Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ae2ca0e-6dd7-3d55-9cf9-cce0384f0c00.roa
File:                     6ae2ca0e-6dd7-3d55-9cf9-cce0384f0c00.roa (raw, json)
Hash identifier:          wFGdfnn4cUJOpONiOAW4N5H3M/UD9ziIynL5u6rgjBc=
Subject key identifier:   20:9B:2D:E6:F0:89:44:2C:53:33:0D:5F:E1:27:BC:3F:78:5D:47:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3CB90CC25ECD009A7A6680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ae2ca0e-6dd7-3d55-9cf9-cce0384f0c00.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.50.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:b9:0c:c2:5e:cd:00:9a:7a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=9ac73ce1-61b6-4e3e-a05e-1b31118f4d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:bd:5e:69:79:39:88:ec:2c:d0:7d:5f:7d:
                    ed:eb:a7:a4:19:8e:1a:7d:f2:73:e4:ec:95:62:bd:
                    5c:6f:2a:3b:da:4c:ab:f7:43:d9:61:6a:23:c4:c1:
                    cd:85:f8:9e:f7:e1:83:08:b4:75:36:a9:6b:ca:ed:
                    b5:95:99:2d:6f:48:80:2d:df:fb:49:aa:70:1f:99:
                    64:82:d6:2d:91:44:29:c5:a6:ed:36:a6:21:b7:08:
                    7d:50:29:fc:00:f3:d7:71:d4:4f:96:c0:a4:81:96:
                    d9:ae:b8:b9:e3:3a:05:22:37:89:6e:9a:30:98:f1:
                    52:50:af:a6:b9:52:0a:a6:1d:2c:df:90:bf:5f:ba:
                    b7:0d:dd:4a:c2:da:5d:11:2d:51:07:93:9f:1e:a7:
                    30:d3:22:3b:dc:6b:38:4c:97:9f:a4:e6:04:24:0f:
                    48:10:de:12:af:9d:f4:c6:e5:59:0b:ff:2c:d6:33:
                    e6:3a:2d:a6:c6:a8:83:9f:95:28:43:78:a7:b4:4f:
                    45:3d:c7:e8:4d:80:0b:3b:80:89:e8:b7:92:ce:f9:
                    5f:50:84:8f:f6:f0:87:64:80:67:5a:bc:55:9b:99:
                    ab:22:b6:fa:57:fb:95:ae:03:08:0b:4e:e7:1d:e9:
                    b8:2c:53:39:af:42:27:fd:27:9b:96:55:3e:6c:02:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9B:2D:E6:F0:89:44:2C:53:33:0D:5F:E1:27:BC:3F:78:5D:47:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ae2ca0e-6dd7-3d55-9cf9-cce0384f0c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:61:04:cc:63:4c:6e:a8:db:4a:36:53:d0:ff:8b:67:b2:
         59:fa:b4:9f:97:6b:21:f6:6b:09:a3:d3:1d:f0:3c:ab:72:21:
         48:73:c6:5d:20:34:08:7c:25:76:2b:c2:d2:1c:24:da:e8:ad:
         5e:42:40:2c:4a:21:fd:84:1c:6f:83:b2:31:49:a4:17:90:32:
         b3:6a:7b:b6:65:0b:a5:1b:98:14:b4:e7:7a:fe:2b:9d:99:e0:
         bd:4a:85:15:6c:eb:44:c7:ee:05:d1:10:f5:fd:cb:e0:a9:08:
         7e:ce:ab:68:54:14:75:09:fa:18:1d:2b:ee:e2:69:12:64:00:
         9f:f4:36:79:fc:c9:4b:99:0d:c2:e3:85:3c:98:ae:ca:ba:cb:
         de:65:b3:09:22:94:e8:68:ae:07:46:58:77:96:a1:de:01:90:
         27:c0:a9:13:da:ec:10:0e:14:29:9f:cb:59:f6:c7:9b:96:53:
         ff:73:64:a8:04:3b:69:20:94:11:10:3d:4c:50:00:cb:25:e7:
         22:54:6c:16:4d:a6:89:6b:6e:07:5d:de:84:11:20:4d:8d:af:
         4d:00:64:ac:fc:f2:c9:a1:c9:14:a9:12:13:79:31:77:97:a3:
         3e:5d:20:68:93:ba:06:eb:d4:52:07:c8:14:24:c7:7d:e5:b0:
         c1:57:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:08:12 2026 by rpki-client