Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31cf32de-8242-3b9a-bc7a-acdb6d948faf.roa
File:                     31cf32de-8242-3b9a-bc7a-acdb6d948faf.roa (raw, json)
Hash identifier:          pgtZclVqhzmnTTrGpn7E4CUG5ztrq/yPjgWAbv6RjXA=
Subject key identifier:   EB:24:67:55:70:9E:ED:E0:60:BE:14:C5:FF:DE:79:7B:C1:CF:BB:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BFA66DC5647EEBA3D2300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31cf32de-8242-3b9a-bc7a-acdb6d948faf.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        73.81.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:fa:66:dc:56:47:ee:ba:3d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=294f655e-9f9d-4011-a099-777bc2ed81bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:33:79:32:57:61:5d:29:53:6f:61:bf:18:
                    2c:62:dd:73:c6:b4:be:7b:66:4f:ea:f6:51:2b:91:
                    a1:5e:74:94:21:df:62:fc:0f:bd:d5:67:0e:b4:ae:
                    4b:ff:18:f2:96:6e:42:12:26:61:cb:71:27:bc:04:
                    59:08:78:83:f3:a0:c5:1d:0d:21:b5:9d:87:e4:24:
                    50:07:eb:93:88:97:1d:e0:95:b2:0d:8e:59:bd:ec:
                    8d:d5:a6:23:a5:33:6f:ae:55:08:a0:e6:41:2a:35:
                    14:94:3e:27:6a:32:e5:27:4f:fa:6c:83:ec:7f:67:
                    f7:0e:e2:33:c0:3b:13:ca:50:68:47:51:15:f9:4a:
                    6c:84:8a:33:22:87:e7:bc:89:8c:9e:bc:e7:48:9d:
                    01:5e:b2:eb:59:2b:54:93:bf:27:90:55:46:eb:74:
                    e9:e1:7a:55:dd:0c:ef:fe:87:f3:66:0a:2e:ff:d4:
                    0d:d2:e1:10:0f:4e:dc:4e:fb:de:1e:c8:95:75:2c:
                    53:13:9f:1c:09:b0:8e:cd:d2:27:af:d2:66:e2:de:
                    3b:11:f0:c5:43:ce:64:63:f9:9c:65:93:bb:37:1a:
                    45:4d:d2:38:74:58:f2:19:34:2f:7c:ce:fb:87:ff:
                    51:ff:6b:59:4c:fb:45:f0:6a:44:b3:b8:cc:57:11:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:24:67:55:70:9E:ED:E0:60:BE:14:C5:FF:DE:79:7B:C1:CF:BB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31cf32de-8242-3b9a-bc7a-acdb6d948faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:da:6f:cb:12:33:ea:c2:39:08:8d:08:58:b8:06:88:6e:21:
         b3:60:6d:7f:2e:dd:a9:54:82:db:3b:ed:50:71:f8:a8:81:2a:
         c8:c9:9b:14:ad:8f:1a:e0:e7:ed:b8:50:ad:a4:db:60:1e:a2:
         02:23:0c:c5:47:70:fc:f8:cc:b6:e6:01:8e:74:ed:6c:f5:5e:
         4b:c2:02:34:7f:29:e4:89:64:92:12:18:15:c4:f1:18:da:1b:
         88:87:06:ae:0b:fd:39:ae:b6:55:97:1d:6b:6a:22:30:c7:1e:
         9c:8a:bf:77:97:3b:77:b5:ba:78:35:cc:ef:f4:2d:6d:74:9e:
         cf:a6:0f:17:c9:1c:f9:be:d6:0c:15:2d:9f:7c:ea:ba:94:a9:
         3d:9c:ae:bf:5c:df:b2:0d:5a:c6:59:70:47:5c:a1:bf:37:7f:
         e9:77:d9:19:6b:23:f1:29:1d:ff:b0:4d:80:b2:63:f8:3c:bf:
         92:4e:fd:93:52:e5:26:0c:08:33:e4:a2:7d:07:64:2a:f8:31:
         5f:c0:41:4c:bd:29:2a:66:70:e1:50:61:d1:8b:0b:09:c3:f6:
         4a:c6:e9:98:2d:30:93:e4:26:b1:cb:1f:84:ac:24:0d:0c:32:
         97:f2:d6:dc:2a:29:1b:90:d2:84:d4:66:ee:ad:e9:c1:4e:dc:
         d6:82:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:53:19 2026 by rpki-client