Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03074ec6-1f67-30b7-8b90-87cbad29f069.roa
File:                     03074ec6-1f67-30b7-8b90-87cbad29f069.roa (raw, json)
Hash identifier:          +5AdN9LV8sIoUsKC/q11HfNXw10Cd88dDhAWddSRBWc=
Subject key identifier:   0A:E1:7C:10:25:05:3F:09:12:CF:96:36:CC:1D:70:6D:43:02:64:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3CB3C803A37433887F7340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03074ec6-1f67-30b7-8b90-87cbad29f069.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.45.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:b3:c8:03:a3:74:33:88:7f:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=09ea2f9a-57db-415c-9a40-def25f46807d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:03:c4:52:98:82:59:f8:1c:04:e2:15:61:
                    d3:e5:1d:36:85:66:8c:61:3c:fd:42:32:67:6f:cb:
                    fa:88:59:11:59:56:f1:1e:bc:a1:da:f3:db:c4:27:
                    3c:3d:17:5d:ac:a0:f6:f3:b7:76:04:65:ee:2a:0d:
                    00:3c:c1:99:52:af:ac:87:03:72:4a:c5:2b:86:0c:
                    eb:8c:9b:c0:8d:1c:0f:72:59:e3:77:14:a7:16:d4:
                    8f:0b:6d:70:b4:2e:c2:b9:90:48:08:c4:20:7f:c1:
                    03:9c:f9:41:de:ee:85:8a:da:a5:36:e1:7f:a7:a3:
                    f5:e2:3f:ac:8d:90:22:86:dd:bd:09:b2:7c:02:9d:
                    72:41:b7:ba:f5:d0:84:a6:78:6b:4c:69:19:e3:f2:
                    61:63:41:10:27:4f:2a:ff:87:cd:33:fc:94:ac:ff:
                    13:27:29:5e:b6:be:0f:83:b0:93:74:e8:73:b4:da:
                    1e:98:6e:ef:17:f5:5a:2b:5a:ab:51:72:7b:fd:01:
                    78:e4:51:00:1e:4c:7f:f5:de:90:a1:ad:e5:ed:b3:
                    2c:41:72:71:c6:16:44:f0:f3:c2:92:fa:d4:ff:e9:
                    14:a3:a6:ea:5b:3c:e0:63:97:3c:0a:a6:78:12:48:
                    53:90:25:f6:4a:c7:ae:ef:b1:ce:0b:a9:01:db:38:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:7C:10:25:05:3F:09:12:CF:96:36:CC:1D:70:6D:43:02:64:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03074ec6-1f67-30b7-8b90-87cbad29f069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.45.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:04:5e:04:0e:19:b8:8f:f9:44:29:78:26:56:6c:2a:ea:ca:
         10:9a:71:d4:74:00:fd:06:0e:ab:b4:a8:74:33:4f:33:fd:b0:
         ec:8b:72:38:3d:47:b0:db:03:d3:43:4d:de:51:12:86:7e:c6:
         bc:9f:6f:d7:ca:17:76:3b:32:48:4e:0a:3e:e2:9f:e6:e8:0b:
         44:5a:1f:eb:c2:44:c6:62:a1:a3:8c:c0:f6:ad:ad:e0:b2:c0:
         72:58:69:92:8a:c9:79:b8:bb:4c:43:5b:42:b5:b3:84:aa:55:
         27:e5:f9:03:a2:c4:0b:88:3d:4b:47:d6:06:fc:ec:85:7a:2f:
         68:10:f8:17:b4:85:f1:39:58:b7:0d:ac:bd:2f:00:c9:f1:52:
         31:7c:5a:6a:b7:d1:af:59:4f:7e:05:b4:e2:1c:cb:2f:79:e0:
         1b:c6:e5:14:f4:a4:36:5c:d4:20:56:c3:2a:4e:47:a5:1f:68:
         b0:b3:b5:0d:d7:2f:06:d3:d1:4a:5d:79:b6:d5:24:1d:17:7d:
         b5:ab:1d:9e:20:ac:57:a5:3a:f1:e9:5b:b1:2f:cf:ee:4f:a4:
         6e:25:32:52:79:9b:79:22:5e:f2:5b:04:6f:c6:d7:26:af:e7:
         4f:b9:84:dc:d9:2d:e1:45:3d:02:ca:84:a7:90:dc:d2:89:fa:
         e0:71:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:40:01 2026 by rpki-client