Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b6c73b0-05e0-3190-93d0-89f81766861f.roa
File:                     0b6c73b0-05e0-3190-93d0-89f81766861f.roa (raw, json)
Hash identifier:          MtyAvWaAAURd1Wolifrq13ZJMIbnkfAog7+kKqNzg+o=
Subject key identifier:   86:7C:9C:35:5A:FB:67:59:F5:0D:C5:1E:30:75:BD:45:DF:37:7B:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF3CE58AC1A8406B3F79E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b6c73b0-05e0-3190-93d0-89f81766861f.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        75.65.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:3c:e5:8a:c1:a8:40:6b:3f:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=add4306d-069d-4cbb-ad0b-a2ad93af464c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:68:29:41:ba:ee:ba:d9:fb:39:f7:a5:49:
                    54:8b:aa:ee:d8:fd:e2:36:11:01:43:97:94:ce:6f:
                    33:de:ff:82:cf:7c:cf:74:89:47:ed:59:5f:55:f9:
                    74:44:37:d5:b9:9a:39:49:1d:9f:28:40:58:63:21:
                    e3:3a:f7:45:6a:47:d0:81:1a:4a:ca:c6:b1:33:9a:
                    e2:eb:2b:89:f5:69:bc:60:76:73:79:2d:e9:35:14:
                    90:24:b7:7c:14:b0:e7:35:05:bc:eb:9e:bd:c0:5f:
                    c8:5d:fa:90:fb:4b:fe:92:a5:d5:71:0c:5c:31:61:
                    3f:6b:63:ca:86:38:76:9b:4b:db:d5:8b:75:f5:41:
                    58:cb:bd:55:ed:cf:c7:a2:8f:63:50:d9:f0:38:f9:
                    37:f9:9d:cf:03:0c:4a:91:53:40:f6:1f:9f:c8:f0:
                    ce:7f:b9:c2:c9:0d:03:be:0b:67:67:db:3a:18:e9:
                    95:41:88:e4:9f:5e:43:d0:e4:1c:3c:b8:1f:4e:1a:
                    5a:17:1a:c0:cd:95:0c:ea:c2:8d:c1:6a:eb:ac:cf:
                    e7:b9:f8:e7:f8:02:ef:3c:fe:f6:c1:66:cb:16:7d:
                    73:a0:41:af:c6:e9:d5:7b:67:45:84:a6:3f:dd:5c:
                    3b:14:20:d8:7a:95:e8:2f:07:4c:dd:4d:c4:36:51:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7C:9C:35:5A:FB:67:59:F5:0D:C5:1E:30:75:BD:45:DF:37:7B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b6c73b0-05e0-3190-93d0-89f81766861f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:93:5c:d9:7d:80:aa:bf:93:b5:c0:56:a5:1e:c4:55:f3:34:
         51:5f:25:ce:98:7e:c3:27:91:68:09:7f:c8:ea:33:68:aa:87:
         af:c3:81:c0:7e:a9:94:e6:88:e2:4e:4c:41:17:8d:a5:84:1a:
         cc:fa:9c:dd:f5:0c:7c:df:ef:f9:0c:d4:f5:6d:4c:26:d2:53:
         9c:80:29:22:0f:db:04:7f:31:b6:c3:05:ce:a2:e9:ef:c4:a9:
         e9:45:be:e0:f8:08:c4:4d:0f:76:a6:b7:f5:d4:e5:81:fb:40:
         51:20:bc:d2:44:bc:c7:10:e2:4f:7d:8a:eb:e8:a6:7c:da:d9:
         cf:c7:89:27:bd:4a:83:13:7e:74:52:67:dc:7a:db:1a:a1:cb:
         69:46:9c:04:6a:05:b1:b9:b4:94:53:09:07:37:a1:ab:19:2c:
         05:b8:6b:5c:1e:7d:6c:f4:98:c7:d4:b6:b9:90:6e:da:c2:87:
         95:1e:d7:b2:9f:5f:30:c7:a7:4e:1e:1f:3e:47:57:0e:1f:dc:
         71:02:0c:c2:d6:19:df:f8:df:24:cb:fd:fc:66:0d:14:f2:62:
         86:88:43:6e:16:fc:03:2a:ad:7e:44:94:0b:26:31:a5:a6:f5:
         8d:d8:7d:eb:9d:58:38:20:03:77:56:48:17:4e:1a:05:4c:fe:
         fe:cc:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:46:41 2026 by rpki-client