Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea257995-b46d-3d42-8517-71c5a4074722.roa
File:                     ea257995-b46d-3d42-8517-71c5a4074722.roa (raw, json)
Hash identifier:          8+xOP40cdDDUltPjvbot9ESi8f/6od+qoz78G1T8nQg=
Subject key identifier:   BD:F2:F9:6A:2E:2F:C4:C7:26:61:02:BD:2B:2C:FE:AE:E8:6E:42:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD7F99A8046EBF09114020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea257995-b46d-3d42-8517-71c5a4074722.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        76.107.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:7f:99:a8:04:6e:bf:09:11:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=06e65564-c327-45ea-91e5-1987f5d2f535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:66:3b:8b:c2:bd:ce:cf:4b:2c:cb:53:21:
                    c1:b1:ff:9f:0c:07:62:8b:df:d9:ea:84:6a:b3:7d:
                    b2:70:42:f4:9f:60:a3:1d:7f:e2:04:62:0a:62:8d:
                    93:79:02:da:21:06:d2:20:5c:a9:5f:24:0a:d8:b1:
                    b0:fd:40:70:41:37:d2:03:07:92:1e:ac:e7:51:b0:
                    5d:11:3d:66:46:c1:b9:b7:e3:81:ee:68:a8:a9:a8:
                    72:b5:70:78:49:f4:39:cb:61:76:af:f4:ec:e8:a0:
                    58:a4:e5:d1:26:e2:23:6f:71:77:58:76:6a:6f:81:
                    0f:16:66:f8:aa:9b:93:54:a4:b1:33:c2:d0:a5:96:
                    bf:4a:d1:84:11:63:81:f3:f3:97:1d:e1:51:18:65:
                    f9:e2:44:f2:da:8e:e4:84:5b:d5:cc:10:e4:94:72:
                    bd:c6:3b:be:0f:4a:a8:0f:89:41:fd:33:ea:cc:96:
                    bb:43:0a:24:e2:3d:76:10:4d:4a:1c:7f:fb:e2:a3:
                    98:c4:f5:51:7c:31:aa:76:de:1e:14:c4:ac:0f:10:
                    3f:d9:8e:49:82:65:06:65:51:96:4d:33:16:e8:b6:
                    ef:71:da:b3:19:71:fa:8f:ef:1a:79:68:81:5b:9f:
                    7b:26:6a:e8:98:d7:24:7e:11:98:b7:a4:3f:9d:e4:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:F9:6A:2E:2F:C4:C7:26:61:02:BD:2B:2C:FE:AE:E8:6E:42:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea257995-b46d-3d42-8517-71c5a4074722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:aa:e6:10:b7:3b:5f:7d:e5:04:e7:18:41:ce:73:b5:2b:
         19:c7:36:6e:14:05:99:95:c6:d8:31:0e:31:3d:46:f3:be:cd:
         13:18:21:85:f8:8e:25:d3:87:e3:7b:53:a3:60:15:e5:fc:b0:
         66:62:21:ce:70:62:8e:ed:e4:15:00:84:5c:ed:21:23:f3:6f:
         02:37:4d:39:ad:d4:7b:1d:24:75:fd:90:87:72:7e:81:42:e7:
         4e:d1:cc:9a:0f:4f:b4:8c:1c:d5:5d:41:06:6d:a2:f6:34:c0:
         b9:91:e8:5e:24:b5:53:d6:78:68:33:17:0c:2e:04:ad:4e:5a:
         26:17:85:fe:c7:b8:61:78:59:c9:fb:54:bc:69:1d:ee:81:a5:
         9e:de:fa:d2:d3:95:3d:45:be:bd:b2:e7:f1:8b:4d:44:71:13:
         3c:d1:7a:d0:52:85:78:20:f1:2c:45:e0:9f:7c:6f:82:34:ef:
         17:99:6f:83:64:43:73:04:ec:36:e9:2f:f1:5f:24:11:a4:d7:
         d0:2a:59:1e:5a:24:53:7e:c2:f1:e2:43:39:ed:d8:bb:36:87:
         01:3b:98:d0:ce:e1:d8:74:a7:1e:61:bd:3f:21:0c:1f:b8:b4:
         a7:9f:61:23:d8:d4:f2:ce:4c:d4:ae:d4:c4:0d:02:75:c7:5b:
         f5:cf:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:05:01 2025 by rpki-client