Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e92a304-a074-314e-926c-2445ba72b798.roa
File:                     6e92a304-a074-314e-926c-2445ba72b798.roa (raw, json)
Hash identifier:          Sonk4JVvdTlRQua5W3lkpq49WaEGcNhv9OtgIm4lIiY=
Subject key identifier:   00:B5:CF:C3:56:F7:7B:4F:1E:02:20:37:BB:7F:80:44:1E:AA:98:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B571412CD7B00B6065A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e92a304-a074-314e-926c-2445ba72b798.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     33659
IP address blocks:        76.117.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:57:14:12:cd:7b:00:b6:06:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=950dec9f-6b0b-431e-b694-bf8b8e55345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:13:4c:99:86:e2:4a:29:33:c4:d7:5d:e3:
                    ed:0f:4f:b6:aa:86:79:a6:06:05:d1:fb:e7:b4:cf:
                    c7:6a:77:4c:35:ba:4b:c7:e6:8a:70:72:6d:84:ea:
                    c9:a3:99:eb:9b:ba:22:cb:d5:de:10:fd:81:8b:35:
                    ac:8a:25:25:f8:f5:4f:f4:99:22:b4:b9:36:3c:62:
                    b9:05:3d:6d:09:2f:46:72:27:32:a0:cc:0b:6c:6b:
                    95:3e:38:65:f6:21:35:65:eb:1b:cc:8c:18:a2:e5:
                    21:91:57:01:2a:a4:91:d8:8c:c4:2f:44:21:26:2f:
                    80:43:0d:96:e0:fe:1d:6e:9f:20:c8:44:98:60:d1:
                    6c:b3:48:10:57:1d:bd:6b:f7:18:98:97:18:06:48:
                    35:ee:7e:36:5d:74:52:ad:6f:d4:ff:ac:52:94:12:
                    4c:f0:e3:8e:cb:84:8a:17:ac:1a:b4:2a:62:f2:4d:
                    ac:88:21:6d:db:d8:30:d4:8b:29:11:ca:04:8a:9c:
                    3c:4a:d2:9a:51:32:f3:bb:52:01:19:34:d6:ca:60:
                    6e:90:7b:ca:7c:32:d4:00:16:d8:fb:13:37:ff:64:
                    2b:09:37:cf:32:64:c5:c5:d0:95:e1:f3:a4:b1:4c:
                    5c:42:b7:2b:9b:51:fa:6c:42:39:a0:15:7a:4f:ca:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B5:CF:C3:56:F7:7B:4F:1E:02:20:37:BB:7F:80:44:1E:AA:98:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e92a304-a074-314e-926c-2445ba72b798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.117.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:7d:e5:f4:f6:71:b3:68:d0:cc:c3:bf:7f:44:37:bb:46:
         23:86:22:53:c0:d2:22:f2:bc:41:d1:78:c3:19:5c:13:4c:36:
         d9:64:46:4a:f3:2d:14:b9:7c:d5:0a:eb:82:5f:79:aa:8e:34:
         9c:07:d1:f1:59:93:a5:4d:1c:38:19:18:3d:b5:ae:73:ed:49:
         f4:fa:ef:cf:37:92:87:cf:e9:17:7f:40:03:1e:17:b1:d3:db:
         2e:42:6d:61:60:a5:33:2f:2c:4f:fd:e3:3b:5c:8c:35:8d:34:
         81:77:af:3e:ca:c8:ba:e1:54:1e:27:e9:63:4a:6c:0c:d7:56:
         a4:4e:8b:fa:52:03:92:1b:0d:2a:04:50:87:c6:fb:fb:83:32:
         97:d9:19:35:12:52:75:a4:ff:ec:b8:f3:f4:06:21:1b:cf:df:
         ba:16:52:bb:19:3a:ae:e5:39:ba:3e:a7:14:e0:c0:91:c7:6d:
         8a:2b:15:74:52:d2:1d:05:c9:0b:d6:19:d8:a7:54:d2:b2:15:
         7f:64:4e:63:e1:3b:40:4b:30:71:32:44:5e:11:87:4f:88:30:
         0a:7f:77:2c:cd:8a:26:e6:f0:49:e3:1f:94:da:24:e6:2f:f3:
         e5:a2:a6:21:7e:72:93:76:60:94:82:d7:0a:5b:80:2f:a9:a2:
         8e:f3:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:23 2025 by rpki-client