Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be63157e-6f73-3642-b961-7a8ab99967b3.roa
File:                     be63157e-6f73-3642-b961-7a8ab99967b3.roa (raw, json)
Hash identifier:          5AL4GNPq5M9lozjvP3PRkwcbRMQsNTSgd03/G4LRiSE=
Subject key identifier:   9F:06:24:75:8F:E3:9F:EE:E7:CD:E9:A0:71:56:8E:6D:43:02:1D:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8D0413D3F71559F933C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be63157e-6f73-3642-b961-7a8ab99967b3.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.129.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:d0:41:3d:3f:71:55:9f:93:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=39952006-7fff-445a-bde1-520ed81acc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:8f:d5:5e:8a:d2:87:e7:53:8c:c7:8b:72:
                    e7:20:b3:f8:8f:6a:70:f4:ac:29:c8:5a:1e:74:6e:
                    65:f2:e1:e5:6c:c8:43:71:3d:c3:49:70:f4:01:3f:
                    95:0d:8b:81:9a:a3:60:2a:d4:7e:d2:87:5e:5b:a1:
                    76:68:fa:e5:23:99:b1:0b:12:ef:91:ff:8f:7b:ee:
                    2c:6e:fb:44:fa:10:22:49:3c:2a:44:48:a9:c4:64:
                    3a:61:99:e6:17:c4:d9:3a:aa:2a:76:82:b0:b5:87:
                    23:1f:32:b9:6c:9d:c6:0d:cd:ff:98:4b:71:b5:b2:
                    61:ad:25:f8:7f:65:6f:06:af:70:6a:aa:6d:82:0e:
                    ad:8b:cd:28:8b:ad:80:86:d2:4f:8f:7e:8b:40:52:
                    4a:86:3a:95:cc:7c:be:a8:c1:70:1f:eb:72:1b:93:
                    9b:89:6a:96:ec:ed:dd:33:b4:2f:83:a0:ce:1f:40:
                    b1:d4:a4:08:aa:e5:4d:7e:72:2a:02:26:02:48:65:
                    75:fc:54:07:e0:7e:1a:a8:49:30:1c:4b:5d:95:3c:
                    77:b1:82:c4:8b:db:07:f5:bb:67:a7:36:74:f9:19:
                    59:70:4b:76:6e:fd:27:56:09:5a:f4:7a:1a:af:c8:
                    b4:09:d8:0e:c6:4f:db:8a:ae:9c:77:4f:a9:09:23:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:24:75:8F:E3:9F:EE:E7:CD:E9:A0:71:56:8E:6D:43:02:1D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be63157e-6f73-3642-b961-7a8ab99967b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:5c:39:f6:ae:8c:bf:35:ee:16:97:de:72:40:b9:61:be:
         11:de:e4:a5:fd:d7:b0:9f:82:84:7e:dc:6a:77:09:28:03:58:
         08:a7:1b:09:29:aa:6f:dd:59:77:44:38:29:cd:1b:8d:7b:9a:
         63:e4:87:6d:7c:83:8a:89:6f:4d:8b:38:d3:dc:1f:56:07:be:
         3a:a1:15:c7:f6:27:bb:4b:91:0d:98:a4:7f:00:f7:04:9d:60:
         2a:fd:eb:d2:d3:6b:d0:4f:a6:40:6a:95:d5:c4:54:66:60:0d:
         bc:e7:82:71:d6:d5:53:2e:b1:ec:d0:f4:0d:6a:59:c9:9c:21:
         ae:b2:56:b1:f3:f7:70:70:25:0d:9b:49:3f:d3:ad:5c:13:cb:
         5f:15:83:63:5b:25:62:b1:51:6a:fc:3a:c1:f4:be:e5:cb:0e:
         6e:99:84:d4:38:01:46:f7:33:b6:c8:fe:a5:f1:ce:c2:e6:97:
         12:1d:77:c4:a0:70:5c:c2:33:c9:d4:89:14:1b:2d:ae:ac:fa:
         67:29:09:c9:93:cf:e1:ed:58:db:3f:b7:6e:30:7a:74:a4:6e:
         62:13:65:eb:71:66:1c:af:0c:e1:c7:97:76:67:4d:20:bd:17:
         a0:e3:af:f9:08:09:a1:73:9c:ca:ab:c2:bf:8a:52:9e:6f:a8:
         b5:08:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:24 2025 by rpki-client