Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f05d38-2fe7-30dc-8335-43c6938aee40.roa
File:                     84f05d38-2fe7-30dc-8335-43c6938aee40.roa (raw, json)
Hash identifier:          cVrdnVN1UgYLfs7fPAxexF866nebKzy3MIhcUbis/RI=
Subject key identifier:   1E:AB:1F:C9:81:A9:CD:23:32:F7:3F:12:46:5C:C2:BF:14:55:CC:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A860709C9CBBA91E535580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f05d38-2fe7-30dc-8335-43c6938aee40.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.253.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:60:70:9c:9c:bb:a9:1e:53:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=88177e5a-bb3f-4c2a-910a-e6f0a5fc5da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:e3:3b:43:63:d0:cc:c6:f2:85:b6:4b:aa:
                    8e:ac:34:03:bc:7e:32:49:15:53:6a:42:18:7a:7e:
                    91:e6:18:89:34:9b:cc:35:07:a1:ac:38:48:05:e7:
                    8f:ae:20:45:8e:f4:98:f7:09:03:59:17:0e:2d:91:
                    05:73:9a:93:14:5e:bd:bc:15:79:fc:85:a8:3f:7d:
                    99:47:98:68:bc:fc:d9:ce:6b:50:7d:25:3c:14:bf:
                    b0:92:92:09:ce:e8:55:54:cf:5b:31:ab:28:8d:be:
                    f0:4b:1e:a3:07:30:c5:2a:0b:49:02:21:9c:ff:0f:
                    00:f7:b9:b3:43:dc:93:5e:8d:ba:f1:d9:10:4a:d2:
                    68:ff:03:c0:3f:f1:07:50:e1:60:3c:72:a8:bb:07:
                    df:54:b6:b1:05:a3:14:8b:e9:f9:cf:70:f1:6a:56:
                    0e:1e:84:9c:97:f1:7f:d1:4e:4b:97:11:47:63:36:
                    e9:36:b5:84:ce:11:15:fe:f5:af:c2:e4:87:90:27:
                    71:e4:87:40:d5:f3:e3:3c:c2:f7:f9:68:f1:a4:20:
                    57:43:1b:27:46:13:67:9e:6b:eb:fa:c1:4f:c4:ea:
                    1d:2d:1c:ab:a1:4e:be:26:f5:2b:a0:24:26:c4:4d:
                    a4:c2:a1:bf:d7:94:00:6b:1a:3b:78:79:93:a5:bc:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:1F:C9:81:A9:CD:23:32:F7:3F:12:46:5C:C2:BF:14:55:CC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f05d38-2fe7-30dc-8335-43c6938aee40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.253.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:76:df:75:c9:93:eb:3d:b9:34:b9:c4:cc:f1:69:ac:d1:d9:
         3e:a6:4f:37:52:f4:3c:90:75:28:ca:e6:dc:22:db:ca:f8:85:
         af:85:92:65:a3:c1:23:e5:00:09:6c:d1:d0:05:1d:83:42:c1:
         ab:66:a3:ad:47:a5:ef:50:62:75:81:96:41:b2:55:b6:f7:0e:
         3e:d0:9b:f4:fe:fe:a5:65:bd:ba:d3:dd:de:de:79:b3:39:05:
         3d:56:e5:38:82:32:c0:d8:5d:ae:f9:3f:3d:0a:1f:fd:14:68:
         b7:7b:1e:49:de:81:f1:2d:b9:9e:72:dc:9c:4a:d9:a2:d8:e7:
         71:93:ba:c7:c7:12:1b:e9:c0:67:27:a4:eb:87:ad:88:a5:2e:
         75:60:66:23:4c:03:09:cd:69:93:af:02:c4:41:d3:0a:c7:5b:
         13:52:e2:cf:d6:58:38:b2:b1:30:35:e6:c1:f3:8e:2a:03:4f:
         ff:fa:5a:b0:f6:de:bc:75:04:35:a4:a2:19:48:9a:8d:fa:ce:
         aa:01:81:42:b4:b5:1c:ca:f8:e7:04:42:64:77:06:2b:70:a9:
         c9:6e:31:2a:2a:1d:e5:b1:60:8e:a4:3e:52:79:36:d4:ef:fc:
         1a:76:52:ee:bc:d1:11:49:08:65:f4:1e:13:7f:b3:dc:99:aa:
         97:56:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:28:57 2025 by rpki-client