Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d920d5e-5cb9-30fe-a562-0bda168cd126.roa
File:                     9d920d5e-5cb9-30fe-a562-0bda168cd126.roa (raw, json)
Hash identifier:          3RqrQkmQfADnEVs4cZT8jmEW4g200QtVyJwvn1x29dY=
Subject key identifier:   3F:75:90:FA:A1:BB:86:AC:72:18:0D:0B:6A:11:B5:F7:60:3D:6D:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9A8C4DD3F1D2D3712A124
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d920d5e-5cb9-30fe-a562-0bda168cd126.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        73.228.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:a8:c4:dd:3f:1d:2d:37:12:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=bab5d4c2-96fc-42be-8511-3eccd7f771c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:2d:85:33:23:6a:c1:53:26:3a:7e:a2:eb:
                    0c:67:d3:6d:bc:54:1d:fc:b4:d9:1f:c4:da:9e:18:
                    93:78:1a:6c:4f:f2:40:fe:6e:9d:dd:3c:a0:11:cc:
                    f0:d9:83:90:67:88:e6:c7:2a:0c:6d:52:fd:a4:b7:
                    2f:12:a8:93:26:ce:d2:0e:66:80:cc:94:31:4a:37:
                    94:86:d2:49:79:b3:56:9e:2c:42:9f:86:e9:46:e5:
                    90:aa:d1:62:8c:7a:af:4f:24:cb:a2:8a:36:48:b8:
                    58:51:fb:fd:dc:7e:e1:c4:55:21:9b:4b:fc:e4:4c:
                    e5:25:03:8e:67:11:0b:d7:5a:72:d0:59:8b:03:55:
                    db:c9:0a:ec:cf:c5:53:87:05:16:55:23:50:df:f5:
                    51:0c:a3:d9:c9:20:6b:f2:7c:fc:fe:30:b1:72:0b:
                    f4:c0:87:78:a5:58:1f:56:4e:df:de:64:2e:f7:18:
                    b8:9e:5c:8e:b8:78:68:b5:9c:98:cf:7a:21:59:8b:
                    95:bd:1d:f2:07:e1:cf:f6:0a:82:af:dd:4e:2d:e2:
                    de:d6:d6:46:cf:5e:df:c0:79:ea:b4:4b:8a:68:f4:
                    ce:46:38:29:6c:f1:7f:49:b1:23:9b:79:10:99:35:
                    c6:86:21:7f:a7:53:7e:7a:e7:63:a8:94:c8:4d:22:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:90:FA:A1:BB:86:AC:72:18:0D:0B:6A:11:B5:F7:60:3D:6D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d920d5e-5cb9-30fe-a562-0bda168cd126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:83:e6:16:e4:ec:cd:b0:d2:ec:25:d4:c0:14:fd:8e:fb:
         55:f1:c6:1b:ce:79:3c:78:c6:75:c4:be:95:54:f8:1b:ff:42:
         b2:bf:9a:fc:47:f6:1b:bb:7f:cd:ad:80:99:1f:f2:63:b5:8d:
         76:bf:7c:d8:f0:b5:a7:5c:06:a1:20:fb:ee:6c:ed:20:ac:87:
         2c:24:7e:22:0d:57:48:da:f9:31:41:ed:b1:ff:08:1b:b1:cc:
         71:c3:2c:99:dc:2a:24:05:a8:9d:fe:7a:36:d9:f2:53:93:06:
         dd:76:e0:94:c8:4a:6d:32:16:9d:e8:54:ee:e8:81:b9:4d:b4:
         77:75:4b:65:19:06:07:fe:56:30:13:f4:e6:e7:46:4f:b6:05:
         cd:c8:69:ed:46:4b:f2:de:d7:e1:9a:cb:ea:da:46:d5:8a:72:
         f8:66:4c:a5:b0:4f:72:dd:85:df:95:e6:e8:23:d3:92:33:3a:
         b7:d0:2f:53:18:7c:91:36:29:f3:31:5f:b6:6e:30:2c:26:65:
         f7:d8:f7:a1:e7:13:9f:fc:1f:f4:4c:0e:db:53:2d:01:3e:34:
         7c:91:f6:b1:89:bf:18:ef:5e:84:c2:90:85:3a:33:76:b9:b1:
         8a:c7:23:18:a3:61:24:84:0f:8c:9b:2f:ff:d4:52:ae:84:47:
         66:89:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:39 2025 by rpki-client