Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7072e0a5-8d76-387f-98fc-77a408f33660.roa
File:                     7072e0a5-8d76-387f-98fc-77a408f33660.roa (raw, json)
Hash identifier:          64aZpaqsUTqZgEnMGd7iqLHKwlkZPMLZO/6kfPp2ADY=
Subject key identifier:   A2:4B:A2:FF:33:97:45:E2:21:82:40:DC:48:7F:EA:A2:67:44:C6:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10BA099400241BF493F5F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7072e0a5-8d76-387f-98fc-77a408f33660.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        73.7.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:a0:99:40:02:41:bf:49:3f:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=b69baec6-97e3-48c5-b343-c1ed55759731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:4e:43:75:fc:1d:34:26:aa:e9:f5:59:7b:
                    fb:8b:d3:42:22:f9:a6:1c:b7:67:c9:e4:2c:37:8c:
                    28:f2:43:11:ee:24:5e:5e:3b:b3:a4:81:4f:1c:5c:
                    a3:09:3b:5b:5b:65:38:a4:ac:cf:62:9c:ba:a7:3f:
                    b6:39:c2:4c:ec:f3:99:c6:a6:82:8c:26:8c:0f:8d:
                    41:01:09:7d:2b:ee:fa:e7:8c:25:a0:da:f6:b7:2b:
                    2c:d2:f9:5d:3c:1c:30:27:74:b1:ed:8d:4f:0f:7c:
                    58:78:cc:a0:c0:b7:b5:1f:ab:4e:3a:31:53:ac:59:
                    7a:56:92:31:1a:cc:10:7c:1a:b1:91:4c:76:eb:b7:
                    ed:ae:70:a5:02:16:ae:fe:15:3f:63:48:dc:2a:c6:
                    f8:38:cf:d4:db:5d:f6:34:b6:3f:f2:ea:a6:46:4a:
                    3a:e3:4f:7b:0c:77:0a:e4:e7:1d:68:21:cf:b0:c4:
                    e7:b0:57:b4:dd:36:c8:0f:8b:db:8c:5c:1e:b2:80:
                    3a:04:64:ff:ea:80:38:ca:f5:b6:bf:86:43:ff:96:
                    e3:ca:ef:fa:73:5e:c6:0a:21:b9:9e:aa:f0:25:04:
                    46:a8:ad:05:8f:e6:6a:fc:71:e2:ef:75:ce:90:3b:
                    0b:27:87:fc:29:85:a4:74:c8:6a:78:64:1f:30:59:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:A2:FF:33:97:45:E2:21:82:40:DC:48:7F:EA:A2:67:44:C6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7072e0a5-8d76-387f-98fc-77a408f33660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:fe:2c:92:67:6b:dc:d5:a6:1b:df:5b:af:e8:36:11:d2:
         f2:e2:08:eb:79:6a:18:a9:c2:1b:26:b8:e9:4f:d1:f9:db:33:
         00:5f:44:3f:d7:cc:4c:81:f7:33:0c:d3:b2:16:ad:cb:2b:d5:
         88:81:1a:30:81:84:6b:9c:fe:ec:11:8e:50:c2:6e:92:fa:d5:
         4a:31:41:ad:21:97:1b:b3:e4:64:32:5f:bb:24:69:04:ec:69:
         2e:55:79:0c:f5:b7:32:d4:ba:05:b4:76:2b:0e:b0:9a:e1:b8:
         57:63:b7:0c:17:04:a4:5b:61:e2:d8:1c:9b:4a:da:fe:dd:84:
         41:2c:09:bb:93:80:7b:ff:2f:1b:2d:df:ad:d1:8a:8e:ea:e5:
         8d:d7:9a:0a:7b:2c:1c:7c:dd:50:8b:eb:02:a4:e7:3a:4d:fe:
         b8:6a:da:e4:6d:59:b9:f7:c2:77:6e:69:9c:02:f8:54:e3:e7:
         5b:f9:f6:38:79:37:c8:c8:b2:91:02:9e:a8:89:1e:3b:56:8d:
         ff:4c:9b:14:56:f7:4e:af:ea:f3:26:2f:c9:65:35:93:2e:4e:
         8e:fc:e5:69:87:20:b2:cc:e8:c5:db:be:5c:c2:89:3b:05:57:
         b4:bb:5f:59:fd:f4:8a:44:52:8c:b5:61:50:a2:d8:db:13:0b:
         2f:0d:6e:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC6CZQAJBv0k/X0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
YjY5YmFlYzYtOTdlMy00OGM1LWIzNDMtYzFlZDU1NzU5NzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/NOQ3X8HTQmqun1WXv7i9NCIvmmHLdnyeQs
N4wo8kMR7iReXjuzpIFPHFyjCTtbW2U4pKzPYpy6pz+2OcJM7POZxqaCjCaMD41B
AQl9K+7654wloNr2tyss0vldPBwwJ3Sx7Y1PD3xYeMygwLe1H6tOOjFTrFl6VpIx
GswQfBqxkUx267ftrnClAhau/hU/Y0jcKsb4OM/U2132NLY/8uqmRko64097DHcK
5OcdaCHPsMTnsFe03TbID4vbjFwesoA6BGT/6oA4yvW2v4ZD/5bjyu/6c17GCiG5
nqrwJQRGqK0Fj+Zq/HHi73XOkDsLJ4f8KYWkdMhqeGQfMFm8bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJLov8zl0XiIYJA3Eh/6qJnRMbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzA3MmUwYTUtOGQ3Ni0z
ODdmLTk4ZmMtNzdhNDA4ZjMzNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMHJ/iySZ2vc1aYb31uv6DYR0vLiCOt5ahipwhsmuOlP0fnbMwBfRD/X
zEyB9zMM07IWrcsr1YiBGjCBhGuc/uwRjlDCbpL61UoxQa0hlxuz5GQyX7skaQTs
aS5VeQz1tzLUugW0disOsJrhuFdjtwwXBKRbYeLYHJtK2v7dhEEsCbuTgHv/Lxst
363Rio7q5Y3Xmgp7LBx83VCL6wKk5zpN/rhq2uRtWbn3wnduaZwC+FTj51v59jh5
N8jIspECnqiJHjtWjf9MmxRW906v6vMmL8llNZMuTo785WmHILLM6MXbvlzCiTsF
V7S7X1n99IpEUoy1YVCi2NsTCy8Nbug=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:57:37 2025 by rpki-client