Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc335be8-4a64-3605-8590-e57be1d56197.roa
File:                     cc335be8-4a64-3605-8590-e57be1d56197.roa (raw, json)
Hash identifier:          y0psx8AHEZ8g9RAfqE09jrTqCUyoW5gGS3YXQkU+Rq4=
Subject key identifier:   91:B3:32:F9:08:EF:50:7F:3A:F2:2F:1B:B7:D1:76:BA:0E:E5:8E:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A77BB2B6AC5AE9ED9BAD20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc335be8-4a64-3605-8590-e57be1d56197.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        73.168.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:7b:b2:b6:ac:5a:e9:ed:9b:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=0d43d9b9-e6e5-44a5-8328-70b4d5f352af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:9a:ee:8d:79:e8:5d:96:c3:fe:49:f0:b3:
                    ff:e5:05:32:13:2d:9e:48:3d:5c:59:bd:8a:7d:29:
                    f9:c0:2c:a8:c0:96:55:8d:88:76:bb:c2:a2:cd:82:
                    dc:89:13:e5:e4:28:a1:d8:12:7b:a9:a5:73:f1:1c:
                    73:13:b8:fa:30:53:d0:28:9b:71:8d:b1:9f:e7:0c:
                    ce:79:0e:5b:be:a8:08:c3:eb:1d:3e:36:b3:3c:03:
                    e3:e9:e7:24:78:42:0c:65:2f:85:cd:9c:90:3b:37:
                    dc:6d:a5:32:92:db:60:e3:ef:3e:98:1b:30:d6:4d:
                    1c:ad:0b:04:e0:fd:8d:95:4c:bc:34:71:aa:15:47:
                    51:af:dc:26:56:16:10:58:dc:04:82:74:0a:72:db:
                    b5:3a:74:63:ff:fc:a9:7b:a6:8f:41:bc:8e:4b:61:
                    c2:7c:9c:75:7d:ab:36:93:3d:4b:2a:88:0d:f1:79:
                    99:3a:2d:d9:a1:25:f3:31:94:53:db:df:ad:dd:48:
                    b7:05:3b:60:2d:c7:d4:9d:5c:30:70:cc:f5:d9:06:
                    3b:0d:ae:c6:18:94:69:4c:c2:91:68:b9:a5:42:af:
                    09:d2:c9:9b:fe:a4:e4:1e:5b:66:ac:be:19:24:4b:
                    99:32:a5:7c:72:24:a1:a0:4a:50:56:f7:f4:6b:ce:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:32:F9:08:EF:50:7F:3A:F2:2F:1B:B7:D1:76:BA:0E:E5:8E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc335be8-4a64-3605-8590-e57be1d56197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:ef:bc:05:81:b7:5d:7a:3a:c1:46:72:68:0a:61:e2:61:
         ae:7b:0b:92:71:c6:c1:67:17:5b:3a:6c:29:4f:6f:c4:84:a6:
         a8:0a:20:9d:d8:9d:fe:73:cb:d8:83:c4:df:df:c1:c4:02:bd:
         90:18:19:9e:fd:8f:05:08:7b:63:c5:68:6b:93:92:33:41:f8:
         3f:23:d2:e1:c3:98:56:ef:21:05:6f:db:76:f0:a3:7d:c0:cc:
         f5:0b:f5:c0:14:9a:3f:6d:a7:f4:84:df:56:c7:5b:7b:15:7f:
         f8:12:d1:9e:62:c5:7f:b5:45:69:27:99:e6:73:78:19:79:d6:
         62:d1:f5:2e:3a:f2:d2:0a:7b:31:95:f5:79:15:80:ab:b2:f8:
         c6:d0:05:68:c3:4d:5b:38:68:d3:79:c3:60:47:57:5d:ba:14:
         9a:3e:11:0d:d7:ee:58:23:f6:2d:5a:d7:36:1b:6b:af:98:b8:
         02:d4:8c:64:17:b7:f2:4b:21:43:8a:41:58:f8:76:7b:58:32:
         7c:bc:d9:c8:69:26:8b:c3:7f:16:d7:a9:3e:ad:12:3d:88:c7:
         92:22:b4:00:d7:c0:c9:3f:0b:09:0b:aa:73:da:f7:85:08:16:
         35:7f:30:9f:f1:d3:23:d1:ad:0c:6f:0a:b5:34:e0:f4:96:d3:
         92:4f:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:20 2025 by rpki-client