Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/397589b0-e8a8-33dc-8568-45a7d0866591.roa
File:                     397589b0-e8a8-33dc-8568-45a7d0866591.roa (raw, json)
Hash identifier:          i35MUDO09aqQYypvyfhqzXuPCiK3/HOFn7fkaw96RMo=
Subject key identifier:   84:6C:D4:D9:EC:04:F3:1C:87:39:92:BA:84:F9:0A:CC:63:8D:E7:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8624560549916E80D3C4A08
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/397589b0-e8a8-33dc-8568-45a7d0866591.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        71.235.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:45:60:54:99:16:e8:0d:3c:4a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=cf27d59d-729d-4a84-acbf-4eece3e5a93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:40:9a:e1:40:a4:08:0e:27:3b:97:a6:2c:
                    94:da:66:ce:3e:4d:23:e2:b5:82:9a:01:82:26:8b:
                    c4:9f:1a:e2:ff:c3:85:7b:c6:05:a6:40:58:2b:a6:
                    5d:e9:e0:92:67:e1:84:75:58:56:7c:a3:b4:51:8a:
                    8a:8e:41:d3:b2:36:85:9a:44:67:f5:34:ba:f8:c7:
                    85:a3:d0:f7:ba:6d:71:9c:44:ff:a0:46:dd:fc:72:
                    b9:03:75:75:8c:84:45:b5:0e:1a:f3:0b:7a:9d:f7:
                    2c:92:c4:d2:d9:cd:e8:4a:23:3f:c5:6d:cb:f9:6b:
                    e8:fa:64:81:73:c9:73:e5:fd:1c:bd:75:88:50:05:
                    ee:09:84:25:9a:83:25:2a:c7:a5:96:27:73:23:75:
                    57:c1:1e:b4:09:87:29:b8:fb:7c:3f:44:fb:89:81:
                    ca:7c:10:a2:bc:b3:f4:be:fb:20:57:87:09:9b:2f:
                    33:b4:fd:19:f9:1f:ce:67:d5:75:ad:89:a6:69:4a:
                    f6:34:1b:76:21:e2:b7:b1:71:ad:44:58:cf:4f:b3:
                    3f:eb:88:4b:fa:bb:6c:3f:ef:3c:9a:2f:f4:99:06:
                    ff:b2:16:43:92:7c:94:da:71:f4:ed:37:d5:0b:cc:
                    99:f9:ec:8b:4a:89:5b:f6:9f:b2:6f:92:80:ed:62:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6C:D4:D9:EC:04:F3:1C:87:39:92:BA:84:F9:0A:CC:63:8D:E7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/397589b0-e8a8-33dc-8568-45a7d0866591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.235.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:6c:69:35:1f:f0:d7:7a:41:59:e8:58:31:82:dd:ae:2f:6e:
         70:b4:0c:5f:58:81:97:5d:2a:fb:e4:78:e8:68:f1:44:30:5a:
         e5:cb:c2:b4:07:75:de:16:31:ca:8a:d7:e1:fe:60:52:37:91:
         b9:c2:a2:4b:f3:ce:71:56:5d:a1:38:a5:50:68:35:3a:2f:22:
         40:6f:80:c3:d5:93:12:46:0c:b4:16:d0:53:8f:09:e0:79:a1:
         8c:2a:61:e9:55:e1:ea:14:45:bb:d3:03:ce:fe:5a:59:0c:c0:
         58:8b:59:62:38:80:9f:07:91:d0:d6:3e:d7:a6:40:d8:93:ce:
         a3:84:85:37:a6:30:af:73:9c:0a:7d:71:0f:77:a9:a8:8c:60:
         0d:fa:a7:ff:f7:99:9c:99:b2:f4:1a:a2:ed:a1:96:5c:49:53:
         4f:0d:e7:48:dc:22:06:2b:bb:40:c3:8c:3e:09:d2:00:75:85:
         e7:26:ba:a9:0e:e5:a7:b5:38:e5:5a:aa:4f:c4:57:8d:fc:f7:
         65:cd:5e:41:b2:21:1e:1b:bb:d9:5f:95:cb:93:f6:cc:73:ce:
         e7:87:54:66:aa:d7:7c:04:b3:4c:ee:71:73:5d:a3:75:e9:13:
         91:65:88:52:3a:b0:a4:ca:43:4d:e8:c6:e4:67:48:43:a8:f5:
         5f:f3:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 23:23:01 2026 by rpki-client