Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22f102b2-d807-3ea4-a1d4-866be06de61c.roa
File:                     22f102b2-d807-3ea4-a1d4-866be06de61c.roa (raw, json)
Hash identifier:          CQUjmmLBGwgEZVuuCRe/mOZDlpz63VX3zjbZ/jMX5GE=
Subject key identifier:   B2:D2:B6:BE:78:53:1A:12:26:69:DB:10:18:E6:67:C7:67:38:FA:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C97A7D8859EA68B2AC680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22f102b2-d807-3ea4-a1d4-866be06de61c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.246.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:97:a7:d8:85:9e:a6:8b:2a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=238f0376-8152-4873-b546-68da06a2cf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:17:33:ad:66:ee:35:65:ab:da:f4:3c:12:
                    d9:56:14:a0:2d:7f:3d:a4:83:34:2d:90:2d:21:a5:
                    78:43:2a:7d:09:78:54:f6:ff:95:45:ab:e5:1b:9a:
                    ea:c2:b1:a9:b5:a6:0b:f4:c4:ea:55:38:58:6d:4b:
                    72:80:19:15:24:a2:c6:81:93:c7:43:f4:7b:5b:c3:
                    06:2d:f1:e7:d6:a4:5c:2b:08:35:c2:c6:0e:c3:f5:
                    1a:2e:5b:12:5f:3a:eb:8d:10:a7:57:41:6a:cd:fc:
                    4d:80:c1:67:92:6c:71:97:ef:f5:43:07:eb:b7:61:
                    3d:47:ef:c0:1b:1e:21:d0:0e:75:56:7f:e1:14:71:
                    39:99:1b:af:72:49:00:8e:2c:95:5c:e7:7c:c7:00:
                    b7:fc:9d:e6:87:6c:83:7a:e3:fd:a6:b9:88:55:a2:
                    6f:1a:f6:99:f6:e9:83:03:85:bd:c1:20:40:ac:9f:
                    8d:71:3b:df:54:2c:d3:9c:46:eb:af:77:3c:ee:52:
                    bd:d9:4e:e9:ab:7f:8d:e5:47:86:3e:c0:cb:07:ea:
                    bd:9f:43:c6:69:fc:21:ad:13:c1:cf:15:17:52:0e:
                    82:65:9b:d4:01:a0:75:cb:68:fa:4a:c0:6d:91:a8:
                    1b:a0:4f:b8:84:1a:4e:59:ba:ca:df:a9:d2:77:94:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:B6:BE:78:53:1A:12:26:69:DB:10:18:E6:67:C7:67:38:FA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22f102b2-d807-3ea4-a1d4-866be06de61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:35:7f:ca:a6:d1:fa:16:c2:5a:95:05:3d:fe:8e:98:48:72:
         a2:37:b5:b8:ae:da:83:6a:ae:8b:15:2c:12:e7:77:7c:d3:8d:
         15:7b:0e:f8:8b:9c:8c:f8:af:15:1e:79:fc:ea:ad:15:0f:ff:
         f1:7d:72:23:37:29:c6:6f:32:6b:7b:5a:00:12:af:e2:6a:c9:
         9d:e4:56:fb:3f:02:c4:8a:2c:b6:96:d1:96:23:1e:96:cf:5c:
         a3:30:88:da:71:d7:a4:3d:05:d4:55:7d:89:ce:25:68:5e:76:
         3e:fb:53:17:54:57:12:27:10:85:60:d2:f0:73:12:62:5c:bf:
         d1:08:1d:e3:d5:86:27:0d:55:00:26:e4:75:8a:d1:fd:f7:f6:
         a1:d7:cc:f7:83:60:9a:d7:0c:c4:9e:26:ec:82:07:25:81:31:
         78:c0:33:9e:3f:43:3b:fa:f9:a1:03:a3:08:b9:df:59:13:65:
         46:15:80:ec:5d:44:ce:bf:66:13:8f:b4:e7:5f:4f:f9:a0:47:
         08:ef:78:fb:53:95:ec:df:de:5e:72:24:60:34:af:d9:a2:80:
         6e:a3:f8:47:da:31:22:06:73:67:0a:89:a4:34:8f:44:5e:ee:
         69:63:bb:e5:03:d4:3d:c2:d6:97:fc:f4:5a:8b:2b:85:ca:b6:
         59:3f:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:09:25 2026 by rpki-client