Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d6ad49-7be0-3a2a-a911-4d52340aaaff.roa
File:                     65d6ad49-7be0-3a2a-a911-4d52340aaaff.roa (raw, json)
Hash identifier:          44xNxC3oHUxrK71toO8ZwnnEQn43XBClHDINyDbPvMg=
Subject key identifier:   BA:38:3B:15:A0:16:D4:16:F0:5D:AE:D0:CD:72:C8:84:22:FE:F7:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB724041C9C6C8B926C5900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d6ad49-7be0-3a2a-a911-4d52340aaaff.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        71.228.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:24:04:1c:9c:6c:8b:92:6c:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=707e3928-7165-4f4d-8ca8-2e6eb53e8390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:22:41:6b:c5:d4:23:73:b0:48:7b:f5:6b:
                    50:de:9f:c6:5d:05:0a:45:a0:37:0d:c2:c9:b1:c6:
                    0c:74:f8:81:57:6b:b9:3a:91:fb:ca:39:42:63:8a:
                    58:dd:fc:b8:83:62:57:91:51:2c:d4:f9:f0:eb:b4:
                    85:e2:e6:93:fb:4e:e3:57:53:0e:bd:5c:dc:f4:8f:
                    a6:98:52:9d:14:9a:34:75:c2:34:d8:f2:db:d7:cd:
                    00:31:54:1b:2b:72:fc:ef:56:33:4f:cd:17:2d:fd:
                    3a:1d:e9:bf:ab:6a:83:a9:1e:83:d2:d4:9c:26:a9:
                    60:d8:45:5c:10:ba:17:5b:fa:11:70:9a:3b:25:0f:
                    4f:50:a1:72:14:ec:fa:3d:8b:dd:7a:47:1c:1c:f1:
                    68:16:f3:29:fb:b2:6a:b3:b7:59:8b:14:f3:e9:a8:
                    c0:b6:50:fb:bc:b1:9d:46:a1:22:a6:c8:d6:43:ef:
                    15:f0:ef:a8:f0:c2:31:c8:64:f9:90:36:3d:7c:0f:
                    a1:0f:5c:34:c7:64:d2:61:84:a1:b8:ff:9c:75:c2:
                    55:e5:2b:0c:e9:1c:42:42:27:aa:f1:37:1a:ec:13:
                    cd:7f:fd:76:98:2e:49:cd:a1:b9:e8:ed:b6:d3:14:
                    00:a1:9e:3c:d2:b2:2c:46:3b:48:c9:67:d7:3f:9b:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:3B:15:A0:16:D4:16:F0:5D:AE:D0:CD:72:C8:84:22:FE:F7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d6ad49-7be0-3a2a-a911-4d52340aaaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:2b:0e:a9:bc:ad:22:cc:9f:fe:48:25:07:a1:42:ea:29:
         20:3a:4a:fd:fe:af:2e:4a:be:60:89:16:fa:f7:78:32:c2:d3:
         79:5d:62:c1:59:eb:8b:c7:f2:f3:64:ad:ba:27:dd:22:3d:17:
         fa:d5:99:2f:29:91:04:99:0f:f6:4d:18:bc:e7:57:ea:2e:d0:
         49:7f:cd:a4:a8:6d:f4:ab:f1:e9:3b:7d:8e:30:59:10:16:e3:
         7b:12:51:72:5d:9c:d5:95:a6:8a:5e:d1:b5:63:6d:4b:74:81:
         91:81:9c:0c:da:17:92:28:f7:74:8a:15:7d:e1:96:7c:bf:6c:
         eb:0a:dc:20:a6:69:d2:f3:91:1f:6c:4a:e0:d5:2f:43:ef:28:
         4f:99:13:93:1f:f3:6c:bd:1a:41:79:22:94:f5:8b:df:74:f4:
         20:60:62:c5:2e:b9:07:e1:f0:e4:bd:6c:32:76:bd:ef:72:b7:
         cb:4c:c3:0a:b5:55:2f:3a:63:0b:0d:f7:a1:f9:dd:f3:5c:7f:
         cc:17:cd:1d:78:6f:b8:c9:2d:f6:a9:38:5d:4b:4d:c0:23:f6:
         f8:0d:d2:d8:6d:88:e0:0e:8b:01:99:5a:a9:b6:dc:ed:50:d0:
         32:c1:14:ca:bd:76:88:a2:66:78:ad:6d:41:a1:1d:27:7f:97:
         be:04:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:11 2025 by rpki-client