Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f667d71-7729-3eeb-afc7-2f1bc8ef290e.roa
File:                     9f667d71-7729-3eeb-afc7-2f1bc8ef290e.roa (raw, json)
Hash identifier:          hm08K7y1yLHtWtxNhcVQW/Td8rFocbnNkEMzRjJf80Y=
Subject key identifier:   1C:8B:8A:78:9A:BF:FE:D2:A8:0D:D2:33:E1:4C:F8:6B:D9:85:63:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD62A6091B3F9323822742
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f667d71-7729-3eeb-afc7-2f1bc8ef290e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        73.252.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:62:a6:09:1b:3f:93:23:82:27:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=aaf895a6-6847-4215-b560-0493800a89b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5c:aa:f3:90:45:43:43:68:8e:74:6b:ed:c5:
                    d7:64:c7:df:89:8f:8a:07:1c:9d:66:50:58:32:0d:
                    ee:3f:a8:38:39:87:de:fc:dd:83:6c:7a:38:98:dd:
                    c1:5d:8d:3d:ca:84:1b:23:e8:63:13:3e:bd:91:5a:
                    7a:0b:22:64:79:40:f6:e1:cc:6d:1d:9c:db:d7:ac:
                    89:37:b4:72:f1:86:49:0b:81:16:49:0b:ee:b4:4b:
                    c9:7e:53:e5:19:d0:9c:c5:00:94:12:e5:a2:56:50:
                    fb:c3:96:44:a1:ab:4a:ee:3e:22:4e:80:e2:a2:51:
                    ef:aa:b7:46:ec:a2:99:01:a9:ab:dc:cf:7c:cc:2e:
                    85:0d:de:fb:0b:df:d8:6f:13:f4:80:7e:60:be:fe:
                    57:2a:f5:1d:d0:ac:62:28:3f:6a:8c:7f:4c:61:94:
                    a7:c4:16:fc:6c:1b:b9:25:93:93:c6:c2:0b:9b:ca:
                    3c:c3:e5:3c:4b:4b:1e:f4:51:1c:39:ba:f3:58:d8:
                    43:7e:05:62:eb:ef:c1:b2:d9:8f:16:8f:3f:b1:5f:
                    3b:53:d5:a0:e7:e2:45:c7:ed:ec:46:ba:ff:0f:7e:
                    ba:f7:4f:28:1d:1f:8e:82:49:e0:69:bd:33:2d:85:
                    6c:a5:b2:1a:9d:dd:9a:70:8b:48:58:d3:33:59:1e:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:8A:78:9A:BF:FE:D2:A8:0D:D2:33:E1:4C:F8:6B:D9:85:63:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f667d71-7729-3eeb-afc7-2f1bc8ef290e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:14:80:e4:1e:dc:a8:a4:a0:3c:0c:fd:83:e3:91:2d:7e:bb:
         94:18:45:ee:5c:db:7d:43:05:87:21:b6:a5:b1:bb:2e:a5:9e:
         b2:eb:2c:71:fa:13:13:0d:92:e3:d9:07:21:91:9e:f8:32:81:
         bf:76:af:1f:da:80:5d:a1:58:0e:2e:51:ed:b8:cf:55:1b:48:
         93:f2:81:3f:e0:71:ee:99:11:f7:23:ef:26:d0:00:e2:4d:d7:
         fa:f7:72:f9:14:f9:ab:ca:a8:47:3c:3c:30:7c:98:6f:45:7d:
         eb:10:b3:93:38:1d:1d:ce:e4:a6:58:e4:23:39:8a:19:e8:a5:
         54:12:85:99:64:4e:0a:5a:c4:51:d3:91:f0:ea:34:15:cb:7d:
         44:d6:1f:c6:96:05:fb:5a:ec:17:1b:83:bf:32:05:62:d0:53:
         3c:6e:12:9b:23:37:85:cd:e8:22:0c:e3:95:99:7c:66:fd:fc:
         0f:97:63:6f:f9:6d:28:9d:2c:1c:2c:02:76:80:54:99:54:36:
         35:9c:e4:7e:83:81:71:66:c0:23:37:d6:2c:b0:2e:cd:71:10:
         59:31:5b:4f:66:92:d2:13:3d:73:f4:17:87:e0:ee:60:55:0e:
         ac:f3:59:d3:55:13:ac:e6:f6:c4:74:25:17:30:31:3a:d4:b7:
         06:9a:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:02 2025 by rpki-client