Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2657aa12-f53d-3e42-988b-fbb90d2ba03d.roa
File:                     2657aa12-f53d-3e42-988b-fbb90d2ba03d.roa (raw, json)
Hash identifier:          VTQOe9rzoUbJC+X0kFC/u0q3tAeHmzGKva8Ja+bfwvs=
Subject key identifier:   7D:D8:D3:8C:F7:26:54:E1:6D:34:9F:76:BE:CA:97:6A:79:3E:7F:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B74ED2A78580E47D8A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2657aa12-f53d-3e42-988b-fbb90d2ba03d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.70.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:74:ed:2a:78:58:0e:47:d8:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f226adcf-b00f-43fb-a062-d3022ae55657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:29:e5:b0:6b:4a:2c:da:0f:31:8a:0a:4d:
                    cc:21:e5:ca:37:33:f7:1b:5a:01:d1:dd:38:5d:41:
                    f8:f9:f6:fd:ac:0a:bb:9c:b3:c1:ff:f5:83:7d:43:
                    9c:67:33:6c:6c:b1:bd:b4:07:bc:c3:e7:1f:eb:25:
                    5e:27:fe:88:61:97:15:db:29:57:84:09:aa:87:53:
                    bf:1c:d8:b7:5f:88:4c:6f:b5:55:fd:70:24:cd:1f:
                    f5:6e:04:08:82:10:ad:8e:20:b3:ef:93:51:47:6a:
                    8c:83:c5:7b:e7:46:b0:ac:5a:75:9f:8e:5a:f3:de:
                    5e:9a:8b:61:f3:c1:ed:1d:be:83:a5:2b:43:5a:4b:
                    3f:34:25:f5:d5:c8:07:0a:e8:61:20:96:1c:0d:cd:
                    fb:fc:fb:0f:70:9c:f5:80:6d:bf:6e:15:a9:04:f9:
                    08:db:b6:f3:89:b9:2b:29:ba:08:d3:36:0c:ee:e7:
                    78:f0:db:1d:3c:35:15:c5:ec:38:3d:6b:6a:5c:fd:
                    7e:e9:f1:cf:5f:d8:93:c9:e2:f0:fa:f7:7e:c0:c1:
                    ea:1c:3c:8e:cf:fd:f6:3d:bb:c6:c8:88:3f:0c:74:
                    5f:08:d5:cb:89:6b:aa:73:02:f4:37:8a:39:46:6b:
                    45:57:c4:8f:96:03:b1:8e:22:9d:28:b6:93:63:45:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:D3:8C:F7:26:54:E1:6D:34:9F:76:BE:CA:97:6A:79:3E:7F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2657aa12-f53d-3e42-988b-fbb90d2ba03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:b1:fc:15:99:6e:c6:45:df:20:54:68:16:10:0f:35:5b:
         80:31:91:fd:7f:85:cc:3e:64:e7:a7:62:30:e7:5e:c1:74:2d:
         b7:20:7d:c6:26:91:d1:0c:eb:24:31:ea:3a:c0:eb:bd:2b:3a:
         91:0d:b2:ff:46:4c:96:cf:e5:b2:7b:87:fb:b5:ea:07:0a:51:
         04:0e:9b:8b:f6:0c:fe:76:27:7b:82:0b:93:86:c3:85:40:39:
         43:b6:cc:47:0a:7c:d9:f9:c6:54:df:ac:bf:3d:c0:26:15:5e:
         5f:8d:7b:94:6e:ef:11:92:85:21:8d:1d:5d:91:45:30:86:c4:
         64:eb:5e:62:1f:b2:72:1d:e9:e0:87:b7:7d:70:90:f7:a5:26:
         22:0f:f1:0d:5e:c0:9f:c1:6b:5a:fe:75:61:45:54:2b:16:88:
         2e:e5:ac:b2:dd:77:37:93:fc:71:6b:ff:7c:54:d9:e2:14:34:
         bf:51:69:cd:44:37:a2:08:dd:a5:3d:30:7f:1a:2d:45:e5:c5:
         1b:ef:02:22:ee:c4:da:9b:a4:c5:71:ef:13:3c:57:16:34:a1:
         c7:24:18:e6:d3:ce:70:95:0b:2c:2b:60:15:75:82:81:78:f2:
         ba:1d:92:7e:a0:2f:70:cf:cb:0f:42:5d:0c:4b:91:92:f4:ff:
         30:41:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:56 2026 by rpki-client