Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
File:                     07550265-1a17-33a0-8a00-5b0ff24950d3.roa (raw, json)
Hash identifier:          U4Bw//gZCNFSI9YcdYfBEaRcNH7/C6PRiQ8PfpLnW8U=
Subject key identifier:   D3:D5:15:CC:33:7B:F8:55:7E:60:1A:62:E9:A8:50:C3:53:63:65:4D
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584B821CD4085D6A331523EE7700
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     52468
IP address blocks:        67.73.164.0/24 maxlen: 24
                          67.73.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d4:08:5d:6a:33:15:23:ee:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e01ce9de-e641-476f-b5f0-55569f61a19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:75:b3:42:d6:97:7e:cf:01:b5:2f:81:29:
                    4e:16:a6:82:c4:6c:51:ef:ab:1d:0f:a4:70:3b:62:
                    7b:71:44:c4:87:2a:33:ab:cc:c7:9a:18:62:42:17:
                    b8:80:be:90:c0:ac:80:01:f0:fa:78:bd:32:ba:5b:
                    95:5e:83:24:f2:2e:2f:87:9d:56:3e:6f:a4:26:6e:
                    cd:d7:76:e2:ef:8c:e3:b1:ed:6b:cf:cc:99:2c:2c:
                    f5:64:37:55:8f:1d:44:4e:d3:34:45:32:a6:14:2c:
                    19:1f:4e:66:4b:ba:e7:cf:f8:be:38:67:e0:77:15:
                    7f:75:b8:f1:bd:5c:62:97:0d:e3:89:55:75:12:18:
                    4b:e6:e0:39:85:72:9e:58:5f:a0:6b:80:53:d0:a4:
                    e4:02:57:b1:5f:95:64:cf:f8:d6:1f:da:ee:b1:8f:
                    d8:1c:22:18:2f:08:d9:e3:a1:21:3e:0a:a9:01:ac:
                    0c:4b:08:14:2e:f0:1b:a9:d3:40:39:6f:d6:fe:43:
                    65:4b:9a:77:21:5d:bf:91:f0:cd:50:8b:03:4c:3d:
                    c8:92:80:23:01:cc:aa:0f:6f:b9:f9:20:66:98:82:
                    8f:56:80:a2:87:b0:dd:be:19:30:c9:5e:01:10:b5:
                    27:24:6e:31:76:19:07:33:fa:51:3e:43:79:72:f2:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:15:CC:33:7B:F8:55:7E:60:1A:62:E9:A8:50:C3:53:63:65:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.73.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:f6:86:09:f1:a7:81:d5:de:2c:d8:a3:2c:3a:1c:db:c0:
         5d:52:1a:71:cf:24:ff:60:77:19:8e:d9:82:14:23:cc:6d:a0:
         ae:f0:53:9e:8a:4e:2c:c4:44:10:92:f2:2c:30:86:f8:63:3d:
         10:ae:09:6a:d5:c7:f2:b6:02:e4:80:52:f7:3d:96:45:76:b1:
         f1:03:9a:db:48:f5:11:d1:19:4f:b5:ac:b7:ad:4b:29:e7:1f:
         e6:16:1c:5c:8c:df:e6:c5:e3:4d:ef:41:cc:e7:93:35:3a:cb:
         f0:74:c3:e2:cc:ca:1e:9b:62:5c:bc:5f:1a:d9:d1:53:3b:c3:
         f3:9a:b5:fc:9b:00:7c:e0:d3:48:35:82:0a:91:b1:5a:c5:48:
         63:42:4b:c6:f5:3c:6e:cd:87:b2:33:0c:f3:de:d0:2a:c6:a6:
         fb:6c:62:82:65:62:66:2f:64:9f:58:e6:25:4f:b4:40:b4:a1:
         d1:7e:1a:fa:6e:ff:a3:27:73:f2:19:8f:52:ec:dc:da:de:3c:
         3d:cb:d0:cd:e7:65:73:52:16:a9:35:ed:e3:ae:d6:74:37:55:
         55:98:2e:dd:58:1b:bc:a4:6a:a5:8f:a7:d8:cd:ea:68:9f:6b:
         dd:96:6d:6b:8b:2c:8b:3b:3a:16:d5:5a:3e:28:9f:38:ff:7f:
         65:e8:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:17 2025 by rpki-client