Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70799543-07b3-369e-8b1b-4b48b4fb7294.roa
File:                     70799543-07b3-369e-8b1b-4b48b4fb7294.roa (raw, json)
Hash identifier:          xVBeGoxk0fKLpmWZX74/g+iVCqzq00P0hq4qC/Cm4eQ=
Subject key identifier:   7C:EF:C3:00:E7:C6:08:0F:0E:5D:65:5A:5B:97:D7:13:D6:EC:68:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DF78C8CA2FB4CD750B0F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70799543-07b3-369e-8b1b-4b48b4fb7294.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        73.74.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:f7:8c:8c:a2:fb:4c:d7:50:b0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3166ec6d-deee-4859-8d12-fe3495044d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:36:fd:06:e9:a7:1d:a5:97:b4:af:c5:8d:1c:
                    c2:ac:5a:b1:62:70:b7:c9:90:76:91:01:4a:62:82:
                    b8:e3:b9:84:dc:5c:b2:51:e3:76:ae:f8:79:99:f6:
                    26:ca:cb:7a:bd:82:9c:45:07:2e:e0:6c:ba:05:6f:
                    90:40:51:2f:34:7c:99:c3:87:e3:10:d1:76:6c:61:
                    d6:c0:4c:a0:91:9c:20:2b:ed:59:ef:e9:28:ee:a3:
                    c4:7c:1e:10:17:76:d2:dc:00:0b:4d:52:7e:0f:dc:
                    86:75:5e:88:0d:c6:46:77:fc:a1:ef:62:cc:e7:a6:
                    26:eb:ab:92:c8:a6:b9:f5:bc:50:c5:39:18:c0:cd:
                    38:fe:1e:05:78:64:3a:36:c4:b7:4b:79:d2:3c:c0:
                    9a:e8:54:70:83:bd:ad:2a:58:41:1f:53:94:7e:37:
                    2a:aa:35:9e:f4:ac:72:a1:b5:74:60:b3:d1:ca:a9:
                    5a:ab:ed:8c:9b:55:82:80:a6:d4:2c:96:a4:ce:b8:
                    44:3f:0b:60:65:03:06:76:59:cf:f1:a0:9d:a8:11:
                    57:1f:02:f4:fd:b3:d7:03:25:c4:b7:b4:f4:ea:f3:
                    32:31:94:1e:d6:25:d4:91:f0:fa:92:06:c2:b4:15:
                    17:cb:e4:ae:39:11:9e:c4:6e:08:05:b3:a9:7d:7d:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EF:C3:00:E7:C6:08:0F:0E:5D:65:5A:5B:97:D7:13:D6:EC:68:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70799543-07b3-369e-8b1b-4b48b4fb7294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:66:80:52:7f:9d:c3:ca:22:4d:b9:63:51:0f:03:17:d2:
         73:5d:f8:91:0f:31:90:d3:2a:bb:60:52:a9:27:e2:7f:fb:30:
         86:bb:10:35:92:23:b7:eb:3e:4a:8e:d2:be:f8:53:fa:77:ee:
         9d:de:01:3f:5b:8e:15:35:7b:33:88:ad:6e:11:4b:f2:75:91:
         32:41:33:68:16:a9:ad:39:3c:72:d4:18:e0:b0:d6:90:53:33:
         10:1d:ac:32:8b:39:17:31:48:9c:1d:cd:db:cf:75:8e:22:b4:
         95:be:8e:48:b8:48:45:b4:ed:f1:79:ab:ef:b9:49:20:6b:7b:
         0a:3e:e9:1c:95:fa:10:6d:fd:43:c5:33:cf:d4:d3:bb:d4:0d:
         e5:7e:fd:63:29:43:ab:5e:22:24:11:53:41:8b:72:fe:7d:f1:
         bf:03:b1:d3:77:97:ff:13:a4:b9:42:21:32:ee:8a:12:c7:89:
         68:35:a2:d5:9c:e8:f8:01:0e:cf:0a:0a:b5:ea:00:62:fb:0f:
         77:b0:ae:05:c6:29:d1:12:86:9f:62:9e:ca:66:a9:e3:d3:76:
         6d:6f:ef:5b:02:f7:f2:90:97:3d:a3:5d:bd:c6:73:c2:c6:1a:
         ad:a6:97:93:6b:2e:8f:94:f2:a2:8b:bc:d0:a2:bc:7a:ef:1a:
         fe:0a:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:09:43 2026 by rpki-client