Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98067905-1599-390c-bbf2-d5db28350f98.roa
File:                     98067905-1599-390c-bbf2-d5db28350f98.roa (raw, json)
Hash identifier:          lyt8H0JcvSPWGoRxdRKFKe0o28vnhd7Oe3lKmNhrW+E=
Subject key identifier:   8A:45:37:F9:65:F6:37:00:14:CE:5B:52:13:8D:2C:31:C0:3E:D4:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD12520699E40BFFCED700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98067905-1599-390c-bbf2-d5db28350f98.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.127.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:12:52:06:99:e4:0b:ff:ce:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=4929bea4-dc20-4b1a-a8a6-94a218e0d8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:90:d4:f7:eb:f8:68:14:48:7c:ec:1e:6d:
                    8d:2d:aa:c4:e8:74:78:87:a1:2f:8d:40:64:f8:1c:
                    20:18:b1:8b:4b:b3:ae:04:22:08:97:3e:2a:bc:2f:
                    0e:ed:59:c3:25:f2:31:cb:01:28:0a:b6:0f:f8:17:
                    ee:5c:d0:5e:6b:49:e3:a4:39:52:fd:0d:10:43:64:
                    4e:5d:a6:aa:b6:4c:a3:63:e9:5a:76:26:ff:1c:8f:
                    e2:2f:49:35:26:c5:ec:8c:a0:1a:75:06:b0:07:a8:
                    f5:6a:ce:41:f2:f0:1b:b6:e4:e7:c0:da:e4:3c:bf:
                    1f:19:90:d2:b6:1c:e1:71:5d:d4:28:b5:75:03:5a:
                    81:cf:93:77:9d:25:d2:56:14:97:77:9e:f4:85:31:
                    0b:b6:e5:51:6b:e9:62:ef:6e:69:54:30:44:3d:c7:
                    5a:45:0b:93:aa:ae:d6:1a:4f:54:43:f0:c2:24:df:
                    1f:94:b7:cd:ce:b2:4e:5d:95:87:c9:1a:03:be:98:
                    6d:58:28:53:52:9e:d0:14:90:8c:1f:b1:2a:a8:cd:
                    c6:e6:6e:e9:f8:77:5c:19:2e:ab:a9:ac:c2:a3:77:
                    05:82:ac:ee:ef:36:bc:f6:fa:de:e9:04:9a:bf:a9:
                    60:2c:a1:df:12:69:2d:d6:75:3e:b5:b6:cb:27:94:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:45:37:F9:65:F6:37:00:14:CE:5B:52:13:8D:2C:31:C0:3E:D4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98067905-1599-390c-bbf2-d5db28350f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.127.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:01:99:b0:18:dd:b7:e9:bf:19:18:1b:3d:99:2c:ec:7f:ec:
         11:06:41:8c:2d:71:2d:e5:5d:43:9f:24:3d:ef:df:b3:bb:4f:
         7f:e3:95:d8:40:60:de:7a:5d:cd:ef:3e:24:67:8f:89:01:50:
         65:3b:6b:11:50:88:96:aa:e8:12:7a:26:02:69:1c:16:21:e6:
         d3:21:b8:db:f9:4d:05:be:7e:a8:66:a2:f3:14:34:0f:98:e9:
         c0:a4:5f:39:fa:59:ad:d3:81:f7:a2:4c:cd:38:44:49:91:99:
         b0:63:be:55:4f:7d:13:0f:0c:ef:2a:58:df:d6:07:5d:57:15:
         9e:34:72:5c:1e:6a:0e:74:9e:a0:a0:b6:3d:04:bd:da:bd:5b:
         d0:b4:7c:1f:3c:b6:76:96:07:af:f3:1b:12:63:f8:f6:cd:2c:
         84:3b:4e:2a:9a:57:5b:8e:96:e2:46:8c:56:c4:c1:bb:60:10:
         64:ef:78:cc:91:d2:ff:39:62:0e:73:23:21:0a:0b:67:13:5c:
         b0:61:d3:ca:05:0c:61:56:43:59:1e:f1:dc:79:df:a2:bf:24:
         28:9e:41:19:db:81:9c:d2:fd:e8:f3:7e:8e:b8:8f:50:d2:b8:
         2f:1c:18:1e:cd:ad:ac:68:f1:1d:de:ed:c1:38:50:7e:ef:74:
         fc:8b:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:44 2025 by rpki-client