Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d15e3ef-9ae9-39d6-9710-086ce67ac677.roa
File:                     2d15e3ef-9ae9-39d6-9710-086ce67ac677.roa (raw, json)
Hash identifier:          yijGFkIYJeTsVbCpF4tfvq+N5p/2ZS2/8MHaMI8RycM=
Subject key identifier:   34:C9:06:56:A5:7E:75:13:9B:20:9E:09:A1:87:95:CE:89:44:E4:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862851B6B0E46938F785B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d15e3ef-9ae9-39d6-9710-086ce67ac677.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        73.89.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:85:1b:6b:0e:46:93:8f:78:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=612ee44d-1478-48f9-8df2-8589888459ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:40:2e:89:e1:86:4d:76:77:dd:66:e9:04:
                    ad:cf:5e:4d:9a:85:ba:91:1b:a8:11:54:87:6f:4a:
                    f0:6e:06:ce:db:03:53:aa:1b:51:99:b3:3f:75:0c:
                    9e:12:dd:3a:a0:a9:13:f5:fd:94:38:36:0f:af:f3:
                    e1:72:9a:00:ed:e6:3c:37:3c:7c:d1:16:33:df:f2:
                    24:a4:d5:7f:ec:a8:b0:75:54:0f:a4:6b:30:58:2a:
                    63:59:6a:5d:9f:80:bc:5a:7b:06:7d:cf:86:88:34:
                    89:e3:06:f4:8f:a4:63:89:ab:ed:09:83:0e:10:d5:
                    fc:bc:95:05:f2:61:04:b1:c6:a3:fa:cf:02:39:bf:
                    bf:37:38:6e:da:25:e6:d5:f1:af:72:29:d4:17:06:
                    a4:e0:51:d8:34:a7:96:71:c6:c1:01:4b:d9:d4:6d:
                    53:2b:55:52:08:d5:ac:ea:16:63:53:50:60:28:e2:
                    6f:c0:82:e1:e7:94:82:13:e3:f2:f2:35:d4:f6:c9:
                    ee:4b:94:5a:fc:49:17:c8:a0:57:c3:20:64:3b:1a:
                    4a:16:0f:f1:fe:6d:1d:81:a9:6c:d5:7f:0a:e6:a1:
                    51:b5:95:03:02:e1:b8:d0:71:f6:8c:9a:94:f9:ad:
                    48:8b:16:55:eb:43:c1:99:1a:78:69:b0:82:ce:97:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:06:56:A5:7E:75:13:9B:20:9E:09:A1:87:95:CE:89:44:E4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d15e3ef-9ae9-39d6-9710-086ce67ac677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.89.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:52:84:f6:99:d9:a5:b3:70:b5:70:29:11:7e:70:03:03:4e:
         04:80:f6:d5:d3:c1:28:81:d0:d9:4e:e7:19:08:40:2a:f6:8e:
         0a:77:cc:27:7e:56:a7:c9:cd:b9:2c:05:26:5a:3a:11:38:a0:
         3b:47:50:04:f7:bd:6e:ab:ad:d5:ac:2b:b5:db:21:e8:d4:71:
         de:c7:60:a5:31:f9:93:77:9a:61:15:15:a9:d2:48:27:d2:b4:
         94:e9:f5:0e:f6:ad:a3:5b:e3:2c:75:ca:69:1b:ad:f1:30:69:
         dc:78:2a:e7:e1:a4:8d:c1:03:a1:80:ba:00:d4:23:e0:2a:04:
         63:a6:44:a2:e1:83:5e:b4:85:dc:0a:a7:6f:d7:77:d1:8e:2f:
         52:dc:ed:99:29:f4:76:1e:5f:dd:6b:c5:b3:69:42:8f:b1:d3:
         a8:ec:26:d9:e9:92:b7:19:2c:99:5a:a8:9a:78:15:92:84:b4:
         ba:b0:4a:b5:3c:1d:30:07:3c:b4:49:ad:e3:72:d6:16:28:a4:
         77:04:c4:90:ba:d4:92:22:d9:e0:e1:b4:1b:c9:77:24:76:3c:
         88:84:b0:d0:b7:af:9f:3c:d7:e7:44:57:01:06:36:ac:d2:94:
         01:25:b5:4a:23:89:0b:de:61:5e:c4:d9:8f:26:d4:80:11:31:
         ce:63:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:34:30 2026 by rpki-client