Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c916c17b-83e9-36f6-ad16-97d6b9a95489.roa
File:                     c916c17b-83e9-36f6-ad16-97d6b9a95489.roa (raw, json)
Hash identifier:          sSBFkV8GdrSW86fTxQiYSwxVHWik468IAYkKFa/CdWo=
Subject key identifier:   53:43:2C:7C:F0:D0:A6:F2:FC:24:5D:52:7B:DD:5E:79:D4:7B:F4:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A83FD9A7DC5196B8802780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c916c17b-83e9-36f6-ad16-97d6b9a95489.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        73.17.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:3f:d9:a7:dc:51:96:b8:80:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=80817787-59e1-40b7-a6a3-ad9cf45d39ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:ca:c7:7a:3a:10:e7:df:1f:87:9e:73:31:
                    dd:59:fe:db:b9:56:9c:f6:d3:42:90:89:38:74:1e:
                    78:be:f6:6b:ea:90:b8:8d:cd:88:29:7a:39:20:48:
                    6e:ee:ab:78:28:24:d7:0f:47:a2:7b:e6:96:25:5d:
                    94:d4:8b:80:29:ba:0b:38:cb:f9:b3:b1:3f:15:3c:
                    7d:0f:9e:18:ce:95:44:80:2b:2a:b4:02:8f:32:4a:
                    7f:d0:26:b6:3b:e3:61:61:a1:c9:a5:36:a5:8e:8e:
                    3a:c9:67:af:f6:8e:5b:eb:9a:d1:02:3c:92:79:ba:
                    a0:db:37:94:24:d1:98:82:62:3d:1a:d5:51:6b:73:
                    1f:5f:b2:b7:30:de:cd:e6:69:ce:9d:9b:d4:d1:2e:
                    31:bf:9d:2c:85:b2:37:bf:1f:6a:cc:72:a1:c0:c1:
                    42:b2:e5:23:58:56:bd:a7:21:27:ac:e4:82:54:f1:
                    60:d1:06:96:54:32:27:90:79:4b:90:28:ab:a3:ca:
                    58:8d:f5:66:88:2f:71:d4:bf:a8:7e:a3:e8:84:05:
                    6d:68:ab:7c:ab:b0:d5:27:fb:c2:56:43:e7:75:9f:
                    5c:5a:9a:46:20:39:01:1d:22:94:10:cf:4a:4f:ad:
                    9b:93:57:63:a1:b8:b7:84:2f:c7:0b:6b:5e:ba:cf:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:2C:7C:F0:D0:A6:F2:FC:24:5D:52:7B:DD:5E:79:D4:7B:F4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c916c17b-83e9-36f6-ad16-97d6b9a95489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:86:5a:92:a4:39:a9:e0:97:2d:9d:6b:1b:1d:f5:9c:df:
         10:eb:74:e1:65:44:21:b0:94:38:6d:86:e6:73:7d:05:f9:35:
         15:90:63:1a:30:cc:49:b1:e5:b5:ab:fc:94:a2:71:af:95:d4:
         eb:49:c4:49:5f:46:dd:09:b8:38:cb:57:5c:84:19:30:bc:0b:
         ee:02:66:91:86:23:71:95:7c:7b:3e:8c:3f:b8:cd:19:69:6b:
         8b:f3:f1:48:0b:eb:93:0c:bc:ea:6a:70:07:51:d5:66:7b:96:
         38:41:eb:8e:67:a0:a5:46:70:81:a8:f9:11:c1:c9:ca:07:59:
         33:c6:68:09:87:90:58:30:d9:be:0d:4d:f1:cc:c2:3c:21:cf:
         f0:5c:37:4f:bc:07:96:f0:66:5c:39:ba:6c:81:b8:71:79:c8:
         7a:1d:35:bc:ff:57:3d:a4:2c:0d:3a:6c:c6:90:3f:d3:92:75:
         da:08:27:40:32:5f:f9:48:39:51:0f:79:c7:42:f3:72:3e:56:
         a0:a7:4f:9d:a5:9a:98:fe:a8:e2:9d:b7:a8:f8:07:a0:73:b5:
         de:bf:c9:fe:db:8d:f7:d6:3d:6b:ed:15:8e:af:26:9f:53:8f:
         a0:33:d5:b2:9e:9a:d2:1a:2e:7b:ff:ec:f6:b5:7f:39:57:af:
         d4:4a:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:00 2025 by rpki-client