Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa
File:                     c5216fc9-8306-30f2-91a4-a9f71b298a46.roa (raw, json)
Hash identifier:          HdNIa6fDDDGVSYfLva4f0c2mJWrvhT+clK66kbyMX2U=
Subject key identifier:   82:81:9F:27:26:59:6A:C8:0C:6D:CE:93:12:32:A1:1C:1B:60:4B:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8B897C756CBDBFE117280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        71.236.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:b8:97:c7:56:cb:db:fe:11:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=dcf76f9d-1487-4647-a814-146f8ecfdb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:16:da:c6:21:71:00:62:0c:09:c5:0b:56:
                    09:3c:fa:9a:1f:e8:dc:b0:b8:cf:eb:07:30:28:74:
                    95:fa:21:29:36:9e:ec:2f:0a:ce:f3:44:6b:b5:bc:
                    4c:ad:00:59:18:2a:8c:31:fb:f5:f5:90:2e:8a:c1:
                    b8:98:b7:e1:7f:24:76:c2:d1:58:87:1f:85:58:9b:
                    75:99:c0:d5:53:5d:c5:21:f6:ee:0a:2a:d6:bc:03:
                    31:a1:f9:0a:83:a4:02:5d:35:25:89:af:38:0a:33:
                    03:c6:c6:ef:6b:4a:f5:12:5f:85:c7:41:40:27:f5:
                    dd:7f:e8:cc:e6:4f:ce:81:09:fd:f2:06:34:0c:10:
                    d0:b3:11:f8:85:70:68:5e:ae:17:fb:4b:f1:3c:a7:
                    2b:22:00:d5:d9:6b:86:dc:8a:d7:fb:89:c7:eb:fa:
                    24:5a:61:75:b3:92:bb:97:6c:70:fe:48:9a:5e:df:
                    b0:55:7b:f3:6d:1c:c0:ae:6b:d6:02:03:c8:82:76:
                    47:b1:b2:9a:a7:ab:9d:f7:dd:25:c3:51:fe:dc:62:
                    0a:6f:48:90:4f:aa:5e:0a:70:97:1d:18:77:f1:ab:
                    18:88:55:cf:5a:c8:f5:ae:75:85:d4:aa:7e:58:bb:
                    a1:8f:9b:1e:f1:64:e3:1a:bd:8c:54:44:8b:52:f4:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:9F:27:26:59:6A:C8:0C:6D:CE:93:12:32:A1:1C:1B:60:4B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.236.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:81:b5:6d:73:65:36:09:7f:05:0c:dd:f1:57:82:fd:cb:53:
         48:29:6f:17:06:ed:15:b3:98:fc:82:61:f3:43:ec:23:64:88:
         bd:54:60:2f:58:af:14:6d:bb:0e:a2:de:91:38:39:a4:d9:78:
         6f:d1:b1:03:f5:70:d8:04:f3:a3:38:15:77:80:5f:1f:60:70:
         d7:3d:87:d7:c6:bc:0f:b1:91:c4:aa:95:c9:f9:a6:b7:47:df:
         e4:ef:c2:d9:3e:ed:c6:6a:82:40:8a:0b:fe:36:4b:4c:f3:ae:
         60:4f:46:6b:fd:de:ac:39:75:2d:0a:fa:11:37:eb:24:aa:fe:
         8b:ce:75:e2:9b:b9:07:53:2b:ec:d4:1f:49:da:c8:b2:ee:4e:
         8f:b5:14:49:aa:c6:aa:79:55:de:69:b3:2d:05:60:b7:f3:9a:
         84:be:77:de:28:b7:4f:73:99:7e:76:9e:d4:39:61:dc:6e:82:
         ee:b8:05:80:ff:c3:c1:39:c1:f5:bd:fc:c7:84:54:4a:ad:b2:
         1c:aa:59:a5:29:59:5e:ee:fd:f5:4b:d8:0f:18:cc:7b:2d:0c:
         92:54:13:01:d7:47:86:bd:90:86:4e:dc:f3:6f:23:58:2c:11:
         ba:a8:eb:96:70:03:a5:e3:e7:36:35:b1:3a:0e:31:63:c4:17:
         ef:62:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:19 2025 by rpki-client