Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b9faa8-c39a-39ec-a230-761494fef70c.roa
File:                     73b9faa8-c39a-39ec-a230-761494fef70c.roa (raw, json)
Hash identifier:          7g9rCxIU4M59aH8HNvxncnaRF7V9xCFi46Mi885TSPE=
Subject key identifier:   DE:10:24:D7:83:5A:D3:9E:99:47:B7:73:B3:01:B3:46:84:62:63:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B4E771E098907BDB461106C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b9faa8-c39a-39ec-a230-761494fef70c.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     33661
IP address blocks:        69.241.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:1e:09:89:07:bd:b4:61:10:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=da4f9ea9-effc-46d9-93cf-9763ca9f93eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:d8:f1:03:28:52:01:97:54:d0:d0:df:28:
                    51:6b:31:e9:8d:ee:9c:d5:a8:e2:f0:bf:95:78:d2:
                    11:f3:af:f8:e9:25:dd:a7:42:95:dc:08:93:28:2c:
                    1b:67:2b:24:ae:1d:e0:70:ab:25:41:25:6c:0b:78:
                    e2:93:c3:1e:f0:ce:3b:89:ae:26:42:95:bb:ee:f8:
                    38:59:39:14:5f:85:b1:21:ac:a8:2e:f3:31:bc:34:
                    05:bd:1e:f1:65:df:a4:c2:3c:4f:cf:c9:5e:9e:24:
                    a3:e3:47:67:6c:eb:15:e4:97:49:f9:67:f1:a4:8f:
                    59:1f:f7:65:49:37:01:c7:a4:30:ff:3b:1e:a3:f0:
                    27:8c:1b:cb:4b:d3:4b:fa:67:39:12:d2:3e:00:9a:
                    2c:cb:41:20:1d:32:55:97:36:73:99:38:40:a2:7f:
                    a7:17:a4:fe:fd:44:56:91:9b:45:04:ff:ff:73:61:
                    30:f4:55:71:fe:35:75:29:06:28:03:07:30:4a:fa:
                    f0:c5:ec:31:fc:7c:8d:fd:ab:9b:26:f0:11:df:4b:
                    29:84:c8:4c:ce:40:43:23:9a:dc:82:42:7c:1b:f6:
                    ca:84:d1:a1:ee:66:63:b5:e0:2c:84:b3:78:71:0f:
                    2a:2e:36:ee:0c:7f:8a:35:9b:18:f8:51:be:44:ac:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:10:24:D7:83:5A:D3:9E:99:47:B7:73:B3:01:B3:46:84:62:63:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b9faa8-c39a-39ec-a230-761494fef70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:49:4c:30:2c:95:56:d9:62:5b:80:9f:81:c2:47:23:da:
         2a:47:71:b8:66:33:65:fc:04:03:70:1f:a1:ca:7b:50:d8:6e:
         a8:5b:6c:04:4f:9f:5d:a6:cd:17:e0:19:59:be:84:50:d3:13:
         47:3c:c6:f6:55:e7:c7:eb:2d:1f:ef:9b:57:ab:7f:dc:39:3f:
         23:b3:9c:f1:a9:3a:45:b3:ce:22:7f:b9:73:aa:cc:42:1f:e5:
         5b:a2:95:64:f5:2c:35:1d:42:4d:82:57:b3:4a:ee:e6:6a:32:
         fe:89:b5:2b:67:ee:bf:7f:c7:ff:a5:5a:1c:d8:02:a8:a8:e3:
         f5:91:b4:2a:7e:21:40:9e:c4:b0:2c:8d:49:27:6f:05:32:32:
         0c:77:54:7b:75:c3:f3:aa:08:9e:b2:7c:2e:9d:11:4f:78:66:
         85:4b:55:72:6a:95:cf:cc:98:24:92:88:96:b1:90:22:3d:a2:
         66:fd:69:04:60:8d:ee:26:2e:60:63:72:cf:04:26:a8:e7:de:
         3d:f2:fa:19:0c:72:bd:e7:45:96:ac:13:27:c8:f1:f4:ec:da:
         6e:94:15:83:3a:c2:de:7e:b3:ba:ee:14:f8:7f:3b:ae:bc:b2:
         df:53:ac:d3:bc:d8:14:94:27:06:a1:a7:f4:57:59:85:7e:e4:
         5e:4d:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:26 2025 by rpki-client