Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5145759c-e868-3188-a0ad-8d04e106405f.roa
File:                     5145759c-e868-3188-a0ad-8d04e106405f.roa (raw, json)
Hash identifier:          PtEZtkd3RUcj1SnwXNbUsV2WHRp7JcunxwP+OJVF4dk=
Subject key identifier:   23:78:30:7E:D1:B6:EB:00:2D:96:96:51:AC:45:A1:94:61:11:83:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B853E67F995030EF16100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5145759c-e868-3188-a0ad-8d04e106405f.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        71.204.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:85:3e:67:f9:95:03:0e:f1:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=fb57fb86-9d75-471d-8179-02802a647712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:1f:bc:a0:32:ab:a0:30:59:61:51:33:1f:
                    5a:65:16:ee:c3:4f:b8:2d:8c:27:91:62:2f:e4:c2:
                    1a:b2:02:2d:38:fd:61:1b:3a:dc:a6:77:d2:2c:2f:
                    f4:3f:f3:df:f6:ba:7c:08:f5:43:bc:96:60:81:0f:
                    3a:31:f5:ef:62:f9:bd:4f:32:16:18:e9:f4:e7:37:
                    d6:79:d5:cb:1a:5d:d2:1b:c5:6c:1b:55:e4:dc:a5:
                    c0:9a:02:bd:e7:1d:05:ba:f9:07:f8:ce:a4:d4:08:
                    f1:7a:0e:21:bb:08:45:b1:65:88:a8:ff:88:96:bf:
                    23:48:5f:74:e5:fe:6e:4f:27:3e:75:3f:0f:c6:a8:
                    b9:ba:40:16:f6:33:5c:0a:e1:91:50:0d:ca:5e:4a:
                    62:a5:72:9c:ef:cb:b7:c6:41:ce:b9:c9:22:8b:01:
                    2b:cd:0d:1f:3f:30:f1:fa:4b:0e:aa:87:20:49:61:
                    01:54:7e:f6:d9:1c:ce:1f:c6:e2:4d:e7:c7:0b:2b:
                    c4:c2:b0:67:e7:36:bc:3c:e5:2f:e2:c4:0d:d6:1b:
                    b2:75:ac:c9:e4:49:7c:96:53:ed:5b:60:91:b4:00:
                    d1:88:6f:2a:38:0e:68:11:da:e2:25:01:57:de:d5:
                    5b:9c:be:bc:1e:95:a6:0d:b1:4f:a7:2d:d0:69:5f:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:78:30:7E:D1:B6:EB:00:2D:96:96:51:AC:45:A1:94:61:11:83:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5145759c-e868-3188-a0ad-8d04e106405f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.204.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:e7:d1:99:65:f6:09:16:39:09:c3:64:e7:47:82:0c:bc:
         83:a4:ef:fe:a5:99:00:cb:53:e5:e8:09:be:48:43:16:95:4d:
         16:0b:1e:aa:d4:40:96:90:b8:3e:c3:53:6a:16:f3:e6:40:d6:
         e8:b1:dd:35:49:77:62:2b:2d:2b:b0:5e:04:d8:ff:c6:bc:2f:
         ea:83:4b:96:f8:d1:db:5b:93:d8:9f:1e:7d:17:fd:f5:24:69:
         ef:f0:28:40:1e:0b:dd:39:7d:37:ab:2d:3a:51:89:2f:8d:82:
         3c:29:0d:d3:bd:8e:f3:49:c6:cf:72:b7:88:5d:ec:b8:36:a4:
         b7:92:e9:16:ea:d4:1d:ff:fb:5a:1d:fe:44:2c:96:b3:22:ff:
         fc:98:ab:b2:27:75:eb:52:d3:4d:4c:f7:cf:0e:3e:03:29:9e:
         32:10:c8:bb:e1:53:87:f5:a3:93:0b:e6:a5:ab:c2:88:37:64:
         44:0c:7c:80:fa:83:d6:fc:f9:fc:ac:39:4c:bc:29:8a:2a:0c:
         98:59:e6:c6:43:bc:07:3a:55:c0:1e:21:db:01:04:a3:4a:c1:
         4e:ce:f3:49:44:d9:85:d3:e6:4f:f3:d3:3e:b9:8e:4e:c5:d8:
         89:0b:e8:c1:63:18:30:4a:93:10:d9:4c:95:11:ed:e6:9a:60:
         1c:f6:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:08:02 2025 by rpki-client