Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b6a1b15-97d7-3ce9-a717-ff2b0fc93a63.roa
File:                     4b6a1b15-97d7-3ce9-a717-ff2b0fc93a63.roa (raw, json)
Hash identifier:          6ubztv0nzg6/bW+Rlx3cpXJplDDNyrm/Ar8UpbEvQgs=
Subject key identifier:   0D:D5:77:64:1F:D1:3C:15:3E:97:54:F5:6D:09:82:1B:58:61:FA:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F4CD3C49A9494DDDC2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b6a1b15-97d7-3ce9-a717-ff2b0fc93a63.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        73.44.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:4c:d3:c4:9a:94:94:dd:dc:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=a10ab887-9e9f-4918-8ae3-c4ac02a2e0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:5a:f1:eb:1f:e9:5f:0b:fe:2b:ea:f8:42:
                    85:38:87:64:e0:ce:78:23:1f:73:a8:79:ff:77:64:
                    8c:32:ba:23:3f:d1:29:e4:8c:4d:ff:df:09:89:1b:
                    31:e6:2c:c8:f7:00:00:04:d8:f2:67:d4:87:10:3e:
                    3e:0b:fc:24:be:fc:0b:70:cb:bf:c2:98:3e:ff:bb:
                    e6:92:5d:0a:e2:28:40:db:84:74:6f:eb:ec:8f:22:
                    f3:23:98:13:90:7a:87:e6:07:28:b0:26:cb:8e:59:
                    e7:3a:e2:50:23:3e:b8:30:32:fb:8e:05:58:39:f2:
                    41:48:d4:d3:b1:50:dc:e8:89:38:22:05:1f:81:57:
                    a5:84:10:24:a7:fd:00:4c:50:5b:2e:e3:e2:37:11:
                    68:18:9f:23:19:90:4e:7d:38:e9:a2:a0:45:1c:3d:
                    2c:51:6e:b0:bd:e5:78:33:76:aa:5e:96:ae:58:3d:
                    9f:c5:ac:ea:11:fe:f1:c3:3c:61:00:74:67:f0:eb:
                    b3:da:f5:74:01:32:f0:72:dd:0c:ec:b1:63:8d:9d:
                    1b:6f:b4:78:ad:6b:e9:eb:87:c4:cf:18:7c:0e:d3:
                    e9:be:60:96:46:e2:5e:7d:9a:5a:de:80:07:1c:1d:
                    6a:1a:48:56:b0:d3:69:9b:ea:a6:7e:24:b6:4f:ab:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:77:64:1F:D1:3C:15:3E:97:54:F5:6D:09:82:1B:58:61:FA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b6a1b15-97d7-3ce9-a717-ff2b0fc93a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.44.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:5c:fd:fb:cb:30:49:6b:45:da:ab:86:f2:ec:05:36:9e:
         f5:a1:ed:f5:2f:db:9a:03:1a:e9:47:09:13:f3:62:1f:f5:77:
         09:38:a5:a2:e5:ff:8e:5c:80:2d:74:96:7f:7e:40:0c:25:ca:
         8b:02:9e:b5:2e:b8:bf:6a:9f:55:17:91:13:4e:bf:3e:35:ab:
         47:34:4f:a2:04:db:96:0e:a5:78:62:10:16:21:a8:34:1b:dd:
         97:1e:2f:26:cc:c7:cb:7e:ba:21:ad:6e:13:25:56:81:16:46:
         55:c3:ae:7f:90:8c:99:62:ca:3e:ba:51:45:e6:0f:48:7f:a9:
         3f:4f:58:ce:70:48:8b:f0:25:44:23:66:d9:d1:a4:ca:36:82:
         b4:da:7a:fd:fb:c9:87:b1:ef:e4:a8:4e:68:97:2e:2c:33:4f:
         af:82:4e:79:1c:00:b4:53:27:60:94:53:13:8e:7b:e5:22:12:
         d7:0b:6a:35:84:ee:64:0f:cd:2d:2f:c1:f4:44:57:67:b3:58:
         e1:fe:6e:f9:cf:47:fc:c1:91:7c:95:90:53:05:23:46:95:6b:
         fc:00:02:ef:62:0e:9e:12:40:f6:37:ea:d9:f9:51:1e:06:cb:
         6f:06:51:41:67:dc:8b:cd:75:51:41:79:2d:3e:4d:73:fc:99:
         d8:18:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:03:25 2026 by rpki-client