Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa
File:                     33834404-93d0-3e75-9b3c-28f9341241a9.roa (raw, json)
Hash identifier:          8XAf90UDq+nBOPU1sNuK0ektMOjj4CZDNAvoQTkth9c=
Subject key identifier:   83:16:89:A5:62:B5:C3:DC:1E:66:3A:63:42:A0:BD:DD:AD:19:E6:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360067D2C4A9A7D9D4F04750
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        73.67.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:67:d2:c4:a9:a7:d9:d4:f0:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=07181e06-18a5-4e50-9702-4e70eda00ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:39:69:af:fb:03:90:70:b1:75:74:b8:73:
                    42:fb:d2:27:78:85:d2:c7:4d:6e:35:03:b2:8b:5a:
                    72:68:6e:ef:a0:8b:b7:32:bb:46:eb:e2:76:db:e0:
                    6c:ac:f2:d2:c4:cd:77:e3:ef:8e:21:c9:d8:8a:06:
                    18:b5:77:08:df:49:12:25:7a:e7:61:81:7a:47:8f:
                    6a:de:f3:52:a4:51:17:0c:83:a4:dd:37:5a:e2:2e:
                    81:df:a4:20:98:ee:80:68:56:59:b7:1c:43:c6:54:
                    b3:c8:6d:c5:6e:48:61:10:a3:c3:c5:de:6f:84:f3:
                    99:85:13:1b:75:55:5c:1b:f9:53:9c:48:3d:79:45:
                    dd:9b:6f:9c:6e:24:5a:27:c1:cd:14:1f:2a:a4:45:
                    bd:59:66:0e:3c:7c:29:bb:5f:6c:1e:90:4a:c6:14:
                    cf:26:7c:2d:f1:dc:64:cf:c4:0d:71:c5:12:92:72:
                    88:28:17:66:91:56:35:c8:f4:58:fd:77:79:36:2c:
                    b9:7b:3c:39:31:b0:9e:8e:36:e2:8f:b6:aa:67:98:
                    e9:e2:64:40:b8:31:8e:48:85:38:cc:44:8f:72:e0:
                    e3:ba:3c:32:36:5a:fe:2a:57:fb:56:a7:07:fe:fa:
                    9d:a0:5f:7b:3c:2c:c8:65:89:19:b7:cc:6b:e2:42:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:89:A5:62:B5:C3:DC:1E:66:3A:63:42:A0:BD:DD:AD:19:E6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33834404-93d0-3e75-9b3c-28f9341241a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:98:b1:76:93:0d:b6:60:67:12:d2:65:38:a1:f1:ba:2c:
         b4:cb:a5:15:71:49:a9:ad:1b:cb:82:b9:af:c3:46:0b:79:12:
         3c:5a:c6:5c:01:ed:e9:39:58:67:e8:69:7e:18:14:16:4c:49:
         f5:f7:d7:7f:dd:a4:a1:c9:8e:7b:19:5e:0a:7e:32:82:17:e3:
         7c:64:65:0f:89:72:43:6b:53:21:ae:5a:d3:6b:11:5a:de:e6:
         e2:d6:e4:93:28:e1:d7:5a:bc:9d:5b:e3:be:8a:69:96:e6:f7:
         d6:a6:bb:27:ea:d2:a4:b9:93:59:9e:82:bf:46:41:0a:6c:70:
         f7:41:86:cc:4b:22:31:32:76:58:0b:6f:c0:87:6b:41:18:ee:
         9f:92:55:cf:d4:14:d6:dd:64:15:ad:85:6d:07:5e:19:99:d7:
         30:80:b8:d8:63:8b:8c:14:5b:ab:5a:d0:2a:3e:d2:f0:a1:ba:
         4d:a8:17:c3:b2:d4:37:dd:b6:4b:47:67:61:c3:29:48:42:be:
         a5:f5:4c:d4:e1:0d:79:7e:3b:50:eb:7d:78:6a:6b:ea:f1:85:
         af:54:a4:0e:34:72:02:39:95:c4:b5:25:f7:62:ca:cf:94:d9:
         0d:6e:a8:7c:84:c6:d3:d7:b7:f1:7f:50:40:3b:3b:fb:13:64:
         2d:ff:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:20:05 2026 by rpki-client