Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bad0594-1b7c-3f10-9568-0307ed5af634.roa
File:                     5bad0594-1b7c-3f10-9568-0307ed5af634.roa (raw, json)
Hash identifier:          pCAm233vj5DcsQ0ZnSeV+Hw99nWGLItfjLnjuLB4JEM=
Subject key identifier:   6A:5B:C1:44:F8:30:FE:80:37:FF:E8:B9:C0:30:54:35:86:26:62:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F618753CA9304537E76C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bad0594-1b7c-3f10-9568-0307ed5af634.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        73.73.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:61:87:53:ca:93:04:53:7e:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=453bd387-a256-4e91-b65f-0bccf7c97877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:9d:c0:eb:25:c1:64:aa:de:32:ab:ab:3c:
                    4a:a6:2e:00:f9:b1:0b:81:08:ba:c1:ad:b7:48:7f:
                    0d:8c:4a:84:8a:24:c1:19:9b:10:1b:ec:f5:1f:f7:
                    f7:35:65:cb:89:00:2b:c8:e9:0c:a4:b8:3f:de:07:
                    a3:ec:51:b6:74:a8:5e:c8:3a:75:bd:a6:f0:52:bb:
                    80:15:df:98:e0:17:45:bf:3f:01:12:80:61:57:ac:
                    df:26:69:cf:83:53:61:6f:8a:9f:d8:52:cf:1a:eb:
                    f9:7a:d8:ab:30:74:aa:c9:77:bf:19:30:f7:49:b1:
                    da:16:00:54:70:e8:5a:12:c0:08:83:86:6b:97:c5:
                    ae:e1:a1:87:d4:95:a2:bb:f7:76:36:ef:ca:9b:dc:
                    59:1a:79:cd:f1:2b:f2:aa:9b:67:bd:a3:1f:71:11:
                    c0:b5:69:fc:26:b2:78:44:cb:22:1a:77:9c:9b:1d:
                    e3:ae:2c:ce:42:a2:93:b2:30:bf:91:c5:db:43:d8:
                    eb:c2:0e:f0:ad:36:e9:58:58:a6:68:cf:b0:1a:fc:
                    0a:53:96:6a:bd:50:ae:c9:bd:45:2e:0a:c5:a4:5b:
                    8f:c7:d7:c6:1c:c8:ed:00:83:21:c8:62:18:81:fc:
                    dc:37:94:40:4d:48:d1:b0:1d:7e:79:58:e5:3f:45:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:C1:44:F8:30:FE:80:37:FF:E8:B9:C0:30:54:35:86:26:62:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bad0594-1b7c-3f10-9568-0307ed5af634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:fc:ad:b1:29:78:8b:b4:83:b3:df:5d:93:15:dd:52:63:6e:
         f3:64:7a:d8:9f:d4:6b:b2:c2:d4:5c:a8:5a:c3:aa:b7:96:a7:
         68:25:f6:4a:8f:b1:92:e9:3f:37:ef:1b:66:d6:2c:fa:2c:00:
         6e:53:06:0e:9f:91:dd:6d:d6:bc:1c:be:9e:49:71:2b:a1:b2:
         c0:92:9d:e5:a8:2d:7e:85:00:17:40:c0:65:8c:11:41:af:a3:
         51:8f:e9:65:a4:c1:cf:d5:14:bb:df:23:c1:e5:fc:c1:44:75:
         68:33:d2:66:e1:47:57:5d:e0:38:8e:06:89:b5:7c:5c:00:d2:
         5d:18:af:93:b9:76:27:ea:a8:12:42:4a:c9:1e:dc:5f:a5:e2:
         b8:b5:f4:a9:3a:90:82:46:9d:ac:2b:7a:6d:5d:6d:31:a6:7f:
         ba:58:12:54:9a:a5:20:b2:60:a4:53:dc:bb:30:93:c1:a0:54:
         e8:45:c1:00:51:3a:9c:8a:56:ed:d9:94:4d:ce:d3:13:23:35:
         c0:8f:60:d7:55:cf:32:f4:71:b8:03:6a:c8:f8:a8:7a:9f:33:
         ae:ec:ce:e9:58:e8:9a:79:b4:d4:cd:bc:aa:67:49:a9:ba:a8:
         55:66:f0:31:4e:85:66:37:dd:0e:48:5e:24:cf:9a:a9:61:d1:
         9a:39:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:25:57 2026 by rpki-client