Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa
File:                     74a89ece-f802-3c15-8dcc-0965e55764d1.roa (raw, json)
Hash identifier:          DuZji8EW7Dy8T2AGS3XBiJQcSGjyy1QYN8N764ivAgU=
Subject key identifier:   85:68:FF:11:76:98:80:5A:E3:F4:F8:E0:95:9D:BF:2C:3F:5A:60:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAC0FAE11F65E0ED329DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.6.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:c0:fa:e1:1f:65:e0:ed:32:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c6d25484-f6f7-46b5-9f20-e275f33a91b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:13:65:ed:39:18:02:31:82:7c:a8:60:c5:
                    c2:9d:30:da:df:3b:b5:cb:4e:90:c9:de:4e:c7:39:
                    4c:2d:ba:bc:f4:5d:41:5f:67:2b:9c:30:3c:33:f2:
                    a7:b2:29:94:d8:bf:48:a6:0d:4d:ff:79:0d:63:bd:
                    aa:36:c5:42:e4:2e:36:5f:6c:ac:d0:37:ec:b0:b1:
                    21:18:4e:4a:03:70:2d:71:d4:0d:83:2c:4c:3f:c6:
                    66:a9:ad:cd:9b:a7:7f:c7:b6:37:bd:25:ba:64:64:
                    73:cb:3e:72:f4:ce:34:51:d7:72:43:cc:f6:eb:d5:
                    07:8f:f9:98:a1:c3:d8:9d:c2:46:8d:15:bc:a6:d0:
                    4c:28:5d:49:ca:3f:d5:fa:52:c8:45:7d:2f:5d:41:
                    e8:e6:51:7f:d4:27:6b:97:c2:53:f4:f2:13:90:9d:
                    03:0b:92:15:9d:ed:6b:91:ad:1b:61:94:5e:e9:28:
                    80:f7:af:f6:30:a3:7d:1b:c4:4c:3f:48:76:ae:cf:
                    9c:d0:cd:47:b9:b5:fb:a3:29:1f:5b:30:9b:c0:8c:
                    f2:30:8b:16:5e:b8:6b:97:09:b1:a1:48:97:78:04:
                    30:c4:19:c7:ce:1a:d8:02:c2:15:fc:7c:d4:07:83:
                    3f:c0:40:7d:2c:b7:41:e2:6f:01:5e:1f:3f:da:63:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:FF:11:76:98:80:5A:E3:F4:F8:E0:95:9D:BF:2C:3F:5A:60:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74a89ece-f802-3c15-8dcc-0965e55764d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:9e:87:48:58:e7:64:a6:8e:a4:2a:ea:5c:d9:65:ca:34:
         07:00:2f:3e:69:99:89:bd:fa:3e:f4:6d:bc:ed:bf:9f:8b:f5:
         d9:df:e2:3f:3e:0a:f7:2c:89:85:5e:6a:35:ea:24:fa:48:00:
         9a:97:b5:a1:a9:33:d4:2a:e0:3d:fa:2b:96:36:9f:8d:1b:0b:
         f1:1f:a8:ba:31:c5:27:75:b8:23:fe:5a:af:21:bc:f0:47:42:
         71:14:a6:64:6a:28:53:8b:63:10:b3:d2:ef:26:01:fa:63:d8:
         61:6f:d9:b4:5c:c0:cd:99:3a:82:47:72:ec:d4:72:e8:9c:ee:
         b0:c9:3c:36:fa:fa:f2:67:26:0b:d0:41:7b:f9:8b:23:43:6e:
         a3:10:67:c7:2b:da:cc:1f:a7:86:83:e3:fa:48:e4:1f:c1:3b:
         67:6f:61:a4:2c:1e:77:0f:4d:ff:08:2d:3e:98:ca:b6:12:fc:
         59:73:c3:a1:48:0b:df:03:24:b5:97:cd:0b:45:e4:cc:67:91:
         39:8d:f9:e5:2c:d6:a7:73:0b:37:60:85:de:8e:fc:a5:10:03:
         d3:b4:87:d7:d4:65:41:7d:57:5f:12:fa:8c:f4:d5:a6:7e:19:
         ec:5b:aa:c1:c2:35:8b:2b:d0:37:b5:d1:30:e8:66:e9:46:3a:
         64:af:93:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqsD64R9l4O0yneAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
YzZkMjU0ODQtZjZmNy00NmI1LTlmMjAtZTI3NWYzM2E5MWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSgTZe05GAIxgnyoYMXCnTDa3zu1y06Qyd5O
xzlMLbq89F1BX2crnDA8M/KnsimU2L9Ipg1N/3kNY72qNsVC5C42X2ys0DfssLEh
GE5KA3AtcdQNgyxMP8Zmqa3Nm6d/x7Y3vSW6ZGRzyz5y9M40UddyQ8z269UHj/mY
ocPYncJGjRW8ptBMKF1Jyj/V+lLIRX0vXUHo5lF/1Cdrl8JT9PITkJ0DC5IVne1r
ka0bYZRe6SiA96/2MKN9G8RMP0h2rs+c0M1HubX7oykfWzCbwIzyMIsWXrhrlwmx
oUiXeAQwxBnHzhrYAsIV/HzUB4M/wEB9LLdB4m8BXh8/2mOzXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVo/xF2mIBa4/T44JWdvyw/WmCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzRhODllY2UtZjgwMi0z
YzE1LThkY2MtMDk2NWU1NTc2NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASQZDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExynodIWOdkpo6kKupc2WXKNAcALz5pmYm9+j70bbztv5+L9dnf4j8+
CvcsiYVeajXqJPpIAJqXtaGpM9Qq4D36K5Y2n40bC/EfqLoxxSd1uCP+Wq8hvPBH
QnEUpmRqKFOLYxCz0u8mAfpj2GFv2bRcwM2ZOoJHcuzUcuic7rDJPDb6+vJnJgvQ
QXv5iyNDbqMQZ8cr2swfp4aD4/pI5B/BO2dvYaQsHncPTf8ILT6YyrYS/Flzw6FI
C98DJLWXzQtF5MxnkTmN+eUs1qdzCzdghd6O/KUQA9O0h9fUZUF9V18S+oz01aZ+
GexbqsHCNYsr0De10TDoZulGOmSvk0A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:26 2025 by rpki-client