Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fc1c1eb-bd95-38cf-bef3-178552887400.roa
File:                     9fc1c1eb-bd95-38cf-bef3-178552887400.roa (raw, json)
Hash identifier:          TFt6rEWEvEteRvWpcfw9WFF6OsR9+QtUS0zJtixCAEU=
Subject key identifier:   8E:D4:2D:EA:2C:64:CC:61:A1:02:D5:BC:2C:DE:7F:7F:0E:79:C9:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD27B05AF4E2D2BB04B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fc1c1eb-bd95-38cf-bef3-178552887400.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     13367
IP address blocks:        73.94.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:27:b0:5a:f4:e2:d2:bb:04:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ca8928bc-2f4a-4af7-b277-3d7cedaf4f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:39:1e:67:e9:e5:ca:23:1d:f6:21:4d:fa:
                    62:17:96:f0:e5:1a:0e:40:ac:a3:f3:ea:51:1f:5d:
                    6a:b0:17:bd:fb:a8:b6:8c:7d:aa:ac:34:62:65:5b:
                    e3:7e:95:e6:37:c0:2c:2c:ba:17:8e:ae:db:49:38:
                    82:db:92:c7:dc:88:4f:6c:ea:5e:b1:94:34:6a:38:
                    11:9a:2f:ba:08:1e:ac:e1:78:af:51:5b:c3:cd:a1:
                    2e:b5:fc:66:f5:8e:57:cb:1a:48:6b:14:71:84:03:
                    4f:19:43:91:22:46:be:f0:06:04:08:88:ad:2b:15:
                    ce:cf:73:c5:fd:3d:09:0e:6e:c6:31:21:5b:9d:b9:
                    16:72:40:eb:3e:eb:af:81:ac:12:e3:1f:d6:80:2d:
                    cd:40:72:e6:2c:35:ae:b3:70:47:2d:06:44:17:df:
                    4d:14:39:b0:a8:29:ea:97:6e:69:cb:39:9a:80:01:
                    f1:5e:bb:d2:64:15:71:91:f0:43:ba:88:54:a0:ba:
                    08:32:16:51:9b:0a:0a:91:d5:ed:14:47:4a:47:71:
                    80:f1:fd:5c:a9:b2:87:0c:5d:38:0e:42:57:66:e2:
                    2b:26:8e:f7:da:f3:69:b7:01:04:2d:55:1f:32:71:
                    27:c9:ff:ff:a5:79:98:da:50:81:73:3b:7b:ae:31:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:2D:EA:2C:64:CC:61:A1:02:D5:BC:2C:DE:7F:7F:0E:79:C9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fc1c1eb-bd95-38cf-bef3-178552887400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:17:5f:bf:85:29:05:12:10:b3:f1:eb:1b:8f:7a:44:7f:f2:
         66:69:f9:d7:e5:59:6f:45:69:12:e3:2b:fc:a4:db:1d:53:af:
         26:c9:3c:1d:03:5a:b1:dc:53:37:5a:20:b8:5f:be:53:28:85:
         ce:c5:45:eb:6b:ca:f0:d6:6a:b9:da:c1:fe:25:b3:69:c9:62:
         aa:d4:a3:48:61:d6:25:5a:fd:3b:e0:e8:4f:f7:19:08:df:15:
         1e:4e:6f:76:4a:a5:e4:fb:32:d0:0a:d8:f8:53:fa:ec:47:bd:
         41:bb:89:ca:aa:06:58:a0:3c:1f:86:99:98:38:85:95:19:41:
         71:55:08:59:9d:d5:3e:08:0c:52:d6:15:26:98:c9:4a:2a:d6:
         ba:12:08:60:20:84:1c:87:03:79:0f:03:9a:ad:e2:95:ed:0e:
         35:ef:26:fa:48:c7:33:28:bf:57:45:2e:62:6e:69:ee:37:65:
         bd:c5:4c:16:f2:8a:de:48:08:09:59:01:f4:62:e9:d7:81:84:
         43:63:c7:5d:74:ad:8e:21:45:f9:a1:a6:32:7c:75:c8:55:e9:
         4e:f0:b6:e1:73:05:4b:47:78:83:90:18:71:2c:4a:5a:b1:1c:
         45:14:44:54:9c:80:d8:1c:cb:32:c7:62:2d:a5:32:16:47:02:
         40:49:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:51 2025 by rpki-client