Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ff5e2e-d88b-3787-9133-33c9440b36a6.roa
File:                     25ff5e2e-d88b-3787-9133-33c9440b36a6.roa (raw, json)
Hash identifier:          8gm6E5FQINYHndBAYiN+ulMlMK9iLz2J9CPn3yfi8pk=
Subject key identifier:   55:34:18:BE:0F:EB:09:3C:1F:98:E0:57:8F:B2:70:EE:42:C8:7D:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A836FC433B0E1F178A1B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ff5e2e-d88b-3787-9133-33c9440b36a6.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.10.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:36:fc:43:3b:0e:1f:17:8a:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=3a18ee0b-c7c3-4703-8e30-6e6b8d20cb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:cf:ce:c6:3e:f5:8f:92:07:1f:77:e4:51:
                    9b:5d:f1:b0:ef:27:b6:ca:44:5b:d8:a3:c5:a7:cf:
                    a6:c2:f4:69:46:44:0d:81:0e:69:aa:14:48:0d:4b:
                    b7:23:16:d3:19:09:a5:69:55:18:2f:67:b1:27:1a:
                    9d:94:d6:2f:77:da:a9:1a:18:ae:b3:ca:09:0b:3f:
                    26:d7:6b:3e:1a:d0:75:68:64:03:72:d8:7f:0b:85:
                    e9:1c:91:d8:0b:4f:07:f8:fc:04:43:03:29:a8:fa:
                    b0:78:c3:43:ff:bd:86:26:58:12:86:4b:74:b2:db:
                    6f:76:64:45:48:f5:3b:3d:70:8a:6f:84:63:63:6a:
                    04:48:f1:74:72:8e:e1:b3:3e:ad:ee:d1:72:50:99:
                    9b:72:b0:68:b4:56:8f:04:65:ea:0d:67:18:c6:6a:
                    74:77:87:c8:df:d1:10:d9:9c:42:bd:30:d1:40:f1:
                    5d:5d:7d:f1:1f:2d:1b:38:e1:ed:13:58:09:b6:ad:
                    94:3f:9c:d1:e9:60:93:6d:b3:07:b3:48:11:95:fd:
                    e8:b6:65:3a:9d:c9:74:70:be:2e:63:63:41:59:80:
                    d4:aa:e5:8b:b1:f6:97:51:a4:3d:ce:6e:23:0b:36:
                    16:4e:86:6c:bb:74:5b:c5:29:a9:6f:10:3f:96:b0:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:18:BE:0F:EB:09:3C:1F:98:E0:57:8F:B2:70:EE:42:C8:7D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ff5e2e-d88b-3787-9133-33c9440b36a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:87:94:27:06:53:9c:16:b5:77:11:2d:7e:3d:7a:bf:b9:9d:
         a2:78:79:93:cc:95:87:a6:5b:cf:76:76:59:19:d4:cb:88:39:
         c8:ab:6a:b4:b7:b7:0b:3f:8f:4d:6d:ff:32:d5:7a:0a:7b:a9:
         ab:eb:83:38:c3:cf:2f:c7:19:3d:24:ba:14:c4:c0:eb:5b:a5:
         0c:78:09:cb:2e:18:62:ec:1f:12:37:2e:e6:59:26:f8:09:4a:
         01:cc:3f:a9:de:04:34:8d:48:56:4a:cf:3d:4c:0b:70:a9:a1:
         4f:bb:51:dd:bf:4a:b6:a9:85:4a:05:eb:40:4e:78:76:c5:70:
         d5:90:c6:70:5e:31:46:e9:89:8d:aa:1b:3c:44:88:ac:1a:a0:
         1f:1a:bb:63:2f:e3:39:49:8f:3b:2b:00:d2:d7:58:cd:fe:ed:
         c4:11:19:f0:bf:00:fb:4c:66:af:da:d2:4a:3d:e8:fd:ca:df:
         5e:55:99:cb:f0:e9:8b:13:67:75:d5:8c:21:96:00:66:f6:47:
         f1:9a:f5:43:d1:30:95:94:ac:88:e3:31:b8:d8:b8:3a:05:83:
         f8:e5:4d:de:7f:11:bc:1a:c9:2e:82:c6:5e:ad:f0:65:0c:2b:
         ba:a4:df:bb:8d:89:5a:f9:a7:74:1a:4a:90:31:45:e9:b3:0a:
         bf:db:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:20:15 2026 by rpki-client