Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878cef2-3013-397d-95ae-779a695bb85d.roa
File:                     0878cef2-3013-397d-95ae-779a695bb85d.roa (raw, json)
Hash identifier:          Z95vHoHAMdEMQ4R0WQj5TaqntwcQgeKCsZK0VXPJ6X4=
Subject key identifier:   C9:33:1D:21:E8:11:83:8A:D2:17:C6:D5:0B:C2:41:61:D7:E1:E3:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE863D3C514AB952B7F4BC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878cef2-3013-397d-95ae-779a695bb85d.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33652
IP address blocks:        73.217.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:3d:3c:51:4a:b9:52:b7:f4:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=8d77fa17-75ec-45c5-8177-89d3280acab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:10:16:06:01:1a:1f:f8:5b:b2:e5:94:52:
                    26:4d:02:d2:ad:f5:bb:96:20:7c:86:99:41:c7:ee:
                    b6:ac:78:f9:da:4c:13:08:63:9e:7b:0e:05:de:44:
                    7b:23:81:ee:0b:73:6a:90:5e:72:b2:85:e1:f2:25:
                    e0:e7:b7:f0:8c:3a:ab:61:dd:9f:7c:91:33:6e:de:
                    10:37:af:22:49:94:be:1e:6c:f7:bb:8e:83:9e:4a:
                    a4:b3:52:da:dd:8b:2a:13:e7:f5:8d:d4:9d:59:4c:
                    88:03:f4:36:0e:46:ac:07:76:1a:5b:74:49:a5:db:
                    2f:ed:03:4d:37:cb:92:19:a5:e7:bc:58:5c:71:31:
                    74:8b:4f:09:a9:9d:e3:e0:c0:7d:e7:5b:6c:80:cf:
                    f4:05:8d:85:7b:b4:dd:47:12:58:bb:c5:f7:df:9b:
                    92:29:b7:de:25:3d:78:ac:83:d5:24:ce:f2:e8:34:
                    88:2a:15:d0:e9:07:df:c3:71:55:83:f0:5c:23:24:
                    67:0e:85:4e:73:7c:bc:8a:63:09:58:8b:1b:53:ab:
                    2a:ac:52:08:30:67:dd:83:c9:fe:d6:5f:a3:69:1e:
                    22:21:be:77:42:0a:ee:37:9d:88:ff:16:a4:5f:30:
                    af:c1:92:9d:3d:8e:c5:7f:66:c8:d7:19:3b:44:3d:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:33:1D:21:E8:11:83:8A:D2:17:C6:D5:0B:C2:41:61:D7:E1:E3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878cef2-3013-397d-95ae-779a695bb85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.217.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:81:af:a5:d9:ce:26:c8:0d:d7:78:cc:87:e4:71:30:be:cd:
         00:a3:eb:47:ac:c6:74:b7:f0:ca:07:2a:e7:5b:ab:ae:73:ec:
         37:99:7a:74:ce:1a:73:ef:13:04:a1:87:e3:dd:e7:65:ea:96:
         84:3d:54:40:7a:6a:b3:c8:6f:a1:8d:33:82:f9:34:f3:34:51:
         91:49:c3:36:89:a9:28:d0:84:9a:65:19:84:ae:8a:3c:58:cd:
         80:70:66:63:42:d5:64:49:1d:1c:66:7c:e0:7d:8c:57:da:b8:
         06:dc:7b:5b:79:51:53:7d:3d:c8:3b:11:d9:d0:d5:8d:6a:a5:
         8d:a9:6c:ae:08:85:ec:c1:9b:f1:fd:c4:a3:b5:84:96:eb:45:
         db:88:04:61:bc:7e:ba:67:49:7b:bf:39:26:ed:64:f7:d7:5b:
         fb:a6:52:05:26:f7:3e:a3:fd:13:c5:1b:19:2d:6a:22:e1:b4:
         23:bc:c9:b5:0a:f4:d3:75:70:9a:ba:3a:aa:8f:45:50:bd:bb:
         55:c3:7f:89:b1:71:8d:93:b0:37:94:e8:43:33:c2:ce:c6:7a:
         e1:a9:71:ad:41:03:f2:1c:40:c1:c8:9c:7f:51:3a:90:04:5d:
         15:b8:fb:77:f2:6e:70:ae:13:df:b4:e7:a3:2d:ff:89:23:e2:
         6e:9d:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:29:21 2026 by rpki-client