Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0908bae1-c252-316d-8a2a-5d19f6bcca63.roa
File:                     0908bae1-c252-316d-8a2a-5d19f6bcca63.roa (raw, json)
Hash identifier:          ou9eExw5WNQnJXpH1YO1mI2/Czbtt/NfLDA+w9SMHik=
Subject key identifier:   B1:FF:47:5B:B6:2F:6C:B4:0F:F3:D5:01:9E:26:A6:72:41:28:E8:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86338DA9DFAD67514D9DB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0908bae1-c252-316d-8a2a-5d19f6bcca63.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        73.240.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:38:da:9d:fa:d6:75:14:d9:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=39ca2d3f-dd90-4df6-9a99-297b5022f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:ad:55:35:cb:05:a3:9b:43:52:85:92:b7:
                    cb:2e:e1:45:52:e4:55:eb:72:c2:34:87:ac:60:57:
                    4d:96:32:b6:2a:00:97:72:42:83:2d:5f:d8:ec:dd:
                    8d:eb:2a:68:73:6e:59:9d:78:f3:56:d9:f4:d1:f2:
                    12:fc:6c:64:c2:7e:83:45:a0:fc:b1:16:78:38:1b:
                    24:e5:b6:a1:2d:0d:98:9a:27:e9:e2:37:a5:77:82:
                    2a:84:5a:0d:56:e9:39:bd:65:fb:d0:41:e4:b1:38:
                    6c:75:2b:2b:bb:d3:23:80:b4:59:ae:eb:71:8f:3f:
                    48:b8:e8:b4:ab:84:f3:b2:07:3e:2d:7e:f9:c3:bb:
                    a4:da:bd:73:be:06:ba:44:f4:fb:b3:8a:75:84:45:
                    1c:11:b7:af:b9:92:ff:06:1e:0e:7a:64:eb:46:3e:
                    68:03:b2:39:05:2b:69:21:a5:2a:05:64:b7:93:b4:
                    0d:b9:51:f2:36:93:56:d3:7c:31:f7:e1:88:1e:a3:
                    29:9c:10:a9:26:7d:81:9d:cb:93:22:06:c6:4c:5f:
                    8e:d9:dc:eb:d4:e4:f6:47:6e:28:bd:ac:ac:01:01:
                    6a:07:cf:51:22:28:fd:88:77:8d:fa:4a:6e:f8:17:
                    7c:37:08:08:69:7a:93:24:08:8b:66:30:2a:13:25:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:47:5B:B6:2F:6C:B4:0F:F3:D5:01:9E:26:A6:72:41:28:E8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0908bae1-c252-316d-8a2a-5d19f6bcca63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:c7:d6:d4:3c:a2:93:e8:e7:23:2a:2c:10:2b:02:b5:e8:
         ed:6c:cb:2b:33:d4:a8:b7:ee:ce:6b:6c:d4:0f:36:1d:be:77:
         f6:9d:2f:5e:18:b9:51:bf:19:a7:ef:a3:27:b9:04:b7:9d:28:
         53:c2:d8:bf:7d:89:a0:f1:ae:3e:92:d7:9b:a1:a7:5d:b7:d6:
         37:f6:2b:9d:08:2e:15:15:87:04:7f:c2:15:21:b5:20:e9:c0:
         00:82:e3:25:19:d4:64:79:b6:b2:1e:3a:8b:6b:ec:1f:09:3a:
         f8:e3:6d:4e:23:bb:fc:7e:fe:11:0e:cf:bc:cf:88:3d:dd:4c:
         3b:56:be:43:12:7a:f5:5e:a2:f3:44:48:e5:8c:3e:8c:6f:5a:
         43:84:09:08:80:24:12:af:6b:1d:dc:56:14:28:0f:55:ad:a1:
         ac:6b:26:ca:8e:49:7e:b4:8b:30:8e:2d:39:08:75:e2:9e:2b:
         a5:3c:20:3a:9b:7b:5f:5a:42:35:15:f3:96:90:1c:94:99:58:
         a8:18:25:d3:3e:2a:ad:67:97:fe:c6:7b:a0:72:54:6f:e6:00:
         7f:30:e6:a9:9c:a5:51:35:6e:6a:47:8f:76:c5:bc:31:3a:b9:
         90:3d:55:9a:2c:80:ba:54:ed:1e:cb:50:a0:7b:6d:98:9a:78:
         5f:41:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:15:51 2026 by rpki-client