Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b6735-8394-3adb-8536-82e20a0bba69.roa
File:                     933b6735-8394-3adb-8536-82e20a0bba69.roa (raw, json)
Hash identifier:          j74eN/PGeseDJdFgFTV1pPpesdNyRaL2l5kxdEC0Ds8=
Subject key identifier:   F2:21:56:2B:0F:75:6D:96:35:6A:7D:BE:2F:DF:A4:77:0C:64:BB:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8ED82E62F5F48C37DA800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b6735-8394-3adb-8536-82e20a0bba69.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7016
IP address blocks:        69.139.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:ed:82:e6:2f:5f:48:c3:7d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b9156fc4-c85c-400f-808c-d37266d77090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:ac:db:97:c0:27:c3:3f:9b:7a:c5:6d:db:
                    94:89:3d:5e:5f:ed:a5:6a:78:70:57:64:2b:fc:50:
                    48:db:ed:c9:72:61:79:d7:fa:04:ff:69:56:25:81:
                    30:77:85:01:e3:1b:80:a5:36:91:cc:75:d2:57:97:
                    b4:dc:82:2c:c3:8d:18:1a:84:06:69:2e:1b:03:d9:
                    c8:85:a6:38:74:eb:9a:da:ae:11:f5:54:c4:75:8d:
                    02:48:db:f5:74:9a:65:e6:4f:c6:59:25:b6:16:fa:
                    60:b3:be:6d:0a:d5:22:54:20:29:b7:3b:95:73:71:
                    85:2e:86:90:c8:df:cc:9d:eb:f6:c9:74:e1:7b:3e:
                    0a:ee:df:1f:20:81:54:29:bd:c5:21:14:a2:d7:2f:
                    8e:24:1d:aa:ec:82:f7:82:d3:c5:be:77:02:f4:5a:
                    87:89:52:70:10:68:ce:f9:c4:97:23:b2:97:b0:97:
                    4c:2c:2a:b5:05:5a:7d:da:86:a9:22:ae:43:ce:3f:
                    d8:a1:bf:cf:49:1d:20:9e:82:a7:cf:31:75:1c:ac:
                    5d:4d:72:00:fa:49:37:91:8c:56:21:3e:17:94:df:
                    26:ac:da:df:d8:53:e1:32:f6:d4:82:f4:f1:e0:1c:
                    60:36:83:df:5c:be:5c:03:6d:a3:4f:41:21:f4:7c:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:56:2B:0F:75:6D:96:35:6A:7D:BE:2F:DF:A4:77:0C:64:BB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/933b6735-8394-3adb-8536-82e20a0bba69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:b3:1e:00:e5:20:aa:da:dc:10:21:f6:1d:a0:91:57:52:
         3c:96:56:ab:1c:e4:6b:84:7b:03:04:26:b5:d5:85:96:89:6f:
         86:15:80:94:a9:21:0f:fa:4c:20:72:df:8f:53:f7:25:8a:ad:
         a4:c6:f0:7b:34:e9:b1:b6:23:68:d7:11:92:b1:54:b7:dc:b7:
         69:93:7e:d9:80:7d:52:03:8c:2b:e8:61:cb:a8:46:44:df:9a:
         27:43:a7:94:bf:91:6c:90:5a:e7:b5:07:18:18:fc:0b:3e:a3:
         7a:0a:55:43:88:93:6d:10:ee:40:71:51:55:b2:0d:19:d1:60:
         94:7c:7f:8c:2d:68:07:11:1b:9e:07:f0:3d:99:f8:0e:9c:15:
         17:55:ff:96:b8:1e:49:f8:eb:63:63:8a:7b:82:41:72:d2:9a:
         45:3d:68:77:4e:e6:b6:1a:2a:c9:2f:1f:ec:0f:71:1b:63:fa:
         6c:25:3f:54:9b:1d:99:42:38:8c:0b:ee:8f:13:fe:c4:ef:7d:
         5d:ac:7b:06:45:c1:d8:67:17:d8:11:9f:bc:b0:38:e9:f1:7f:
         f2:1f:a3:18:49:bc:be:68:0f:ac:0e:3c:f2:65:44:b7:26:7f:
         e4:5f:d5:fc:b9:23:40:48:5a:28:b8:e4:08:1c:eb:10:ca:96:
         76:84:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:37 2025 by rpki-client