Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d8d8e3a-765c-3ef9-b677-b473bb3ad891.roa
File:                     7d8d8e3a-765c-3ef9-b677-b473bb3ad891.roa (raw, json)
Hash identifier:          vt1nM5jpx7h4NR5KxD4OHAIa8gGu+p6anpu9B2vBkqY=
Subject key identifier:   D0:CD:61:25:DA:20:ED:F5:CE:35:10:22:47:C6:85:0B:C5:34:9C:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9AC2364BA5880842E4B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d8d8e3a-765c-3ef9-b677-b473bb3ad891.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        75.73.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:ac:23:64:ba:58:80:84:2e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=00ed025a-e0cb-4a9e-82bc-6a634c86f974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:ed:3e:ec:54:d6:6b:0a:d7:c8:15:bf:12:
                    fe:72:50:cd:7b:d4:87:8b:1c:d7:bb:c4:00:96:56:
                    9f:5d:19:87:ad:f6:1c:5d:cd:76:37:e5:59:0f:34:
                    e8:82:11:ce:5b:ca:db:88:ef:58:fe:f0:be:e8:96:
                    0c:84:e7:68:40:cd:04:b2:d4:ab:a6:59:ef:9b:77:
                    c7:72:18:b4:38:70:76:ca:2b:be:db:30:c0:96:15:
                    c0:d6:32:6e:e3:fc:53:00:56:cc:1b:02:3f:ad:66:
                    72:a6:93:07:24:99:db:1a:73:63:cd:b8:85:85:d0:
                    49:9f:ce:89:37:52:15:e6:00:f0:d8:e1:70:c4:60:
                    b7:8f:a4:97:ea:db:87:1b:0f:5d:73:98:08:4e:83:
                    be:ab:78:d0:97:55:17:3c:7b:97:f5:3d:82:0c:c1:
                    88:fb:11:b4:8c:5d:22:01:54:ce:ad:c3:27:63:8f:
                    1f:22:b8:2b:a9:7d:21:b1:fe:c4:86:c8:70:c3:b6:
                    ee:c4:06:83:25:b4:ed:49:b7:c2:4d:0d:29:8a:ca:
                    83:c0:e5:86:18:b4:41:1d:7b:1a:2e:21:32:58:f3:
                    4f:74:27:bc:ef:d9:96:b3:1f:a6:cd:92:2b:ed:fe:
                    82:06:3e:0e:08:07:40:89:47:70:39:e3:73:a9:95:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CD:61:25:DA:20:ED:F5:CE:35:10:22:47:C6:85:0B:C5:34:9C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d8d8e3a-765c-3ef9-b677-b473bb3ad891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.73.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:2c:44:d5:85:ec:70:9b:31:bb:39:9a:ef:a1:a9:53:80:
         5c:87:1b:3c:2f:bc:41:b3:d9:7b:0b:0e:ca:af:8f:1e:f2:da:
         60:42:f6:be:51:01:af:70:7f:1c:cf:c6:02:af:b3:ef:31:69:
         06:95:cc:4a:29:1b:4d:6e:dc:8c:bd:66:c8:b1:f8:f9:ed:41:
         41:d7:9c:de:34:ec:b9:f5:a6:26:90:30:41:18:7e:83:3a:3e:
         4e:fe:50:46:c9:e1:99:fc:53:0b:a5:0f:16:fe:d2:60:96:4f:
         3b:98:d2:ff:1f:08:08:c5:56:b8:f5:74:9f:93:79:93:2e:d1:
         be:87:be:94:ba:70:23:e8:86:d2:5f:cd:9e:f2:c7:20:7e:bf:
         8c:77:74:4b:53:e3:32:33:b5:7c:74:1a:d6:a4:51:08:46:c7:
         5c:63:a1:0a:56:b2:59:40:54:09:46:4a:b7:9d:f3:c7:7f:6a:
         0e:a7:9c:6f:20:59:85:ae:9f:af:bf:08:79:ef:4d:78:a4:be:
         2f:ca:a1:2f:1b:e3:94:99:23:8a:37:2b:27:16:ad:56:b5:e3:
         55:71:43:d4:d1:79:33:3a:15:0a:0e:18:96:31:57:8d:98:22:
         fa:b7:7d:d6:6d:55:f3:7a:17:6b:26:88:a8:cf:72:b6:67:04:
         0c:4d:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:47 2025 by rpki-client