Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbed7df4-a204-37b0-84ae-3510f228edf6.roa
File:                     fbed7df4-a204-37b0-84ae-3510f228edf6.roa (raw, json)
Hash identifier:          +9Ylkxva4hf/tFAJIi62mWJ9ec2cSdbjGCoEElYGHeM=
Subject key identifier:   52:54:CE:71:B0:22:75:94:C1:4C:C9:13:46:0E:13:E9:F1:5F:56:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8BB96D6B94BE4B356B500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbed7df4-a204-37b0-84ae-3510f228edf6.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        73.58.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:bb:96:d6:b9:4b:e4:b3:56:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=74b09eff-0774-4556-bb51-6eb5e4550375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:c4:3a:26:ce:8e:10:9a:1e:85:d2:37:b3:
                    f9:ff:5f:f8:6f:a5:11:94:e2:4d:7b:03:87:94:f6:
                    d4:1f:6c:3f:d5:ce:6e:ab:70:3d:1a:d1:60:02:6f:
                    22:88:ac:79:0b:3e:9c:22:a9:1b:92:81:f1:3d:f4:
                    45:8f:1d:c6:30:11:7d:07:28:09:03:a1:4c:74:0d:
                    0e:10:8d:d8:95:61:35:38:e0:71:a7:79:c0:90:38:
                    d0:b2:f1:33:db:93:f1:49:39:4a:ce:67:8e:25:8f:
                    42:8b:bf:5e:c5:c2:f2:25:c1:e8:c1:40:a3:5e:60:
                    21:8a:46:69:7b:23:65:72:f0:f5:62:3e:04:ed:a4:
                    29:7b:54:16:c0:14:44:1c:69:ef:85:22:a7:a4:b8:
                    29:2e:e7:76:4c:8c:af:d8:2e:54:5d:1d:b1:a7:76:
                    3f:07:37:73:1f:34:1f:34:90:43:c3:45:e6:97:96:
                    8f:46:71:96:01:f1:c3:2f:a8:b9:a6:17:7d:79:0b:
                    d8:d9:f3:12:6b:c6:10:38:c8:63:20:5b:b4:17:5e:
                    c2:8d:84:d7:b1:a0:19:db:56:d5:4e:34:36:99:a8:
                    04:6f:5d:1e:70:14:c0:ee:02:5f:0b:52:d2:a7:a9:
                    ed:04:4d:b9:f9:4d:a3:ef:01:0e:fc:ff:2d:ef:80:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:54:CE:71:B0:22:75:94:C1:4C:C9:13:46:0E:13:E9:F1:5F:56:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbed7df4-a204-37b0-84ae-3510f228edf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:b3:48:66:b8:68:00:c5:1b:8b:c6:c0:61:27:d5:cb:34:
         df:af:70:d4:93:66:1f:a7:3a:47:db:fe:6b:80:33:62:88:6d:
         09:01:b4:6a:6e:ed:7d:c2:04:23:5c:7c:c9:2d:31:7b:b5:7a:
         47:61:29:26:82:12:0a:c8:0f:46:ef:57:f5:9a:99:83:db:1b:
         e5:6c:d2:55:75:22:de:09:2f:c5:5b:15:69:a2:51:51:7d:28:
         6b:b3:42:85:77:04:2c:e9:9d:a8:90:22:63:e6:95:0f:7c:c6:
         79:3d:b9:cc:da:29:c6:5a:83:a7:62:4c:94:4f:3c:08:0d:66:
         d3:04:69:aa:58:45:01:c4:f7:f2:ca:06:22:db:75:3c:fd:5b:
         62:69:ed:69:07:8d:d2:12:23:d9:22:23:a2:c0:a1:a4:c3:0d:
         32:06:1b:b2:63:5d:9e:5f:2e:cc:49:94:7b:cd:c2:d6:13:60:
         3b:22:38:1c:38:31:ec:b9:d3:29:c7:c2:03:23:ad:41:c3:10:
         96:b8:9f:f8:97:13:c0:1a:4a:02:6d:7e:68:b6:4e:3c:8f:96:
         06:21:f2:f0:00:1d:bf:0a:a3:02:43:86:16:dd:76:0b:61:cd:
         0c:58:96:26:3f:27:4c:ef:e0:1b:b8:23:f7:3c:ee:d4:d3:ff:
         c5:63:23:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uLuW1rlL5LNWtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NzRiMDllZmYtMDc3NC00NTU2LWJiNTEtNmViNWU0NTUwMzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTvEOibOjhCaHoXSN7P5/1/4b6URlOJNewOH
lPbUH2w/1c5uq3A9GtFgAm8iiKx5Cz6cIqkbkoHxPfRFjx3GMBF9BygJA6FMdA0O
EI3YlWE1OOBxp3nAkDjQsvEz25PxSTlKzmeOJY9Ci79excLyJcHowUCjXmAhikZp
eyNlcvD1Yj4E7aQpe1QWwBREHGnvhSKnpLgpLud2TIyv2C5UXR2xp3Y/BzdzHzQf
NJBDw0Xml5aPRnGWAfHDL6i5phd9eQvY2fMSa8YQOMhjIFu0F17CjYTXsaAZ21bV
TjQ2magEb10ecBTA7gJfC1LSp6ntBE25+U2j7wEO/P8t74CBEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJUznGwInWUwUzJE0YOE+nxX1Z2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmJlZDdkZjQtYTIwNC0z
N2IwLTg0YWUtMzUxMGYyMjhlZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgvs0hmuGgAxRuLxsBhJ9XLNN+vcNSTZh+nOkfb/muAM2KIbQkBtGpu
7X3CBCNcfMktMXu1ekdhKSaCEgrID0bvV/WamYPbG+Vs0lV1It4JL8VbFWmiUVF9
KGuzQoV3BCzpnaiQImPmlQ98xnk9uczaKcZag6diTJRPPAgNZtMEaapYRQHE9/LK
BiLbdTz9W2Jp7WkHjdISI9kiI6LAoaTDDTIGG7JjXZ5fLsxJlHvNwtYTYDsiOBw4
Mey50ynHwgMjrUHDEJa4n/iXE8AaSgJtfmi2TjyPlgYh8vAAHb8KowJDhhbddgth
zQxYliY/J0zv4Bu4I/c87tTT/8VjI6o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:59 2025 by rpki-client