Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aa19f8a-41b2-311e-a7f5-2ed56e6df7b6.roa
File:                     1aa19f8a-41b2-311e-a7f5-2ed56e6df7b6.roa (raw, json)
Hash identifier:          +Q7iYHHtKVTTZ08wVBrBWU3ZesA4P58R3SlNslc2J/Q=
Subject key identifier:   02:95:45:A8:06:72:93:38:98:BF:13:49:56:EA:C7:79:1B:F9:22:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863A0DB5D41F2D114452980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aa19f8a-41b2-311e-a7f5-2ed56e6df7b6.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        73.253.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:a0:db:5d:41:f2:d1:14:45:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d41e3a0d-de2b-4ab7-b564-90fdb281919e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:7f:e9:a3:7c:42:8d:27:ce:cf:1c:0d:51:
                    c0:a4:f7:f3:2e:0b:fd:19:93:46:b0:7c:4d:24:f9:
                    bf:e3:f4:33:b9:31:9f:b9:40:62:74:52:f1:3e:5a:
                    58:30:13:8e:33:4b:d5:72:30:12:16:38:90:4b:c0:
                    c0:7c:98:09:29:5c:57:41:c3:f9:4e:69:06:80:79:
                    71:7f:85:d8:a3:05:fd:e1:60:d9:da:64:14:59:43:
                    15:05:e1:a0:51:cf:fb:b9:04:49:48:a9:7d:51:ea:
                    9d:fd:72:23:84:84:a5:5f:cd:c3:91:f2:fa:ff:2e:
                    52:0f:8f:d7:17:21:ec:e7:a7:73:78:89:bd:88:fa:
                    c9:52:dd:59:81:46:5a:8a:ff:8c:09:22:4e:f3:89:
                    60:a0:41:e6:ab:66:68:bb:6b:bf:37:3e:63:56:76:
                    11:89:0c:bd:cb:94:5a:2c:38:39:8b:e1:8c:a5:90:
                    21:a7:1f:af:91:d2:bf:16:23:81:74:8a:81:45:3d:
                    10:dd:6c:be:c6:55:eb:f4:96:49:27:fe:c4:2d:fe:
                    39:ce:bc:7c:6c:c0:c1:c5:0a:1b:bb:9b:8a:26:54:
                    3e:95:05:86:70:97:51:36:e2:d5:76:de:f0:c6:30:
                    f3:45:5a:af:64:87:25:f5:54:7e:a6:3b:3c:37:4f:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:45:A8:06:72:93:38:98:BF:13:49:56:EA:C7:79:1B:F9:22:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1aa19f8a-41b2-311e-a7f5-2ed56e6df7b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.253.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:06:ff:ca:50:f5:0e:47:f5:9a:9d:87:1a:2d:6f:0e:94:b2:
         03:9a:c9:4c:d0:10:be:eb:07:8c:8a:8d:bf:fb:c7:e7:36:aa:
         08:2a:a1:a6:a5:5e:e0:1b:c9:1f:91:15:22:1a:13:cb:66:a3:
         20:c4:5f:72:b2:c1:2c:aa:f4:85:e5:53:c3:de:41:b9:6d:7b:
         fb:90:57:d3:a3:5a:18:7a:86:7c:a2:ff:5f:6e:50:42:a0:0b:
         29:01:4f:89:48:d5:76:c0:00:61:42:d1:c0:bc:59:d7:7d:a0:
         6e:52:e7:69:b2:ca:18:0f:e1:37:cd:79:be:53:f2:54:1f:24:
         44:7d:e2:4b:08:ff:5c:2d:f2:92:01:22:5a:8f:06:70:95:f7:
         14:18:9e:e5:21:69:16:3d:b5:07:e9:e0:d5:eb:8e:c2:a3:eb:
         bd:75:52:c4:4f:0f:09:01:66:ae:c2:b8:fc:6c:58:4a:92:1c:
         28:99:9a:d3:f6:8a:3c:a3:26:79:1d:69:b5:d8:e8:4d:88:35:
         59:e2:6a:d5:c1:73:b2:e7:8a:fc:cb:4e:f0:c3:45:5b:6d:56:
         08:6d:8f:de:8b:df:87:70:ec:cf:ea:1c:62:b9:80:c5:58:5f:
         78:4e:1a:73:2e:ca:ff:04:07:97:34:92:a1:be:6f:24:62:72:
         92:60:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:23:19 2026 by rpki-client