Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ef69e2-d296-36ab-977b-e76f86f558db.roa
File:                     11ef69e2-d296-36ab-977b-e76f86f558db.roa (raw, json)
Hash identifier:          xBFQRsCdp26Jy7YIq73aapo5CDT+RZQdb1FtiaF85cQ=
Subject key identifier:   22:5E:AB:8B:87:EF:28:2B:D1:A5:59:DF:04:E8:28:68:96:59:59:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497FDDF836FF66C886E66EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ef69e2-d296-36ab-977b-e76f86f558db.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        73.58.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:dd:f8:36:ff:66:c8:86:e6:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1c485479-eb9d-411b-9b02-79d34e59c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:cc:1a:88:2b:8a:c3:c6:35:3d:75:db:ea:
                    51:e3:52:d0:9d:66:29:62:e6:87:db:68:34:f6:5a:
                    f1:65:71:ee:3c:2a:b9:c2:40:04:55:a6:d5:d8:4c:
                    59:8a:de:c9:37:8f:2a:3f:4b:cf:88:09:bf:b9:9a:
                    89:be:ea:f7:cf:23:e2:24:71:34:86:85:98:35:d4:
                    02:8d:ee:f2:6d:e2:d5:95:3c:af:42:72:54:99:d4:
                    48:03:c5:be:ec:27:93:db:dd:16:37:26:bd:7c:da:
                    0b:9a:1a:a7:0f:09:27:48:0d:4a:2d:aa:14:60:b4:
                    a5:4f:73:0d:39:57:f4:64:b5:b7:74:40:a4:c4:af:
                    c9:6a:78:8c:47:87:d8:59:d5:3c:89:d8:b9:ab:83:
                    30:a5:9a:00:dc:fb:82:8f:8b:a6:14:1c:2e:dd:5f:
                    ca:a3:d5:a9:78:4b:43:5d:f1:c4:a7:a6:3e:44:91:
                    d6:11:a3:b8:19:85:69:bb:97:63:b3:3d:9f:ff:29:
                    c4:d0:79:d2:01:d1:58:41:0d:33:0c:27:be:72:8b:
                    cd:6b:ee:cc:24:5e:99:f4:00:1f:35:b1:3d:6d:ce:
                    d9:52:77:76:5a:0f:32:64:e8:1b:db:8b:ef:c5:a7:
                    c5:e2:bb:d8:b6:1f:fc:b2:94:db:08:44:53:d4:87:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5E:AB:8B:87:EF:28:2B:D1:A5:59:DF:04:E8:28:68:96:59:59:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ef69e2-d296-36ab-977b-e76f86f558db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:13:a8:f8:68:37:6b:b0:95:c4:46:ff:59:64:d3:92:67:
         60:30:8b:a7:8e:c7:eb:43:6b:9c:5b:70:32:1f:6c:99:c4:47:
         90:ff:17:0f:eb:11:52:7d:82:e0:e4:0a:53:bb:0d:5b:a5:c7:
         86:09:23:d8:5c:79:24:dd:7f:8e:6e:30:3d:8f:b2:99:cc:94:
         1b:48:d8:00:8c:05:21:6b:cc:58:65:bc:ad:7a:e2:06:e8:54:
         0d:8b:e0:8b:ae:95:65:6e:23:cc:1b:74:29:67:39:a7:38:ff:
         41:6b:af:1c:71:06:dc:84:ac:fa:80:4b:21:41:b0:f4:47:4d:
         5e:2d:ba:5f:9c:2e:01:c6:0f:6b:83:db:f2:ca:d9:50:ca:29:
         5a:64:46:bc:06:50:cc:f2:44:72:db:15:04:eb:c5:cc:14:8b:
         6d:3a:01:75:87:be:cf:54:1d:29:0f:81:ed:70:f5:f0:cb:f9:
         e6:e4:1b:e3:d2:93:4d:5d:b9:86:10:98:5d:2a:4a:42:1d:f9:
         8c:cf:78:93:ed:07:b0:38:d2:e9:34:f6:c2:a0:52:e0:0d:f5:
         23:e0:8d:6f:0f:28:7c:c2:0a:ed:d7:10:c5:c7:28:39:1d:90:
         86:d3:11:86:99:89:48:38:49:02:71:7d:16:02:8b:d1:06:06:
         6c:95:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:16:41 2026 by rpki-client