Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59eb98e6-7390-3ef3-a309-b033fd35e7c3.roa
File:                     59eb98e6-7390-3ef3-a309-b033fd35e7c3.roa (raw, json)
Hash identifier:          fHmASoRergIAjUznxYGwmnVY6DqffaqHqSo0mw+KwoI=
Subject key identifier:   BA:70:43:0D:94:7D:7D:DB:9B:DD:CE:F7:13:CB:C7:80:E1:2A:02:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3CE129C3F6078EB803F8A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59eb98e6-7390-3ef3-a309-b033fd35e7c3.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.75.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:e1:29:c3:f6:07:8e:b8:03:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=38ed226c-e1f0-400b-8011-a69ef20d7f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:5c:eb:a4:7e:23:d8:1f:5b:fd:a5:e2:6f:
                    53:3a:43:54:84:f9:41:0a:2d:7e:87:b8:8a:a5:12:
                    f5:9f:bb:54:96:dd:f7:2e:1d:9a:44:a9:c8:16:24:
                    ab:aa:38:9b:15:5e:ab:89:c4:d0:92:eb:cd:19:52:
                    e8:65:d5:62:18:c0:3a:5c:b7:ea:e6:cb:2d:8f:f1:
                    1b:98:83:87:d8:ed:05:18:ad:fd:0f:69:98:5d:69:
                    56:69:d4:1e:4d:50:58:b6:ff:8d:46:11:1c:0f:48:
                    c5:e6:1a:b6:1e:b0:3a:58:af:12:f7:c7:91:26:c3:
                    84:d9:0b:3a:5c:2a:2c:2d:b9:c0:29:fe:d4:dc:7a:
                    00:a2:0d:7b:7d:53:f2:df:26:00:8b:0b:67:e7:5a:
                    ae:bc:56:73:bc:06:4e:41:66:8a:0f:c5:b7:33:d6:
                    ff:12:07:ca:28:2e:91:a8:43:87:60:0a:9e:80:6b:
                    86:a6:28:fb:95:5a:31:2b:10:b5:63:6e:fb:83:b5:
                    55:a7:a3:56:8c:05:e3:b7:7f:7d:ca:de:43:13:5a:
                    1f:1d:c8:79:51:cc:f9:d0:ee:59:12:9b:2e:4c:b6:
                    a9:e8:8d:0d:e4:b7:c3:08:33:13:bb:be:69:f3:e2:
                    dc:44:91:30:26:ff:b8:5f:b7:f3:f6:7e:e1:90:c4:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:70:43:0D:94:7D:7D:DB:9B:DD:CE:F7:13:CB:C7:80:E1:2A:02:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59eb98e6-7390-3ef3-a309-b033fd35e7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.75.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:e1:17:e8:c1:d5:3a:4e:0f:f7:10:7e:1c:bc:e6:ab:6e:
         9f:1b:75:2a:0e:55:59:6c:d6:db:0f:bc:b1:b2:fe:11:e3:70:
         9d:14:5f:59:15:3b:c2:ce:14:93:11:bb:4c:da:15:38:eb:8d:
         e5:e6:64:25:2f:d9:78:ac:95:6a:ca:51:24:ff:c1:cd:7b:dd:
         f7:1f:56:a1:fb:04:46:53:69:18:d5:7d:95:19:dd:09:f5:a6:
         2f:89:c3:e1:0e:2a:d7:26:ed:63:c9:c5:39:1a:52:34:b5:5e:
         34:3c:71:8e:bf:02:73:74:ef:1d:f1:13:d6:8a:3a:4f:02:df:
         38:ad:7c:ab:61:37:c6:b2:04:36:99:89:4b:5c:5d:ba:5d:35:
         8b:47:e7:9a:0c:b5:37:be:d9:0f:73:b2:ab:6f:78:fb:67:09:
         95:42:5d:da:4e:f2:b0:50:58:a5:87:63:ee:f0:de:af:04:19:
         9c:bd:c6:d4:87:20:4f:20:ed:d4:bf:0b:f3:80:10:61:1f:7d:
         1c:12:5c:16:e9:d2:5f:fa:b5:5d:c3:9f:2d:23:93:d2:b0:b2:
         05:b8:b1:e8:72:57:96:b7:98:09:be:e6:f6:71:05:97:6d:0d:
         55:47:1e:1e:75:56:14:8b:79:74:4f:09:8d:08:af:84:ba:b4:
         27:eb:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:06:45 2026 by rpki-client