Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa
File:                     5bfdf508-12ab-31cc-ac79-d842542ccf88.roa (raw, json)
Hash identifier:          k7JU8IcwRaixYgIaNNeOCMNUKQsCXChptqUbmEqiSX0=
Subject key identifier:   A0:6C:B6:73:8D:03:57:E8:BB:91:2E:DC:BB:83:23:DA:8C:2B:BF:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E9FDA779080ABE8E9DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.155.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:9f:da:77:90:80:ab:e8:e9:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=0ff48032-fdf3-42e7-ab54-f0c514d48c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bb:d8:74:29:76:a0:6b:7a:56:a3:30:65:0d:
                    32:24:58:bd:e7:f7:3b:15:9c:97:1e:ad:bf:4a:cb:
                    90:c5:86:df:33:2a:63:ae:5d:12:0c:98:2a:7f:d3:
                    54:88:32:18:61:66:3f:40:ef:9d:03:92:c6:09:65:
                    31:5d:a5:2a:d3:ac:3a:44:73:5e:63:66:10:9c:06:
                    d3:c5:5d:56:4e:6b:3e:d7:c6:85:0d:68:95:69:90:
                    c1:7c:19:7d:e4:61:ff:ec:17:dd:38:ea:87:9f:1e:
                    33:fe:5a:5d:ba:8e:f5:3e:47:04:8c:81:0d:8d:49:
                    48:67:8b:c7:38:1d:39:63:00:39:1e:f9:65:da:a7:
                    b6:59:79:e7:e8:ea:dd:d6:d9:ab:4d:f1:06:88:09:
                    bb:1f:a6:a8:e6:28:9e:11:09:dc:f3:37:4c:10:52:
                    89:9e:e3:9c:50:dd:70:60:0a:23:15:ec:fb:7a:9f:
                    ef:22:3d:7c:ba:c3:cf:26:17:1f:24:aa:d1:97:b3:
                    cb:f6:1c:20:ce:e8:96:03:67:9b:b5:a8:ae:f1:07:
                    3b:dd:88:df:29:7d:30:94:63:16:c9:38:e5:e8:13:
                    5f:37:89:ed:08:df:d3:e0:dc:d8:fe:15:b0:ab:1f:
                    24:1d:9f:77:4c:58:fc:bf:87:a2:4d:11:8a:d5:20:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:B6:73:8D:03:57:E8:BB:91:2E:DC:BB:83:23:DA:8C:2B:BF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:6d:18:99:74:88:fc:f9:2a:e7:5d:77:29:00:e8:35:c9:
         07:b8:7f:5e:0f:a6:01:b3:65:af:04:fa:42:1e:eb:09:12:47:
         a8:94:ea:62:36:d0:5d:d5:7e:69:13:98:ad:f0:09:95:0b:01:
         fe:6f:ed:ef:b7:ca:9d:1a:41:70:d8:25:d9:82:0a:94:bf:6d:
         41:c6:36:3c:12:f5:25:f5:6e:de:5f:5c:08:8c:11:32:30:d9:
         2f:4c:a6:b0:d4:4f:b4:4c:1d:2a:f0:df:6a:e1:ca:53:9f:ae:
         c4:3e:31:c8:d9:8a:bb:e7:38:c4:2c:bb:53:80:ab:09:7a:82:
         8c:64:dd:d6:ee:9f:fe:ac:ff:4c:17:6b:d4:aa:68:12:2f:15:
         02:f6:78:24:73:3f:99:cf:99:30:05:98:20:68:4f:83:5b:59:
         20:10:06:6a:4e:ed:b7:4d:15:d2:7b:4a:15:23:89:26:17:52:
         3b:d0:9c:97:97:4b:02:a0:ad:4d:bd:b0:0d:15:73:d8:bd:c9:
         51:b9:c3:59:82:ea:86:c4:0f:f0:0c:ce:ea:b7:59:fe:53:a8:
         15:41:fa:17:44:95:d8:79:96:eb:b7:c9:92:98:1e:da:46:87:
         e3:ee:2c:52:b8:de:6b:16:32:4e:03:cc:62:83:23:75:5f:51:
         70:ae:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:27:48 2026 by rpki-client