E0:F4:A8:54:C7:DF:96:D9:B4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56142c95-1684-3b7f-87a7-066cc9934e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:40:a4:57:9d:7c:f1:1f:fc:6b:69:85:f7:47:ef:5d:50:
         7a:b7:4c:95:b3:a0:71:b4:7c:b7:0b:39:0e:fc:b9:87:27:92:
         8a:7a:d0:b3:81:48:df:6c:86:cd:60:50:e2:24:7f:f4:3d:38:
         8c:7f:ea:48:5f:b6:7c:72:b9:ed:a8:07:c0:dd:2b:39:66:fd:
         1b:3e:19:b0:81:be:63:3d:dc:50:9c:8d:f3:d6:7c:14:ed:10:
         99:17:96:56:f4:9f:19:a5:54:e8:35:91:dd:bb:a7:12:79:3e:
         f7:2a:e0:9f:de:85:61:7d:81:71:8e:af:2e:00:60:b4:24:98:
         14:68:30:47:af:02:57:9a:23:54:33:ac:f4:76:e8:e3:3f:f3:
         e5:21:7d:34:b6:23:8e:6f:c6:84:ea:e4:c6:16:dc:9c:c3:05:
         4e:20:96:21:0b:a7:b1:93:dc:92:a3:0b:e3:ce:c4:1d:62:3d:
         a5:3d:7c:a3:aa:1b:41:80:8e:1e:3d:ec:db:d6:8b:3c:71:6b:
         3c:67:55:3f:d1:24:43:55:d1:16:ad:b4:09:53:ce:43:7d:73:
         85:88:2c:b8:44:fa:ef:fd:c2:5b:2b:48:4e:4f:4d:f2:59:c9:
         66:02:a9:ed:5b:ce:dc:7b:b9:16:e2:ea:55:3b:49:5c:06:1e:
         c3:23:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:24 2025 by rpki-client