Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e3838f3-1d70-3d2c-a044-4d7902aa9b02.roa
File:                     6e3838f3-1d70-3d2c-a044-4d7902aa9b02.roa (raw, json)
Hash identifier:          jyTDy4Gf4hosKsG1uZ7U5RtxDRykti2X336KpOX1LBI=
Subject key identifier:   E6:10:39:A5:9C:F0:E5:66:42:A5:2F:C6:4D:55:96:91:CC:A1:4C:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB86ED5DD100B0FCF152100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e3838f3-1d70-3d2c-a044-4d7902aa9b02.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:6e:d5:dd:10:0b:0f:cf:15:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=504ac09d-9f7a-4ba9-9e3a-4d33adec5652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:2b:bc:d0:3f:49:4d:c3:68:a9:6d:72:3c:
                    76:6a:bf:50:1b:2f:7b:b6:48:73:0a:ac:ce:2e:84:
                    63:62:59:cc:23:4a:57:70:d8:6e:04:53:44:cd:c9:
                    34:09:ad:0c:9f:a2:bc:41:9c:f8:e2:37:b0:9d:3c:
                    70:f2:37:46:85:02:98:2b:bb:84:99:d0:b6:58:38:
                    4c:71:80:86:8e:75:a3:35:46:45:68:2b:0c:fe:23:
                    43:01:d6:00:a9:08:0b:82:e2:ee:24:bf:93:1a:df:
                    55:d7:52:88:db:52:0f:dc:bc:13:5e:ae:7e:42:dc:
                    85:46:03:98:7b:42:99:1c:12:69:9b:2c:50:3e:9d:
                    07:b0:af:0f:3e:45:bb:ce:96:7a:9f:46:5d:a8:6a:
                    07:85:74:2b:99:d4:2a:da:3e:c0:2e:3a:e7:fb:48:
                    dc:5c:63:4d:08:79:c8:27:dd:b0:9c:3c:8d:3b:3e:
                    e9:a6:10:a7:13:f2:d2:21:e2:a7:61:bc:17:a9:98:
                    1e:5f:e1:6d:31:61:25:aa:57:c9:3d:af:c7:23:6f:
                    f2:c3:8f:c8:d2:86:73:07:00:96:63:42:7d:89:40:
                    4d:9d:93:29:18:f1:03:34:ef:1c:1a:ac:54:e1:cf:
                    7f:1c:6d:89:36:14:f2:4a:0f:19:0b:6e:db:56:8d:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:10:39:A5:9C:F0:E5:66:42:A5:2F:C6:4D:55:96:91:CC:A1:4C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e3838f3-1d70-3d2c-a044-4d7902aa9b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:5b:b0:c0:b8:4f:66:d0:d7:3a:4b:b6:93:8f:98:83:fa:
         56:22:28:d3:51:27:f4:10:4d:15:74:ef:c8:68:4c:79:83:41:
         a2:39:e7:84:42:22:eb:c9:27:2f:05:6d:85:75:20:13:f9:52:
         50:6d:72:d8:39:43:f5:2a:ce:84:7a:8e:45:f6:38:15:8d:f5:
         01:f5:79:38:39:eb:b6:5e:a9:4c:38:c5:ba:b6:1c:c2:cb:a7:
         b2:2c:70:7b:28:d0:7a:3b:7b:3e:b4:d0:a9:1f:e8:20:7a:50:
         15:78:95:9d:f7:b8:a0:d4:22:5a:48:ee:19:81:ff:14:60:ef:
         11:86:5d:40:20:17:d2:f7:c8:58:e2:08:cf:3a:c4:bf:67:af:
         18:6a:6e:cc:70:c4:42:97:6b:d2:2f:d5:14:10:28:b9:ab:3a:
         62:4c:b4:24:08:56:f1:8d:d2:25:fb:fc:54:63:5b:b6:02:7f:
         98:5c:bc:83:21:ad:d9:35:17:ab:b0:14:93:4d:9c:4a:71:4a:
         97:c0:5b:03:58:de:86:e1:9e:ce:7a:1c:19:97:e0:97:9e:89:
         71:0f:73:28:07:c3:57:81:17:60:e0:f4:74:60:2b:ca:14:31:
         b9:85:e6:4b:cb:56:10:f7:54:f5:64:3b:a1:31:7b:37:d5:b7:
         41:ce:a5:47
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs9uG7V3RALD88VIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NTA0YWMwOWQtOWY3YS00YmE5LTllM2EtNGQzM2FkZWM1NjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04orvNA/SU3DaKltcjx2ar9QGy97tkhzCqzO
LoRjYlnMI0pXcNhuBFNEzck0Ca0Mn6K8QZz44jewnTxw8jdGhQKYK7uEmdC2WDhM
cYCGjnWjNUZFaCsM/iNDAdYAqQgLguLuJL+TGt9V11KI21IP3LwTXq5+QtyFRgOY
e0KZHBJpmyxQPp0HsK8PPkW7zpZ6n0ZdqGoHhXQrmdQq2j7ALjrn+0jcXGNNCHnI
J92wnDyNOz7pphCnE/LSIeKnYbwXqZgeX+FtMWElqlfJPa/HI2/yw4/I0oZzBwCW
Y0J9iUBNnZMpGPEDNO8cGqxU4c9/HG2JNhTySg8ZC27bVo0vqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOYQOaWc8OVmQqUvxk1VlpHMoUxWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmUzODM4ZjMtMWQ3MC0z
ZDJjLWEwNDQtNGQ3OTAyYWE5YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASXAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALbpbsMC4T2bQ1zpLtpOPmIP6ViIo01En9BBNFXTvyGhMeYNBojnnhEIi
68knLwVthXUgE/lSUG1y2DlD9SrOhHqORfY4FY31AfV5ODnrtl6pTDjFurYcwsun
sixweyjQejt7PrTQqR/oIHpQFXiVnfe4oNQiWkjuGYH/FGDvEYZdQCAX0vfIWOII
zzrEv2evGGpuzHDEQpdr0i/VFBAouas6Yky0JAhW8Y3SJfv8VGNbtgJ/mFy8gyGt
2TUXq7AUk02cSnFKl8BbA1jehuGeznocGZfgl56JcQ9zKAfDV4EXYOD0dGAryhQx
uYXmS8tWEPdU9WQ7oTF7N9W3Qc6lRw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:00 2025 by rpki-client