Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53811d08-a44a-35bb-96bb-dad9482fe5c1.roa
File:                     53811d08-a44a-35bb-96bb-dad9482fe5c1.roa (raw, json)
Hash identifier:          5a+6v8oMj50paU3V7KCLpXoRXsn2eJDMmxHOc5njfHo=
Subject key identifier:   42:59:33:73:CB:CD:A2:1B:C6:1D:13:4C:66:A1:9E:64:1C:72:65:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED4323E4FD0BBEEE1219FA1E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53811d08-a44a-35bb-96bb-dad9482fe5c1.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        73.5.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:3e:4f:d0:bb:ee:e1:21:9f:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=4032cb1e-f086-4769-a28c-076e64606eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:9a:1c:57:8a:86:ef:7a:cf:57:58:0b:0a:
                    7b:9c:71:79:88:27:d3:ce:17:b3:f5:96:7e:d4:ab:
                    6c:d1:6e:26:37:9e:3a:9b:15:4a:e6:55:54:c6:2f:
                    b8:7d:d3:75:f4:f0:f0:83:d0:4a:e8:20:ed:5d:4a:
                    a5:9b:6e:56:04:00:95:25:5e:f7:10:7c:99:7c:43:
                    1a:c5:c1:63:64:93:b5:22:6c:b3:e5:c6:1e:5c:3c:
                    82:8d:6a:f4:c5:b3:41:a1:2f:16:a5:74:ea:96:33:
                    97:35:9e:06:ca:76:24:21:45:0c:93:8c:f7:ef:c2:
                    0d:65:6a:cf:14:9b:ca:72:e8:d0:a6:d6:e9:b9:74:
                    e0:4c:90:7e:14:91:70:e0:76:49:fb:22:0e:df:db:
                    99:70:a5:72:2a:2d:50:88:9b:9a:2f:0a:21:91:bb:
                    13:12:89:b6:7f:b3:5b:8d:97:14:5a:3f:7f:18:01:
                    e0:19:6d:ed:d6:c5:d4:03:bf:c4:1c:c3:36:7a:fe:
                    9e:91:35:fc:96:11:15:11:47:50:07:5b:7c:c6:76:
                    79:a4:b7:ae:3f:eb:2c:d7:f7:2c:2b:89:fe:da:ea:
                    27:f2:96:87:46:b8:97:b6:db:be:cf:c9:fb:5d:aa:
                    db:df:ac:7e:83:ec:66:a8:24:6b:71:11:d4:0f:c7:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:33:73:CB:CD:A2:1B:C6:1D:13:4C:66:A1:9E:64:1C:72:65:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53811d08-a44a-35bb-96bb-dad9482fe5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.5.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:74:c2:83:65:46:f7:c2:08:00:80:2d:8f:27:07:da:6e:
         63:5b:9b:47:c4:7f:93:cd:81:4b:29:c0:20:e0:50:e7:0d:57:
         df:99:2a:d5:4a:ef:ce:eb:7d:b5:7a:08:1f:8f:13:67:c4:db:
         71:5c:1f:e5:cc:95:11:39:57:46:81:fb:d3:7f:35:db:07:80:
         c0:e1:5b:74:3c:0c:fc:fb:4c:a0:42:e2:fe:01:4f:53:9d:19:
         04:d1:96:6c:1d:2f:71:cf:f3:fd:ce:6e:91:4b:f7:40:c7:45:
         a5:c6:d9:9b:25:f8:d5:2a:6b:cd:79:02:d5:6c:f6:20:9f:2f:
         09:4b:16:ab:8f:e6:92:bb:29:ff:40:4c:8b:ef:1e:c3:95:8f:
         c1:8c:b8:26:a8:97:b5:82:e6:9f:cf:f4:28:37:3c:23:7e:ff:
         bf:ee:0e:75:64:59:02:e3:b3:7b:7c:3b:e0:f4:b8:5b:19:bb:
         52:dd:b1:21:74:b9:2a:b4:a7:e2:15:79:ee:59:ce:c8:9a:11:
         1e:dd:43:95:45:6e:0b:fd:bc:2a:89:18:e7:42:e3:98:17:f7:
         ee:d4:ea:67:3e:cb:95:7f:98:12:68:3c:84:80:ab:f0:28:ff:
         66:da:5b:67:27:25:6d:a8:4e:05:da:24:0c:62:f6:5e:46:8a:
         52:97:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:56:43 2026 by rpki-client