Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d0f60d-a3a7-3e61-9c48-20556622c6cc.roa
File:                     20d0f60d-a3a7-3e61-9c48-20556622c6cc.roa (raw, json)
Hash identifier:          lVkU8n1r1Lz+yxyLl1UtqivDvdsvBrGduqHxWeaIlj8=
Subject key identifier:   35:DE:D0:E5:A3:23:0D:F4:9B:32:3C:30:01:4D:41:86:C0:C6:F8:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F77830B69C9AAF71B4C4A4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d0f60d-a3a7-3e61-9c48-20556622c6cc.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     22258
IP address blocks:        73.2.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:0b:69:c9:aa:f7:1b:4c:4a:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=e0eee6ff-e4af-4d9e-b3d2-d441178fd929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:47:80:0b:89:3b:08:51:97:73:ee:b0:39:
                    aa:67:68:24:1d:0f:50:ba:a0:5d:86:d8:50:05:eb:
                    c2:90:3f:9a:21:7d:a7:50:5b:86:a4:30:4c:bb:65:
                    90:fe:3e:08:9e:42:01:7b:5e:94:1b:86:4e:47:2c:
                    b5:2d:39:16:e7:fe:ec:00:6e:87:ab:37:c6:93:69:
                    35:ac:6a:62:b3:73:7e:55:ca:a1:de:ce:d8:41:f4:
                    d9:80:6f:99:c0:78:04:9d:0e:8d:67:14:37:78:f4:
                    73:fc:fd:82:f1:fb:7e:64:51:31:d8:1b:86:98:e7:
                    e7:63:a6:b6:fa:3d:f3:d3:32:d5:2b:74:7f:9e:34:
                    ef:15:27:fc:70:df:ae:4d:da:3a:02:b1:b5:7f:9e:
                    13:98:fa:cd:58:4d:84:ea:7d:30:d3:8d:b5:09:65:
                    43:4f:f4:f6:55:36:23:93:19:ab:0d:a1:37:f0:c1:
                    ed:8a:c4:96:06:1f:c1:b4:1b:d0:84:f3:0d:23:fe:
                    74:75:77:39:3a:45:6e:8b:40:d0:33:1c:1b:e3:a2:
                    32:a5:e0:00:71:bd:0c:08:a1:36:8a:63:05:ee:7d:
                    a1:4a:f0:a4:13:20:9b:18:f6:21:33:a7:db:e7:dd:
                    e0:67:e2:84:66:c4:94:40:ac:49:21:53:9d:82:f4:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DE:D0:E5:A3:23:0D:F4:9B:32:3C:30:01:4D:41:86:C0:C6:F8:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d0f60d-a3a7-3e61-9c48-20556622c6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.2.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:92:b9:bd:ca:28:70:82:bd:62:95:e3:c0:90:f3:3d:52:
         50:ee:ea:39:b6:14:bd:13:49:30:fc:8d:18:cb:6e:c8:42:5e:
         02:a1:ef:c8:8e:1f:1e:dc:da:cf:ac:c3:b2:88:2b:69:53:43:
         cd:3b:22:a6:69:8c:43:76:7d:50:3f:72:c9:56:a7:8f:f2:a9:
         ad:35:d8:1c:08:31:d7:ee:1d:67:0d:81:ec:1a:ad:d0:0a:f7:
         43:ce:1d:25:98:3e:e3:1e:ee:c4:f7:e3:bd:07:d2:35:a4:99:
         ad:ca:92:f6:8a:c9:86:c5:50:8c:64:26:cf:b4:64:d6:9d:ed:
         e5:b1:c6:c6:e8:4f:f4:7d:27:75:80:18:ed:d0:61:8a:b3:4a:
         95:42:05:2c:9c:71:22:81:83:1a:2e:ca:d4:62:56:03:49:32:
         f3:13:b8:88:ea:41:28:64:2c:9b:35:b8:43:f3:82:13:f7:a8:
         bb:1e:82:6d:f9:07:c3:61:32:b4:6b:a5:81:69:14:7f:3c:2b:
         b9:f6:9e:b4:3c:92:d3:40:42:8c:28:94:66:bc:b1:c1:a5:b7:
         40:95:45:28:94:71:68:11:5e:b7:71:5e:15:5d:0d:41:fc:63:
         a4:96:f8:53:55:ed:2d:00:ec:20:7f:ee:89:c3:96:ce:e7:c5:
         e1:c9:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:26:51 2026 by rpki-client