Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b9e958-96c9-394e-8110-9ad838eb9eca.roa
File:                     19b9e958-96c9-394e-8110-9ad838eb9eca.roa (raw, json)
Hash identifier:          xvzYsTeJRB7UrznsKb0wt8DhCzBRZMlTsHth2cqrlOE=
Subject key identifier:   62:3D:7F:40:B0:51:78:7F:E9:1B:95:97:39:98:49:E3:C3:1B:F2:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E0FF8E01F118C8C67A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b9e958-96c9-394e-8110-9ad838eb9eca.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        73.17.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:0f:f8:e0:1f:11:8c:8c:67:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=3a9dd19e-6d3f-41ff-8a2b-b0c9ca98aba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:1c:06:10:7a:33:1f:13:45:1f:b3:f0:33:
                    46:a1:4f:31:e2:d3:92:c9:e9:a5:92:b2:d3:c2:58:
                    97:d8:e7:00:17:e1:fd:b9:ec:1e:eb:86:4c:90:90:
                    cc:ab:84:b0:a7:4d:43:15:50:62:83:24:89:a9:78:
                    2c:1e:19:54:df:77:98:59:b5:3e:b6:43:8b:92:0c:
                    1c:b2:f5:4f:c9:c3:a0:f6:36:da:37:06:5a:f8:aa:
                    7f:73:7a:a6:e1:cf:90:b8:91:c1:1e:b2:43:98:df:
                    e9:a2:fe:17:53:96:31:70:37:97:10:fa:7b:0c:51:
                    98:b1:58:d8:2f:76:f3:4b:1c:1b:1d:9c:eb:4d:78:
                    1c:b0:5b:c1:5d:19:b1:0a:bc:97:d3:7d:f1:67:a4:
                    b7:cd:dc:68:d9:df:f1:79:7f:4d:79:18:34:b3:0f:
                    7d:bf:77:8f:7f:a1:22:42:ad:b2:7d:88:d1:04:1c:
                    b5:5f:bc:98:f5:f7:40:e0:43:08:03:e6:51:90:41:
                    89:66:c7:07:6a:65:94:e7:e1:35:71:c2:3b:0c:fc:
                    83:c9:81:8d:c3:8a:e0:9b:17:03:20:28:f3:18:b0:
                    b3:17:25:eb:01:e3:c9:ab:1b:7f:8e:db:de:8b:9c:
                    2c:cf:c8:3d:07:e7:4f:45:f9:6b:ba:41:27:37:da:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3D:7F:40:B0:51:78:7F:E9:1B:95:97:39:98:49:E3:C3:1B:F2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b9e958-96c9-394e-8110-9ad838eb9eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:70:af:8a:f1:4b:4d:34:a5:28:ed:4e:4c:ac:17:cb:38:
         03:af:8e:4e:73:56:65:64:d5:94:a4:b7:a6:b0:99:17:57:b9:
         a9:21:09:1f:8c:b6:4d:72:e5:26:7f:69:50:fc:1b:1d:a1:f9:
         c5:58:06:5c:eb:32:c4:21:d4:15:b4:15:c9:6b:16:38:1f:98:
         46:50:a8:2c:38:9d:97:e3:61:37:56:ab:71:5d:d3:e2:b5:1f:
         e5:34:6d:68:7a:84:6f:21:35:6d:aa:c1:94:97:d4:7b:a4:00:
         d3:56:57:b6:b1:32:b6:73:47:e6:51:79:a1:c2:c9:5b:6a:48:
         10:3b:69:a2:11:b3:ec:0f:38:af:21:4a:3c:e1:50:dc:2f:78:
         c3:0e:44:5f:8e:17:47:d1:23:94:22:f3:8f:6e:e3:50:be:48:
         be:87:2b:56:01:2b:13:81:c3:e5:43:bc:6a:e6:e4:55:97:6a:
         d8:aa:66:e1:5a:bf:08:52:d5:1c:7d:78:6b:0d:dc:8e:69:c9:
         ee:cd:74:16:a9:28:22:fb:9e:aa:6d:cb:6f:c2:38:09:04:22:
         74:b5:f2:28:70:34:df:d0:57:13:49:21:33:0f:31:b1:89:b2:
         77:3e:e1:b2:23:50:9a:29:6c:c7:f9:f0:6c:76:d0:15:fb:8c:
         40:78:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:45:35 2026 by rpki-client