Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753f5c09-7a21-3a2d-82d4-e12023c66e09.roa
File:                     753f5c09-7a21-3a2d-82d4-e12023c66e09.roa (raw, json)
Hash identifier:          U+9j2Dy3MKUt670q6tFr5PC4d6eWzQBhL0BMyAzHkxo=
Subject key identifier:   84:97:6F:12:74:D1:06:3C:62:59:62:D6:90:89:01:91:0F:0C:24:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF42EC742B556EF7580DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753f5c09-7a21-3a2d-82d4-e12023c66e09.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        73.37.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:42:ec:74:2b:55:6e:f7:58:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=632fd6bb-8f3d-4ee7-9e94-be6d1d04bd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d8:5f:4f:39:3f:2c:e2:ca:13:64:81:29:9a:
                    f1:8e:ca:31:a7:b9:ec:67:b3:66:e6:28:dc:d7:b8:
                    59:63:f9:09:29:64:68:34:b5:16:4c:7f:d8:cf:50:
                    af:89:85:a2:16:20:9e:dc:10:5c:27:d6:7c:dc:8b:
                    e5:6f:30:95:98:dd:10:ee:95:0a:00:6e:8b:cd:eb:
                    5f:2c:ed:f0:f6:75:f8:6a:ed:00:87:f8:a6:46:92:
                    8c:97:c6:51:76:20:6e:18:25:b2:bc:6d:91:e6:7d:
                    8b:d7:0f:24:a3:e7:46:9e:9d:1d:85:9a:88:07:16:
                    06:31:83:ad:fd:ef:05:90:31:74:52:69:84:df:6a:
                    88:59:b1:41:6a:d4:22:f5:2c:07:2a:ef:98:c7:93:
                    96:8d:db:24:09:14:32:12:4e:23:c3:3a:81:50:ed:
                    77:19:5e:02:2d:87:3b:47:59:ee:40:b5:a4:10:50:
                    6c:ad:d6:6e:a8:c9:ec:b5:ec:75:8d:7f:25:16:ff:
                    39:ea:bd:b9:a3:9c:c0:e4:cf:a6:f5:27:24:9d:80:
                    8e:3c:b9:bf:07:d1:d2:b3:48:b6:14:b1:f8:9b:3c:
                    ed:b4:4f:d2:3f:a2:7b:e2:b9:34:3a:62:a4:25:c4:
                    2d:15:ae:b4:2b:b6:86:1d:7e:c8:95:9b:6b:70:f7:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:97:6F:12:74:D1:06:3C:62:59:62:D6:90:89:01:91:0F:0C:24:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/753f5c09-7a21-3a2d-82d4-e12023c66e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:96:f0:8d:56:e9:94:df:d5:a9:23:ae:d1:87:8c:ae:78:
         f8:72:d8:83:71:98:87:a7:93:f3:1b:84:51:ee:53:f4:d4:16:
         cc:1a:dc:4a:ba:62:29:1b:7f:aa:73:24:a9:c2:32:3f:18:86:
         fa:02:30:4b:c1:b7:cd:dd:c7:a4:96:79:82:d4:a6:d5:40:42:
         81:01:0f:df:3d:5f:70:01:b0:20:a3:49:d6:9a:bb:ae:4a:61:
         08:db:b3:10:2b:c2:82:5f:61:db:75:4c:35:57:4c:37:c1:8e:
         4b:a8:80:f9:aa:56:ad:b9:e0:e6:2d:9b:11:69:1c:86:28:d9:
         de:4a:a3:6d:81:47:91:81:3d:e2:31:c1:65:78:8b:80:24:5d:
         c2:6b:53:16:ae:2c:77:4e:55:ff:eb:41:b7:c8:31:44:83:a6:
         24:a9:2e:f0:00:a0:2f:da:66:23:3c:d4:ce:a6:4a:63:15:0b:
         7a:73:de:93:29:54:a9:ba:ee:8b:cd:0c:fd:56:b4:98:c3:e2:
         7f:6d:7e:94:02:21:84:35:b9:83:0e:85:de:8c:bd:ec:6b:da:
         10:e1:2d:07:f2:59:01:62:ad:f9:29:07:c7:76:23:ff:6a:1c:
         7b:1e:f6:96:41:74:17:62:74:d7:1f:eb:ab:3e:ad:a1:e6:40:
         08:ec:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:17:59 2026 by rpki-client