Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
File:                     4875549a-5914-3f98-a0e4-4caa4e08b221.roa (raw, json)
Hash identifier:          PgRUU+a/nELDjEFRbLVktJCmVOie3F/1+S45SbtLfOk=
Subject key identifier:   F1:CB:12:D6:0E:80:65:9D:CE:2D:E6:98:12:06:D9:87:5E:97:C2:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E9EB49EF828FD08792820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.136.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:9e:b4:9e:f8:28:fd:08:79:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4f93b6f8-ab67-43f8-8f48-4ca28b96dd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:67:da:24:91:33:16:ee:89:e9:63:d4:d2:
                    35:80:24:15:5a:a3:ce:37:a4:e8:ca:e0:a6:f3:55:
                    35:62:ab:1f:7a:34:44:be:c1:a0:2b:f2:dc:6e:60:
                    47:03:b5:1a:38:1e:d2:0e:e1:09:6e:6f:cb:96:6e:
                    2b:e2:ff:9f:53:8c:f6:17:30:c7:10:87:52:11:29:
                    8a:08:fe:77:60:c3:90:bd:8f:04:52:fd:83:21:5a:
                    45:23:fd:0e:d9:f4:df:43:e0:1b:1d:1c:5b:ee:be:
                    a4:1e:37:c5:ee:29:82:9d:cb:10:c9:bd:2b:0e:00:
                    a1:50:f0:88:b2:13:cd:4d:b2:bc:5b:5d:ca:25:64:
                    20:fa:31:3a:f9:e5:97:1b:59:b3:83:6e:38:bd:39:
                    d2:d5:ae:ec:23:41:03:be:63:41:a9:f3:e8:20:0b:
                    2c:ae:0f:0a:86:cc:20:e1:3c:0d:b8:65:c7:ed:6b:
                    16:64:c6:f9:78:45:b4:4a:8a:9b:4d:c2:21:38:4f:
                    42:30:bc:4d:cc:ec:ba:48:f7:99:99:db:e6:6d:62:
                    cc:f4:fb:b2:ef:8e:65:b3:02:a6:f5:3a:72:1c:85:
                    f2:62:65:9e:84:dc:da:ae:fd:c5:68:ff:ff:d1:03:
                    4d:26:db:7b:47:88:f2:df:e7:a1:c6:81:14:2a:a8:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:12:D6:0E:80:65:9D:CE:2D:E6:98:12:06:D9:87:5E:97:C2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:15:e7:5b:72:20:10:21:df:be:ae:c8:ba:51:e0:55:1e:ce:
         9b:6d:73:ad:64:b6:77:29:de:4c:ef:64:8b:fd:12:0e:33:10:
         89:95:20:3d:53:63:8e:a9:db:58:1b:9b:86:93:8b:77:93:47:
         c6:1d:84:f3:2c:5f:7f:a1:4b:1e:68:9e:7c:c0:f4:de:41:90:
         df:8e:b8:95:3e:85:d5:4f:02:50:1c:ce:4a:97:07:44:02:fd:
         48:43:77:34:f1:e9:6f:53:2c:b0:6b:4d:b3:d8:86:f7:47:7f:
         b8:6e:ae:7b:d3:5b:e1:f2:9a:b1:cd:e5:c7:5a:cb:8c:fb:ce:
         d6:0e:1a:7d:04:c8:17:64:8b:33:6e:b2:21:b1:03:07:77:bf:
         70:26:99:ab:4c:b9:8c:15:55:59:9b:8b:71:90:7f:ee:b9:aa:
         2f:ea:da:9f:bd:9c:40:e1:b6:84:07:59:4b:61:c4:8c:9a:fb:
         0f:50:a8:76:45:44:3b:14:0e:d7:64:c8:a2:23:44:31:af:c1:
         a3:96:89:9a:e3:47:e5:4a:54:fd:65:fe:40:e4:f4:fc:0e:0d:
         ce:2d:50:6d:87:fc:2e:bf:c0:6a:2d:74:80:43:d8:28:8c:d8:
         58:f6:fd:ff:ef:2d:96:c8:83:23:07:04:d3:4a:00:35:51:80:
         b3:59:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:50:30 2026 by rpki-client