Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa
File:                     e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa (raw, json)
Hash identifier:          PusS6tNUO8r6S8SGT9lt/y9xNXKOODtEt1cmm66m0x4=
Subject key identifier:   61:D5:AD:9E:59:F7:11:58:AB:F7:50:33:3C:0C:27:6A:98:7E:D9:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A994FE2B230B71AB932500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        174.168.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:94:fe:2b:23:0b:71:ab:93:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=815b41a6-4f91-44be-8567-16b324fbe6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:f8:08:4e:87:9b:7a:80:65:38:a5:d7:e8:
                    ae:69:77:56:c4:27:04:25:c1:25:0e:5c:39:e7:fd:
                    eb:03:30:bd:0c:c9:38:95:45:6f:07:d2:ab:3f:fd:
                    7e:b8:52:d4:eb:ec:d0:e6:ec:cb:f5:f4:e8:37:ba:
                    b4:f2:1a:0c:6b:dc:94:e5:df:01:f2:fe:24:bd:b4:
                    9a:96:8a:2a:de:1d:ae:36:49:3f:8d:0d:c6:af:11:
                    88:bb:9a:9c:28:60:8a:4b:ed:95:62:39:6d:e9:0b:
                    f8:aa:a7:ef:98:22:83:ad:b7:47:2a:d1:b6:73:4a:
                    cc:bc:7c:29:4c:ca:49:fc:91:f4:79:42:5f:8a:03:
                    09:a1:14:c7:4a:dc:c8:c2:90:88:6d:aa:50:b8:bb:
                    64:cc:c6:16:fe:90:88:fd:ea:7a:cb:7f:b5:17:27:
                    90:57:c3:50:08:e0:d2:c4:f9:ef:ec:38:7c:47:88:
                    43:6d:e0:7d:86:8e:d9:93:f5:24:11:29:ca:a5:26:
                    ef:39:31:c3:43:fb:4e:4a:d4:8b:92:45:9f:1d:cf:
                    ae:77:5f:23:aa:0c:31:44:b2:60:43:34:19:7e:4b:
                    96:8c:c9:bb:0a:76:8a:68:0b:e6:f0:0b:33:97:13:
                    15:c3:c9:2d:35:24:a4:80:8e:04:d1:79:db:7f:e4:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D5:AD:9E:59:F7:11:58:AB:F7:50:33:3C:0C:27:6A:98:7E:D9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:89:08:50:aa:93:67:39:b2:0a:d7:05:9f:79:fb:6e:e2:
         40:13:b8:70:ba:f0:65:80:ab:59:88:15:7e:9d:de:fb:37:83:
         66:11:49:da:a6:9b:59:5a:ca:d6:08:5d:32:f1:4d:05:7d:3e:
         97:aa:fe:39:9d:e3:d8:ad:c8:7d:3a:59:68:b4:f5:52:8c:a2:
         18:50:99:2a:3a:62:e8:25:49:51:c7:cb:d8:e6:74:e7:59:60:
         d4:a8:ec:d1:64:b2:b3:df:88:3f:13:59:32:75:b4:0f:5c:e0:
         ec:98:b3:36:23:e2:bc:c8:d5:dd:87:49:5e:5e:95:62:ab:a5:
         1a:7d:aa:36:7c:63:93:ca:b6:02:93:99:9b:77:cd:dc:1d:34:
         16:c4:05:e5:70:ec:6b:8d:09:72:0d:15:7a:46:80:12:81:67:
         73:a0:c0:f8:7e:fa:a7:de:f2:32:ec:d8:e5:b9:ae:cb:7c:a4:
         90:1d:40:06:2c:40:1a:be:bc:18:1b:8d:0f:e9:f4:41:db:6a:
         d4:54:a4:68:15:57:41:25:b6:b6:c7:6c:ea:33:aa:a2:79:cb:
         96:dd:9d:fa:b4:05:13:72:40:ea:ae:48:99:34:21:b0:4d:83:
         ff:f8:32:2a:0a:85:7e:e4:4e:aa:c6:1c:01:a3:22:b2:21:8f:
         e8:4d:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:49 2025 by rpki-client