Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74266d3-4a83-3f7c-a5a9-cb8b8c21b087.roa
File:                     a74266d3-4a83-3f7c-a5a9-cb8b8c21b087.roa (raw, json)
Hash identifier:          Bn9G1NNWdvFG6kpw5REmLXTnOQH0yPLRT/lK8CW3m4g=
Subject key identifier:   FC:D3:8C:03:18:66:EC:D8:47:9A:43:79:4D:AD:E2:BE:72:F5:2A:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B1DC499CD4EFBA9B34440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74266d3-4a83-3f7c-a5a9-cb8b8c21b087.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        73.207.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:1d:c4:99:cd:4e:fb:a9:b3:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=f679a567-7198-4fc0-9b7d-173c9b2c2b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:a6:e2:cb:db:7d:cf:4b:a8:ef:1c:29:56:
                    98:b9:90:da:e0:79:cd:dd:5e:25:e0:45:e7:e9:bf:
                    71:f4:0e:f0:e8:96:f1:bd:f3:fd:2d:1e:2c:30:3c:
                    7e:00:ed:21:10:7f:41:16:6c:ce:ad:ed:17:92:35:
                    94:b0:19:81:0a:67:a0:93:da:80:d2:11:e3:05:3d:
                    7b:27:1c:15:b6:34:19:e3:9b:1a:cb:5f:93:6f:fe:
                    b9:e0:d0:08:7d:fc:95:0d:3d:17:b0:06:06:ac:df:
                    e2:40:e7:74:74:8e:24:cd:80:87:48:79:4f:ec:d9:
                    97:21:6e:de:a3:2e:e3:1f:14:ad:84:d5:ac:5e:50:
                    7e:ff:22:09:13:57:10:71:ac:de:2c:b2:42:71:f8:
                    b4:86:5b:d6:e2:be:63:e7:ec:d9:b5:9b:72:4e:ac:
                    af:14:44:b5:4e:c1:c0:14:f1:fb:ab:4c:82:9c:c0:
                    c8:18:c7:48:17:5b:bf:82:5f:1f:02:8b:38:15:0d:
                    6e:c2:4d:2e:2e:cd:d7:c1:3e:b6:3e:b3:e1:ae:dd:
                    b8:77:f6:7a:72:5a:06:c1:bc:7f:9a:be:f9:06:5b:
                    f5:15:06:05:56:a6:da:96:6b:d4:95:07:4b:92:cd:
                    2b:4d:ec:61:1d:8e:bd:41:af:1d:a6:75:8a:b2:22:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D3:8C:03:18:66:EC:D8:47:9A:43:79:4D:AD:E2:BE:72:F5:2A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a74266d3-4a83-3f7c-a5a9-cb8b8c21b087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:43:b8:99:65:51:6a:1a:eb:7d:9c:25:f0:16:bc:d9:f6:
         41:ff:25:e5:0c:53:67:40:58:a4:17:b1:60:86:e8:cb:c2:1d:
         ba:e6:ab:82:91:45:63:2b:86:f1:c7:6c:0f:95:24:67:a0:c4:
         13:54:66:ae:9f:7b:48:65:f0:8e:1d:61:53:be:f7:3a:a0:ee:
         4b:5b:5b:b7:ef:f8:4a:6b:53:29:c0:74:dc:95:1c:2a:ff:80:
         e0:46:9e:79:66:37:b9:4c:8f:e6:db:be:d4:f7:75:f9:85:50:
         a4:52:ab:93:3d:2b:ac:9d:45:68:48:63:d5:b3:dc:7d:9d:2c:
         88:0d:79:84:e3:cf:78:ba:d9:70:7a:b0:e3:a1:13:12:51:9f:
         5d:5f:bd:b6:78:c5:ea:3e:73:ec:c8:9f:ae:27:8a:5e:76:51:
         c1:93:a6:bd:1f:e8:54:fd:6a:5b:a1:17:33:c0:52:f5:60:57:
         e3:02:c8:ac:f5:67:b0:31:d5:7e:99:b1:11:e3:1c:a4:b0:93:
         64:b0:90:2e:3b:27:a7:5c:6c:0f:b7:8e:6a:5b:2b:29:0c:b1:
         35:a3:1e:33:3d:14:79:64:64:d9:0a:83:04:bd:f9:ff:db:be:
         df:a7:3f:9c:04:07:b3:6a:66:11:2e:09:a3:a3:43:a3:97:b7:
         78:67:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:16:11 2025 by rpki-client