Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa
File:                     6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa (raw, json)
Hash identifier:          aisxO/r96XTW9h7NHbK0I8bPP7l86SOj5EXyxxKEYU4=
Subject key identifier:   98:26:54:5F:E3:69:15:7E:C6:7F:49:7C:0C:5E:B7:85:01:E1:38:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C452086024EB718EF7E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.111.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:45:20:86:02:4e:b7:18:ef:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7f567a59-78bb-439f-aac6-c8a92932c75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d9:52:7c:02:28:b3:84:b2:23:b6:e9:7f:51:
                    0a:30:8c:76:d7:c7:dc:51:bb:b7:9b:b4:7a:d6:7d:
                    f8:8f:40:94:d8:73:27:20:e6:53:2d:5c:3f:61:5c:
                    e7:05:be:16:e1:bc:0d:c0:f9:72:f4:02:a2:0d:1d:
                    63:e9:7c:bc:19:ca:b8:c3:27:76:29:04:bd:ce:6c:
                    7e:eb:45:b4:20:51:f8:42:1a:27:18:36:a1:f9:d6:
                    23:52:f5:27:5e:73:e8:ed:3f:02:6e:2e:a2:85:5b:
                    42:10:fd:01:23:52:5f:30:00:7d:33:4c:94:86:3e:
                    e4:71:53:4e:f0:56:09:34:76:ed:8b:e5:f2:9f:8b:
                    b7:15:0f:4a:ba:65:d1:cb:8f:96:98:ba:aa:ef:68:
                    af:86:5c:1e:90:7b:42:47:d1:82:dc:c7:f7:d3:51:
                    4f:9f:02:61:78:74:ec:e0:06:87:12:c6:6c:6e:5c:
                    6a:64:57:d2:98:53:98:70:21:29:e6:52:fb:c1:9e:
                    03:2a:ab:e9:bd:15:c8:90:0b:21:26:3d:24:2a:ea:
                    6d:6c:1f:66:f9:11:35:61:ec:e3:e9:39:06:47:cd:
                    4a:8a:b6:c0:16:06:fb:8b:52:a7:26:6e:aa:52:23:
                    1f:99:fb:21:dc:d7:cc:66:eb:e8:dd:90:93:1b:de:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:54:5F:E3:69:15:7E:C6:7F:49:7C:0C:5E:B7:85:01:E1:38:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:52:f8:9a:23:4a:64:d0:5c:b8:b1:d4:9a:24:00:0a:0a:
         a4:c9:18:d2:67:f0:77:df:81:58:dc:0b:d3:67:63:b3:f9:86:
         04:c7:3c:c4:13:83:91:b7:bb:93:46:73:ee:c6:58:c9:8a:67:
         07:e1:fc:04:9e:12:75:11:2b:2b:04:11:b4:16:82:32:aa:32:
         a0:01:4e:40:2b:8a:40:39:4b:eb:ad:ca:93:fc:d0:ba:25:d7:
         a8:15:3c:9a:75:a0:62:6c:b9:92:5b:e1:fa:93:6d:08:70:04:
         d0:e7:28:6d:ed:c4:de:0b:fc:29:2b:15:5c:07:99:a6:ac:d4:
         26:c8:88:a4:f3:86:10:fc:5a:ba:ff:6c:63:dd:14:17:e3:8b:
         b2:52:12:95:c6:a1:00:f0:1d:e2:59:49:53:6f:a5:18:aa:80:
         60:7c:28:16:d1:c1:f6:5b:7f:68:a4:8e:82:6c:85:c4:41:a6:
         dc:19:60:ff:35:9e:49:b6:ba:96:77:e7:33:3c:d7:87:ab:66:
         77:41:76:8e:a4:b8:4c:73:b5:66:ad:60:ca:64:85:03:ca:e8:
         af:d2:e4:07:d0:06:b5:36:c1:48:ff:f6:8f:f7:32:d1:bc:51:
         37:1e:26:dd:42:12:0c:48:0d:0c:7e:4f:0d:25:52:4a:c8:36:
         79:1a:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:09:21 2026 by rpki-client