Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6d0927-d4f1-317e-b7a0-1925a9f0044e.roa
File:                     7b6d0927-d4f1-317e-b7a0-1925a9f0044e.roa (raw, json)
Hash identifier:          VjtO3RyBSwbKxTqxJUDjn2qtCpV2o2/knn+Ykwa3Jko=
Subject key identifier:   95:29:34:C5:BE:55:1E:6E:11:C2:28:D4:0B:F0:1B:84:47:D3:11:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9FF58101C3099751D1F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6d0927-d4f1-317e-b7a0-1925a9f0044e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.238.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:ff:58:10:1c:30:99:75:1d:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d59484ca-8716-4f73-b18e-4f490f502bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:22:65:06:0c:38:ee:c5:3f:e5:2f:f1:7c:
                    9c:f6:a2:e2:d2:eb:23:f1:78:92:37:00:ce:88:f7:
                    da:30:26:aa:a7:fc:cf:bf:03:3c:1c:9c:50:a0:6d:
                    78:fa:7e:12:1e:07:9b:f9:23:87:de:af:a5:15:12:
                    9b:6a:ce:d9:4e:86:0d:41:86:02:ce:f6:70:ae:58:
                    78:b9:0b:ed:7d:38:d3:1f:9f:df:ba:96:02:f7:df:
                    86:6c:f7:7f:36:03:6b:35:38:6e:6f:8f:76:cc:75:
                    37:9e:59:11:1b:97:5d:91:d1:b6:db:33:98:a9:68:
                    92:38:fa:3f:7f:dd:fb:81:93:f8:a5:fa:3e:d3:40:
                    85:0e:73:66:0f:b5:7a:c9:69:49:10:0d:0e:ef:3f:
                    71:54:a2:22:19:88:dc:fc:d0:05:2d:eb:69:f9:b1:
                    dc:66:ea:0e:44:80:72:24:f2:db:8e:64:45:0b:2c:
                    c1:43:00:f7:9e:64:3a:cb:5a:dd:e5:2b:c5:ed:95:
                    eb:75:31:64:64:37:9b:8e:48:4c:19:a6:c3:0b:40:
                    ef:d3:b7:f3:17:b1:3e:f0:df:48:d7:d4:38:7a:34:
                    68:66:f0:92:d5:e8:d2:24:70:7d:7f:b6:ec:42:70:
                    d4:9b:1b:6e:c6:a5:e5:f5:ac:21:27:a2:47:7f:73:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:29:34:C5:BE:55:1E:6E:11:C2:28:D4:0B:F0:1B:84:47:D3:11:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b6d0927-d4f1-317e-b7a0-1925a9f0044e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:33:03:4a:c8:45:c1:78:18:e2:e0:ab:fa:ac:80:fe:66:cd:
         ea:26:e6:c2:c3:c0:5d:a0:fb:56:25:bd:64:b6:d0:77:46:2b:
         84:98:4c:09:fc:16:d2:aa:05:0c:eb:47:bc:26:9b:2a:af:b6:
         53:54:da:2a:4b:95:f6:35:9d:78:d8:39:37:97:67:b8:d3:10:
         21:7c:b5:b3:70:a4:f2:9b:d7:17:6a:95:55:84:b1:ce:48:6d:
         1b:20:78:ff:6f:4c:fa:f1:53:df:31:b0:64:ce:09:94:f4:37:
         4a:2a:4b:ff:59:7e:7e:ae:43:4c:4d:9a:f4:aa:bf:6d:2c:4b:
         22:ed:e8:f5:27:a4:fb:77:57:ab:0e:6a:02:18:86:02:11:bb:
         8f:99:d2:72:a0:9d:7a:26:ed:f3:d3:0f:97:b6:2c:38:56:bc:
         44:92:ed:2a:9e:63:c6:4c:ce:e9:03:35:cf:7c:43:ac:2d:09:
         2e:34:bb:27:d6:77:89:d1:98:78:f4:25:2f:51:a7:6e:bb:cc:
         41:c2:87:a9:66:f0:52:16:64:d5:25:12:e5:b0:85:f0:82:a2:
         e6:56:ec:dd:75:c1:eb:85:11:0a:89:ca:e0:af:9a:9a:39:57:
         f9:3b:0c:24:ad:f1:c3:30:55:25:71:b8:cb:da:8b:81:7b:48:
         1b:be:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:19:31 2025 by rpki-client