Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e53b9f6-3521-34b3-b4c6-aeafba323a21.roa
File:                     0e53b9f6-3521-34b3-b4c6-aeafba323a21.roa (raw, json)
Hash identifier:          4sGi4gNoTGNmW6COCTyVZNOPRv+iAbpfhZKl6Cwxtok=
Subject key identifier:   F5:B4:5C:83:F0:46:24:FC:F4:29:B5:29:37:3E:BB:17:1A:49:FC:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FD9E7D7A586F9F2786A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e53b9f6-3521-34b3-b4c6-aeafba323a21.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.32.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:d9:e7:d7:a5:86:f9:f2:78:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=5bd06d86-ead4-444a-9d62-fcc344fb17ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:20:0c:e0:0e:ce:ea:09:05:ec:ef:fb:5e:
                    d6:97:96:e5:32:7b:a1:55:57:2b:0c:00:ef:6c:09:
                    29:ec:f9:c7:49:a5:4b:22:1b:73:f4:66:a2:c8:8c:
                    db:8f:f1:f3:ff:34:98:f8:5f:16:9f:dd:09:34:1a:
                    82:d4:c6:15:09:fd:5c:85:d6:b2:b9:b2:bd:d7:91:
                    26:97:4f:03:8e:93:e9:2e:aa:84:df:ba:e0:3f:c5:
                    32:a0:68:fe:ba:33:d1:2d:e8:a9:bd:a7:04:fa:fb:
                    17:52:31:7b:9a:6c:0e:ed:91:55:bf:fe:15:db:49:
                    5a:32:6a:2a:e5:fa:73:35:fb:da:d3:25:9c:fe:9b:
                    1f:60:64:bc:d8:a8:52:dd:c0:67:fa:ec:69:1e:be:
                    b3:20:61:10:72:77:f8:0b:3a:78:d1:bc:72:26:43:
                    a5:2e:d9:57:15:9a:85:e8:a7:6d:2a:6d:9a:61:ec:
                    52:4c:90:d6:53:8c:3e:7d:eb:c8:f7:ab:ce:92:45:
                    f8:83:a8:33:dd:a9:3d:2e:ac:71:c1:b0:38:5d:58:
                    a3:f9:09:c4:8f:be:d2:41:f1:5a:0f:52:4a:d9:98:
                    44:3d:5b:9b:fb:58:4b:18:1b:c6:e6:65:d7:c3:80:
                    a4:74:31:94:5b:96:d3:6b:4f:14:b1:a5:2e:66:29:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B4:5C:83:F0:46:24:FC:F4:29:B5:29:37:3E:BB:17:1A:49:FC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e53b9f6-3521-34b3-b4c6-aeafba323a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:10:5c:1a:fb:48:21:ee:e7:cc:75:e6:fa:64:e1:00:b8:bc:
         42:cd:05:c6:d4:dc:2c:34:a8:21:27:71:c0:c8:f3:88:38:2a:
         93:7c:3a:b2:14:87:b6:38:ee:6f:61:85:56:cc:59:f2:b9:2d:
         34:01:0f:33:66:b9:e0:1b:31:be:89:6e:85:2f:c3:49:7e:6c:
         a2:fa:b3:c9:ce:6e:5a:ab:2a:1b:8b:9a:34:42:5c:61:f2:ec:
         a9:c6:43:36:7d:2c:4e:53:5b:58:e8:73:a6:99:08:c0:d6:b2:
         65:7d:47:56:8e:ed:3d:96:bc:95:37:a8:21:46:f9:f5:3c:41:
         24:b2:fc:3a:8d:df:56:bb:9a:9d:7f:b5:ea:28:70:ce:1f:d6:
         99:ef:b0:d7:1d:b7:29:29:46:4a:88:55:e7:5b:68:65:cc:f6:
         54:71:79:79:cd:93:ac:a2:c7:45:31:4d:bd:4b:fc:13:e6:10:
         1f:2d:f7:f3:fa:71:3c:2f:c5:62:96:74:b1:4f:d7:67:f9:72:
         a6:89:16:a7:3a:0b:b8:55:f6:7c:52:ad:f9:d7:c1:7d:8d:31:
         a4:6b:1a:18:bb:c1:20:15:9d:84:f7:31:11:0e:bf:9a:8f:54:
         0a:4c:2f:3c:88:a2:5d:ef:d1:3d:13:9f:22:bf:c2:94:6d:77:
         bc:13:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:16:32 2026 by rpki-client