Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a37ba39-199f-3e41-8bfb-c6fac13761df.roa
File:                     3a37ba39-199f-3e41-8bfb-c6fac13761df.roa (raw, json)
Hash identifier:          TSkX104+jZi0BG8911+7GTtxJq38r3sSMrdnC/9wJG4=
Subject key identifier:   9D:52:CE:E4:AB:07:FA:A7:4D:E2:63:39:86:FC:FE:1E:78:36:74:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863969DC6A5681B3E727280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a37ba39-199f-3e41-8bfb-c6fac13761df.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        73.234.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:96:9d:c6:a5:68:1b:3e:72:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=4113b060-2196-4a92-8ae4-e1531265147f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:f5:3c:52:76:a3:2b:00:00:cc:0a:6e:15:
                    27:b4:36:2f:e7:c4:5c:65:ba:48:8d:23:84:03:98:
                    6a:ff:6b:f6:53:e1:0c:90:f4:76:4d:f7:95:28:ea:
                    ee:09:1f:e7:e9:a8:aa:79:89:78:57:e2:78:10:72:
                    85:be:62:23:8e:04:03:3c:1d:87:6d:c3:36:c6:f4:
                    00:5b:6d:e2:70:a7:12:c5:62:74:b4:8e:05:1a:29:
                    88:97:cf:99:49:82:8b:bc:31:cc:da:67:61:39:26:
                    21:06:f1:cd:5b:d0:4e:b0:29:1c:4e:d0:40:ea:01:
                    3c:4f:fd:a2:e8:25:17:d6:ab:2b:5d:80:7b:cc:78:
                    63:36:4f:98:3b:37:b0:98:2f:1e:2b:b4:a5:0d:1b:
                    8f:30:8c:12:66:c3:86:e1:2a:09:b6:53:b1:00:46:
                    04:5c:b3:da:6b:b2:09:a1:24:68:fa:68:45:5c:a5:
                    b9:b4:25:2b:15:95:68:ef:63:65:ee:6c:ec:d4:63:
                    c1:6c:91:ad:56:cc:34:2f:05:39:ed:6e:c1:83:28:
                    cc:59:3c:f0:25:6c:60:81:1e:96:b0:73:5d:c3:19:
                    c9:a4:6a:c7:04:6c:82:f6:1e:90:74:37:df:90:75:
                    19:9f:32:3f:64:72:68:c1:19:c0:28:83:c9:90:55:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:CE:E4:AB:07:FA:A7:4D:E2:63:39:86:FC:FE:1E:78:36:74:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a37ba39-199f-3e41-8bfb-c6fac13761df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ce:93:71:89:f4:70:ba:52:62:64:9f:19:7f:25:21:eb:65:
         ca:88:dc:19:54:68:11:a7:fd:26:ca:5c:1a:fc:de:29:46:3a:
         29:4e:f7:1b:10:3a:b6:e4:b9:26:c1:b0:af:22:72:33:cc:69:
         89:3f:ae:e3:2e:88:31:7a:07:7e:f5:6e:89:37:bb:6a:82:9f:
         e7:86:0a:9f:da:04:74:2d:b5:fb:79:cf:67:fe:d8:3f:db:05:
         44:d1:9c:59:2a:13:5d:b6:4e:32:fd:d2:76:b9:4c:bf:1b:99:
         8e:f1:dd:86:95:57:40:3c:78:58:58:80:0d:b9:7e:4d:42:d6:
         bf:03:82:c0:28:d8:e9:5a:94:a4:fe:0a:f4:c2:55:a0:6e:1c:
         7b:62:6d:24:60:5c:7a:3a:b0:e1:7d:a1:69:c2:30:9b:7d:81:
         05:f1:c5:f5:2a:64:e7:e2:01:d8:1a:d1:57:21:2e:40:96:0a:
         7c:67:68:be:65:29:72:5b:34:5a:d2:77:59:73:c2:30:9a:db:
         36:7e:b7:4e:5c:aa:de:35:56:fd:cb:ef:24:ae:0a:91:ce:c6:
         2b:01:e0:8e:5e:4d:62:5f:e8:28:11:ca:76:03:06:04:61:a0:
         8e:1e:63:5b:08:9d:31:8e:2f:6d:a5:f8:de:26:28:5e:00:ff:
         22:da:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:51:17 2026 by rpki-client