Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5019812-9d4f-3052-b9e6-0bb06e874ca8.roa
File:                     f5019812-9d4f-3052-b9e6-0bb06e874ca8.roa (raw, json)
Hash identifier:          gfGbNKTU9wzzqUZWkzX9R1Eeis7rOlBBnAZbiRJfrEg=
Subject key identifier:   54:B1:01:60:16:14:1F:EA:C3:B7:A1:80:75:C6:85:1F:D6:42:7C:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAAC0F78FE58353BA919C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5019812-9d4f-3052-b9e6-0bb06e874ca8.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        73.166.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:ac:0f:78:fe:58:35:3b:a9:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=f9c87fc4-d9c6-4d05-9620-ad5eca46ea37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:91:e2:85:f2:5a:a6:5c:8d:6c:96:21:46:
                    59:d6:96:ff:2f:0a:c4:c6:7a:90:12:91:13:01:b8:
                    50:8f:e9:b4:75:77:e3:ed:1f:78:01:a3:b3:90:12:
                    bb:75:c5:45:46:f1:36:23:9f:cb:45:e0:ad:cf:ea:
                    f4:ab:96:54:08:11:a8:74:ef:5b:14:cd:b3:0f:76:
                    ff:8a:d3:14:52:f8:ba:75:cb:b4:74:df:c5:b4:95:
                    11:f3:3d:84:0c:e4:da:c0:e7:8c:65:4c:15:aa:02:
                    01:cd:61:fd:54:e7:80:a9:1f:2f:36:a6:96:c0:5e:
                    f4:4b:5c:4e:42:22:23:bc:56:dd:b9:69:92:09:98:
                    e8:02:7f:a0:b3:bc:4f:db:02:1a:c4:b2:27:07:a0:
                    e6:57:7e:de:3a:6c:98:be:b0:31:d8:d3:43:9b:a0:
                    e5:15:f3:bb:05:cb:12:25:fb:b3:6f:05:6d:9a:2f:
                    74:cc:ad:b4:f1:df:26:7d:d3:64:43:45:3d:99:43:
                    13:a3:83:07:a3:ee:30:38:71:61:89:1a:b6:bc:b1:
                    f7:13:03:1c:13:92:4a:3b:1a:49:82:0d:32:3d:2e:
                    ac:26:8f:b1:e6:16:62:14:08:0d:bb:3f:77:98:fc:
                    7a:47:b7:c5:2e:c1:97:5e:80:df:09:58:af:fe:da:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B1:01:60:16:14:1F:EA:C3:B7:A1:80:75:C6:85:1F:D6:42:7C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5019812-9d4f-3052-b9e6-0bb06e874ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.166.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:15:3d:57:bb:30:33:ca:64:e1:62:79:75:10:74:ed:36:
         fd:08:4a:2c:88:e1:ca:8f:44:32:02:6e:90:3a:ac:77:4b:12:
         01:27:4c:49:8f:4d:9f:d2:cf:a4:89:a9:1d:88:95:2e:2c:ff:
         54:67:dc:8c:5b:20:98:d5:1a:e4:c4:3b:58:70:3a:89:de:88:
         b4:61:68:2e:80:b5:f9:f9:49:ec:ba:7a:0e:2a:20:6a:16:d8:
         b0:db:a5:26:f2:00:74:51:cb:97:5c:62:3f:31:2a:6f:e2:9c:
         c9:40:b9:be:2b:1d:09:7f:7f:f3:f6:9f:0f:0c:31:a5:cf:9a:
         20:86:98:ab:c0:bc:a8:8c:88:6a:c9:d1:55:75:71:3f:ac:2f:
         9b:55:e5:80:d8:2a:7e:f1:45:9f:fc:df:12:02:db:e8:ef:b8:
         af:17:80:9e:15:92:5a:cb:a3:22:aa:b4:97:f4:97:52:56:47:
         27:07:94:94:39:6a:16:1c:5e:e4:91:41:db:78:97:fa:41:d6:
         4e:bb:04:c0:5f:49:a7:19:24:65:77:e7:67:58:fb:f4:8b:f8:
         90:64:24:62:41:49:67:0d:da:57:71:70:c7:b7:89:42:1f:1a:
         a4:90:3f:4a:eb:d8:34:53:05:c5:47:25:d3:db:48:88:69:b8:
         f3:7d:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:00 2025 by rpki-client