Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa
File:                     c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa (raw, json)
Hash identifier:          PDW41TacLnnNhpvGORT5Vx/j6mBwctaEDhmT3uT75Pk=
Subject key identifier:   5A:92:4B:AD:DF:BB:C3:1B:4C:3D:92:C3:15:2A:05:B5:18:A7:24:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB736320C4F0330910C7700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        76.129.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:36:32:0c:4f:03:30:91:0c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6d8bd3f9-9a54-4287-bd76-9fe5ae5fcd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:21:3e:f1:bf:9c:53:5a:ef:27:f8:51:38:
                    f7:bf:90:80:70:81:a5:45:3d:5a:8a:76:40:51:cb:
                    8e:4f:ae:85:4a:45:44:89:c1:98:40:52:12:51:85:
                    2e:39:b0:d4:fe:2f:b5:66:dd:bd:54:0f:c6:d7:f2:
                    a6:26:ea:d0:ad:46:f9:b7:7f:96:20:3b:c4:f0:26:
                    4d:7f:68:b4:b2:ff:60:f8:49:70:34:27:d1:55:76:
                    f9:12:0e:6a:6d:09:35:29:bf:be:94:46:bc:68:53:
                    dc:5c:b6:7a:ec:11:a9:2e:ce:84:50:87:3a:af:a5:
                    d2:20:50:93:8b:75:54:ff:0c:6d:5f:24:73:60:f2:
                    46:aa:d1:cb:31:a8:58:d0:ec:d2:b8:07:a4:6e:66:
                    ca:fa:a2:31:e0:92:be:eb:52:d4:04:52:33:f6:17:
                    0a:ba:d7:bd:0d:46:31:2e:6a:8c:ca:59:55:b7:9a:
                    1d:56:b7:15:35:b0:02:ae:d5:e9:ea:af:eb:4a:98:
                    2e:5e:80:40:1a:78:f8:92:00:d8:91:78:f3:ed:b2:
                    cd:85:82:a9:2c:00:75:b0:32:67:d3:37:5b:c9:9d:
                    17:f6:8c:c7:90:cc:5c:65:01:73:2a:96:67:a0:0c:
                    78:23:92:56:0a:d8:22:7a:76:2e:14:9c:e1:61:06:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:4B:AD:DF:BB:C3:1B:4C:3D:92:C3:15:2A:05:B5:18:A7:24:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:36:5f:41:0b:bc:8a:d1:9c:6e:06:b5:b4:92:76:74:48:8c:
         07:1c:98:f5:b5:f9:87:fb:c2:5d:42:41:94:2c:81:00:9a:53:
         b5:88:6b:03:e0:af:0d:63:63:69:14:5f:ce:b9:25:9c:69:76:
         1f:f1:e7:3d:b3:c7:7a:50:71:90:9d:1e:0c:19:c6:b0:e8:44:
         43:8b:12:4e:1b:b4:c2:e2:9b:57:5b:15:c4:53:d1:9c:14:59:
         04:80:e3:6c:20:8e:01:4f:66:5b:fa:67:a2:a1:f2:3b:4c:79:
         6e:4e:e0:5a:2b:09:44:2f:3c:32:59:0b:bf:ca:54:4c:78:c3:
         5a:ba:ad:ad:32:53:93:00:8a:8e:5c:be:03:d1:92:79:17:96:
         e4:45:30:f7:a3:e1:cb:8d:3d:f1:a0:28:e4:30:76:d3:ba:fe:
         98:67:06:ec:94:83:ca:f0:8b:82:fa:15:a9:c2:6b:f8:29:e8:
         5c:24:63:b2:16:2a:ab:ae:de:80:88:af:d8:fa:78:c8:3a:5e:
         3a:d9:3c:bd:79:78:2f:9d:dd:e3:99:71:09:6a:9c:24:b8:93:
         19:f8:e0:07:dd:3c:fd:a8:4f:c6:35:64:ab:b5:6d:a7:92:53:
         1f:2a:f3:bc:d8:f8:32:9e:5c:11:88:27:44:e1:64:fb:cd:72:
         69:b2:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:54 2025 by rpki-client