Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a0b4298-0f32-3744-8bf2-6ea6d55c38a3.roa
File:                     6a0b4298-0f32-3744-8bf2-6ea6d55c38a3.roa (raw, json)
Hash identifier:          6UeLAJceQgcsverLbP6g74vCZ3ykE4GUFJkhdC9KSj8=
Subject key identifier:   20:DE:C5:B4:7A:DA:9A:19:C6:23:FA:9C:0B:B0:4C:2E:64:D1:CF:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10BA9E966078DFB9673E730
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a0b4298-0f32-3744-8bf2-6ea6d55c38a3.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        76.145.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:a9:e9:66:07:8d:fb:96:73:e7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=24fa5957-489c-4ed5-9bd6-0be34bcbf80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:ad:2c:08:14:a3:ea:c4:ec:5a:f0:d9:1b:
                    45:de:c6:20:75:32:63:d4:86:43:68:d9:f0:c0:3b:
                    7c:28:b5:9b:d2:b7:a2:4e:4b:88:43:53:7f:83:a5:
                    e3:b9:c9:c1:2b:b6:0a:d3:5e:66:8f:27:a8:ac:2a:
                    99:78:c5:86:ed:a3:86:e6:bf:5f:e1:94:5f:9a:55:
                    df:d3:f2:63:71:35:cf:30:f6:3e:9c:9c:f8:3a:91:
                    fd:a5:50:02:54:32:84:ba:7e:2c:a2:b3:88:53:75:
                    0c:7a:ae:e5:e3:76:d4:b0:ba:ad:4c:4d:6b:68:9a:
                    9e:ad:c5:ef:8c:78:ae:2f:f5:26:c4:96:db:7f:1d:
                    d5:ac:2e:ea:1d:e5:d2:83:1c:bf:01:c9:64:7d:3f:
                    6a:86:ad:b1:34:ad:8c:94:df:42:42:83:1f:ea:25:
                    6f:8f:74:43:51:8f:56:ce:22:33:b1:ec:99:a1:23:
                    b3:bf:6f:92:14:2a:2c:b9:ac:91:de:c3:19:10:c6:
                    47:71:b0:03:19:96:ea:83:6a:f5:2f:80:bb:da:d5:
                    9e:f5:18:4c:dd:56:1c:50:4e:76:58:8a:0f:aa:dd:
                    30:8f:95:f5:83:ff:f3:75:c5:9a:3e:71:27:5f:9b:
                    da:34:ad:3e:5b:74:71:6c:47:17:a4:71:bf:98:a8:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:C5:B4:7A:DA:9A:19:C6:23:FA:9C:0B:B0:4C:2E:64:D1:CF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a0b4298-0f32-3744-8bf2-6ea6d55c38a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:8b:d0:00:f5:d4:dc:54:e2:b8:c3:75:4e:3b:3f:de:cb:
         e9:46:40:ab:88:64:17:e0:4f:5c:28:97:39:e7:f7:8e:7e:d8:
         49:08:e3:b4:50:2f:d0:08:b2:3e:3a:80:96:55:37:e5:2c:13:
         07:31:e2:b3:c7:cf:af:45:f2:40:35:3a:51:26:b3:b2:ba:fa:
         0b:2d:e2:39:5d:6a:24:e6:33:3c:90:3e:bf:0d:8c:cd:ce:13:
         30:a0:de:b9:14:83:fe:1e:b6:4a:5b:4e:7b:7f:f0:39:b5:46:
         93:7b:56:ce:86:9f:15:92:e6:93:d3:61:3b:69:36:61:70:0d:
         28:e6:1f:a3:19:a3:d1:73:7a:6b:4b:7e:94:b8:75:21:bd:9d:
         0d:8b:ea:8c:04:ba:3e:2e:e2:35:c4:84:3e:70:47:dd:13:fd:
         c7:e3:bb:ce:d0:d2:67:31:14:8a:72:eb:d2:36:25:93:27:2d:
         8b:9d:24:1c:71:42:73:da:fd:e3:83:c2:b3:97:d2:86:9b:73:
         d3:e5:86:86:62:c5:e7:b5:b0:2c:a3:3f:b4:c3:7d:b4:35:f5:
         4b:14:6b:80:ce:91:7f:af:a2:65:04:f4:80:a0:ac:97:f7:8d:
         d6:78:a7:14:ac:8e:39:34:51:99:00:1f:4c:17:d1:91:59:f3:
         8a:b1:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:45:03 2025 by rpki-client