Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa
File:                     84000f4f-3f67-3970-9fc4-4107d8e21820.roa (raw, json)
Hash identifier:          cQGW7IHcSOtrMyb+JKXFYr5H7dZ/d1etjyW5deTpqp8=
Subject key identifier:   26:C1:95:7B:63:28:F9:07:E9:2C:39:34:CC:74:39:EB:06:83:61:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EEDD91DE79B38EF346B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        73.164.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:ed:d9:1d:e7:9b:38:ef:34:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b8acf5a7-327a-4dc4-af25-ea6d8c3c9907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:34:f1:51:7d:d8:42:a0:81:98:3d:57:d7:
                    ea:6b:09:9d:16:f5:d1:5c:67:ef:da:86:d1:f7:47:
                    df:66:94:9c:90:fa:ef:20:b3:15:b4:f6:92:d9:e9:
                    3a:26:31:6c:c9:36:d7:f9:db:ba:a7:e7:09:27:47:
                    f6:17:4e:8a:70:1a:b7:51:ec:55:f2:7c:56:97:88:
                    c9:f3:dd:bc:b1:ed:de:44:ec:00:99:ea:c4:ba:65:
                    6c:8d:8f:fb:7e:bb:b5:b4:fa:61:4d:63:9d:05:04:
                    47:51:ba:f2:e7:ae:b2:95:f6:d3:fb:e0:03:c6:a4:
                    e0:4a:e0:a1:1b:d3:94:46:66:95:52:8a:d6:94:d6:
                    28:6d:08:e3:2f:40:d5:6c:bd:dd:15:76:14:c9:2e:
                    88:fd:a9:09:47:d3:5e:2e:8a:3f:c6:a8:d9:dc:95:
                    f8:f1:ef:b1:e3:fd:77:52:c2:e3:d5:5f:ad:38:20:
                    e2:82:0b:76:0d:a0:19:0b:a6:31:84:35:0d:a2:30:
                    bb:c5:08:ba:0b:00:83:7f:55:64:6a:0a:95:b4:68:
                    8f:39:18:e1:08:5b:95:7a:87:5c:77:55:68:31:8e:
                    3d:ad:8c:99:72:e9:be:7a:ba:2c:23:44:b5:79:f8:
                    12:4d:49:4a:2e:aa:71:65:a4:41:76:28:38:4e:83:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:95:7B:63:28:F9:07:E9:2C:39:34:CC:74:39:EB:06:83:61:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:78:25:d7:78:f2:5d:54:c6:7c:4a:26:91:ec:c9:80:34:80:
         25:d7:6d:da:9b:a9:64:90:e7:c3:fb:9a:bc:4c:ca:ba:a7:c4:
         39:33:e5:ab:69:75:7b:42:50:06:89:22:7b:d7:6b:15:03:a6:
         96:f7:8c:b1:b8:ae:4a:a6:be:71:94:f2:fc:49:e3:b1:cf:ff:
         39:1f:1e:d6:46:7b:b6:03:f8:e4:95:47:20:ed:b9:83:4f:4b:
         b4:5b:ac:b0:f5:17:55:c0:6d:37:08:ad:5f:e6:5d:cc:ab:cb:
         f2:88:00:96:47:d3:bf:39:44:5e:8e:9b:53:64:94:e6:9b:de:
         15:8e:f0:56:c2:db:72:15:84:f5:b0:8d:89:df:84:a5:f8:ba:
         90:0c:8a:e6:a8:03:a4:ed:99:ae:d6:5f:d2:8c:a0:41:bd:2d:
         b5:c6:39:99:4f:61:5b:6f:a3:f1:2d:3d:51:59:2b:61:61:ba:
         2b:c6:f5:ea:63:6e:a3:76:fd:cb:3a:8f:d5:73:8e:ff:98:41:
         0a:7e:76:62:33:89:38:8d:fe:ab:26:95:a0:8b:ce:b3:a4:8b:
         3b:d1:7d:60:06:5f:eb:71:ce:2e:c1:34:65:83:88:ff:13:39:
         da:3a:2f:80:f0:0a:89:28:9d:a2:e1:7e:b2:5b:51:53:c9:c7:
         36:f7:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:33:02 2026 by rpki-client