Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad92ceb0-b15e-35dd-8835-617a37165c7f.roa
File:                     ad92ceb0-b15e-35dd-8835-617a37165c7f.roa (raw, json)
Hash identifier:          0FhTIWC+v47JQ5kEELtzhcFTiXQe41S7YIoy2EIJEks=
Subject key identifier:   23:DA:EA:B4:35:F6:64:C2:9F:F3:E0:EE:A7:AA:B9:41:63:0F:89:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A727E0C267A7B1BE4E3E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad92ceb0-b15e-35dd-8835-617a37165c7f.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        73.75.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:27:e0:c2:67:a7:b1:be:4e:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=48b56a00-736f-4434-947b-6629a4d71d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:66:2f:22:42:7a:65:99:7b:57:6c:a4:c4:
                    f3:c6:f2:1c:ae:99:b5:45:5e:35:45:7a:04:93:0e:
                    ac:dd:c6:ef:ec:ea:bf:ef:6b:f2:4a:10:32:9e:50:
                    b5:d4:8c:cd:1a:e6:63:96:7c:ea:f7:44:7d:51:9e:
                    9d:1e:6a:fa:1f:f6:70:15:8e:08:43:eb:18:4f:62:
                    22:62:9a:16:46:11:6b:f6:43:5e:00:cf:bd:91:5a:
                    f6:71:e1:0a:3e:76:82:31:a1:ce:1a:27:e8:db:0c:
                    cc:3c:e0:db:ee:51:df:1d:12:d6:44:df:da:99:15:
                    e8:b1:94:72:58:42:f6:1d:cf:0a:2d:ad:14:15:16:
                    81:01:76:c9:c2:5b:7d:99:4f:42:28:e1:30:41:24:
                    ac:7d:36:2e:3c:93:a2:30:69:a7:fb:fc:c4:c0:e8:
                    14:4f:5c:92:9d:31:5c:30:f8:68:07:dd:a5:71:6a:
                    f4:89:8b:35:6e:c8:ad:cf:3b:cc:96:9f:31:c5:00:
                    1d:18:e2:3b:06:d8:8a:64:6e:ff:ff:42:1a:99:49:
                    bc:89:94:b7:56:5c:af:10:e8:07:2e:3c:9a:f2:5d:
                    ca:79:a6:77:f7:53:dc:ee:16:0b:b3:d8:14:3a:e2:
                    7c:40:78:fc:31:de:43:e4:b7:45:00:e3:5a:97:ae:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:EA:B4:35:F6:64:C2:9F:F3:E0:EE:A7:AA:B9:41:63:0F:89:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad92ceb0-b15e-35dd-8835-617a37165c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.75.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:39:a7:a5:50:60:55:c2:cb:f4:33:2e:d7:d5:1a:4a:77:f9:
         cc:f8:2f:cb:b4:59:2b:ad:6d:79:8c:f4:65:ff:43:36:ce:5d:
         6d:71:9f:f0:5b:74:6b:5e:f7:17:e4:2a:a9:a4:b1:91:2b:6a:
         f2:92:cb:76:64:57:b4:d5:76:70:37:21:4f:6c:03:0b:e2:d2:
         93:c9:42:4b:3b:9c:36:d5:48:06:01:8f:6c:c1:0c:f9:d8:8f:
         80:44:4b:2d:f1:f9:0f:1e:a7:bc:ea:99:31:21:5c:15:93:20:
         3f:36:05:00:8e:36:0e:a9:99:c7:6a:45:6f:28:bb:ae:af:0e:
         93:3e:39:79:ee:50:80:09:04:71:4d:53:b9:b5:7f:f6:5c:ac:
         37:ed:63:39:41:15:fb:24:2c:d1:4d:84:f2:99:fd:c8:11:c2:
         43:32:de:ab:d1:b7:ef:35:6c:2f:05:b1:5b:b6:16:92:45:7a:
         12:ec:46:00:c9:e3:60:18:f9:cf:eb:7e:63:ea:0c:19:7c:44:
         57:06:84:1e:25:3a:ad:26:43:36:73:0e:fe:2d:54:9b:c8:8e:
         ed:9d:6b:7b:c6:69:19:e7:50:74:ba:35:90:40:e1:4c:bc:0b:
         ce:45:46:1e:2b:2d:81:da:b7:39:c9:67:3c:4d:92:b7:64:87:
         2c:6a:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:40 2025 by rpki-client