Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ada635a-c15e-3d98-94c5-57b686fcf133.roa
File:                     5ada635a-c15e-3d98-94c5-57b686fcf133.roa (raw, json)
Hash identifier:          fa2tYUUZiwq4QjkgJ4T7keW+GQM8aYvq2c/deOR9o9Y=
Subject key identifier:   D5:F4:F1:ED:80:96:57:FB:5B:1E:D9:8A:0F:6C:97:D9:C3:DF:AA:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3CC11D9EF16B738A68E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ada635a-c15e-3d98-94c5-57b686fcf133.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.50.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:c1:1d:9e:f1:6b:73:8a:68:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ec96fb5d-e1e5-49af-8ac3-b8a1b181d1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:3f:55:8b:98:e0:2a:35:e9:b8:fd:85:92:
                    44:a6:d2:5f:c4:46:3d:36:aa:2e:17:ec:a5:a1:76:
                    f3:40:45:27:c3:4a:d2:09:4b:3e:d5:49:08:b1:62:
                    a9:a6:b3:63:49:9a:81:bd:c1:08:5f:3c:f5:15:83:
                    3b:e2:51:e4:24:61:85:96:68:f9:d9:d9:2e:ee:40:
                    82:56:d2:38:ed:8f:d0:7f:10:48:b0:5f:74:d3:de:
                    42:a5:34:3b:fe:24:c3:87:c8:ff:dc:5b:af:29:c1:
                    f8:59:6c:16:2d:7d:98:ce:dc:8f:f8:39:f0:d0:34:
                    33:85:8b:a2:6b:ee:56:20:02:c0:52:9a:12:f0:ce:
                    ea:9d:2c:9e:c0:91:c1:03:b5:7c:34:f8:9f:6a:a8:
                    e5:5f:a3:e6:7f:7d:d4:e3:b9:a5:99:c4:1d:43:c2:
                    93:ca:92:8e:b5:39:b4:8f:bc:2e:bb:9b:a1:cb:5d:
                    6c:7f:8c:4c:8c:e3:8c:84:9f:01:9c:45:c5:8e:d0:
                    ff:cf:a8:c2:e4:9f:2f:79:d5:e7:56:e9:21:09:30:
                    89:bc:cf:ae:06:ea:41:9e:64:5e:a7:b4:79:ee:b1:
                    77:b1:c8:8e:df:47:5b:45:27:f1:15:03:9f:9e:63:
                    b0:e7:95:88:8b:76:ed:f0:45:66:5f:7a:83:c9:93:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:F1:ED:80:96:57:FB:5B:1E:D9:8A:0F:6C:97:D9:C3:DF:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ada635a-c15e-3d98-94c5-57b686fcf133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:84:0b:13:e4:5b:01:ed:94:8b:19:80:3e:e5:79:3e:ab:
         d5:88:e4:99:e5:40:df:1e:3e:7b:57:5b:5b:1d:44:56:83:f7:
         a4:de:c3:68:02:3f:14:5a:28:c0:df:32:42:bf:d3:a5:67:c2:
         20:69:2a:6e:f3:0e:b7:c7:50:a2:7f:77:f8:bf:cb:40:d0:b0:
         9c:25:01:4f:8d:2a:e2:b1:2d:1e:72:4b:9d:64:8f:fb:a6:1a:
         a7:50:a6:a3:d6:be:36:50:cf:fd:c6:08:96:9b:5e:ad:1f:37:
         bd:86:45:cb:57:0d:c1:d0:08:fb:78:1a:0e:34:ba:b9:d2:b2:
         52:1b:bd:b7:a8:c6:e8:2e:ce:3a:ef:3a:9e:26:c6:6a:ad:ca:
         c5:3a:bd:0b:32:24:b9:e9:3b:78:8d:0e:de:d7:39:a7:08:68:
         ad:13:9c:da:0f:6e:b0:f9:31:05:08:63:c4:b0:39:2b:21:b2:
         10:cc:cb:62:ce:ff:fa:1d:0d:09:27:0c:aa:a4:f1:15:a5:0a:
         be:47:01:e6:8e:1c:91:5b:f5:95:48:a8:3b:d1:12:6e:cd:88:
         06:72:88:79:63:b8:03:8d:4c:6c:87:57:00:f8:57:0f:d7:cb:
         9e:3f:b0:86:40:03:60:ca:f3:e5:8b:5e:7e:be:9a:1c:dd:bf:
         e4:a5:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:14:23 2026 by rpki-client