Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d28be84-166d-3edd-9bf8-1e7bd20f8220.roa
File:                     5d28be84-166d-3edd-9bf8-1e7bd20f8220.roa (raw, json)
Hash identifier:          mlGzQLihnrgQFIQNlcqQt5Ho8CKYfO62ZbD5lWmq9fk=
Subject key identifier:   42:E8:7B:9D:71:E9:F1:8B:C0:EA:E3:7B:28:FF:A5:1F:61:79:2E:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFF7BC4D15137EEB377280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d28be84-166d-3edd-9bf8-1e7bd20f8220.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        73.161.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:f7:bc:4d:15:13:7e:eb:37:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1d25461a-f73a-45f5-807e-4a016df1f586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:64:bd:8d:fa:9b:ff:94:69:e6:09:57:79:
                    a5:98:6f:aa:fa:f1:fb:3a:0c:03:37:e9:98:32:db:
                    e0:1a:a4:c0:c9:a4:5d:67:68:80:78:8c:3b:f4:12:
                    b8:e8:b7:92:e6:87:3b:34:a4:b7:f6:11:e9:eb:37:
                    81:bb:8d:5f:f4:34:28:7b:6b:93:67:d0:0d:0e:0e:
                    80:24:cd:9b:c3:0e:2e:08:86:69:06:0e:45:34:99:
                    f5:00:43:a0:ec:0b:79:5a:26:bc:cf:2c:93:90:2b:
                    43:f8:e6:37:a3:7c:60:45:25:ad:cc:9c:68:db:11:
                    bd:b8:40:7f:96:2e:46:80:a7:a7:d6:26:ea:ff:8f:
                    73:6a:3d:65:9b:3e:ee:33:5f:85:bb:2f:61:ca:38:
                    53:0e:32:46:1f:9e:e2:0b:d7:0a:e2:30:54:02:0c:
                    89:dc:b4:d9:94:32:9e:50:f1:9e:cc:04:ee:f0:b5:
                    5d:42:02:20:80:1a:67:29:d5:95:d2:0c:8c:a6:50:
                    ca:cb:50:3b:7c:05:5e:1e:db:2c:41:57:df:20:91:
                    9d:0a:07:dc:35:dc:69:44:1b:6e:e9:52:fd:67:46:
                    cf:87:cc:5a:93:64:6a:db:eb:cd:fe:a2:92:14:dc:
                    ef:93:29:2b:f3:c5:33:49:7a:27:a9:6c:ce:a1:77:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E8:7B:9D:71:E9:F1:8B:C0:EA:E3:7B:28:FF:A5:1F:61:79:2E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d28be84-166d-3edd-9bf8-1e7bd20f8220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:e5:93:23:87:10:da:e8:dc:b7:7f:af:d0:83:9d:22:2e:
         f3:0b:60:dd:f1:6e:1b:08:a2:3e:a9:8c:ed:46:fb:d2:6d:ae:
         25:3b:d5:e5:89:8c:3d:ea:dc:8a:52:cd:67:51:88:15:ab:e2:
         d2:b0:41:28:25:1c:68:c9:e1:d1:49:89:7e:e5:5d:77:f5:06:
         19:63:03:af:0e:0d:65:d2:87:96:65:44:24:4a:ec:35:4e:f3:
         64:c5:6c:65:78:54:16:9b:c8:34:13:c7:2a:cc:da:4f:e7:09:
         34:3b:26:04:ec:3a:89:ed:bd:1c:db:8c:ff:28:00:61:92:5b:
         04:81:95:26:3c:1c:98:35:f6:7f:07:5b:96:08:8a:83:41:b9:
         02:b8:e0:fd:66:24:6d:29:06:1b:44:b7:fe:af:b7:fd:79:0f:
         31:3f:75:b2:8b:18:b0:1f:bf:c1:89:e4:a7:85:27:bd:89:a2:
         c1:03:18:bd:ff:f3:52:57:6c:dd:d9:e3:ea:7d:64:90:a4:6f:
         86:90:44:23:f9:43:52:b0:10:0c:71:af:64:64:fe:08:ed:7d:
         78:6a:a9:05:b4:c7:bc:d0:5b:ec:4b:79:7e:45:c2:67:f0:3f:
         92:35:c0:4c:9a:e3:d9:c0:08:cf:16:51:d4:f3:b2:61:f0:2e:
         98:77:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:26:29 2026 by rpki-client