Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d7a774-8406-391c-bde4-c2052d38db6f.roa
File:                     86d7a774-8406-391c-bde4-c2052d38db6f.roa (raw, json)
Hash identifier:          oRutdk9SotwbOdUrBKfTS+Psnler8Pu0YsKrpLehYcw=
Subject key identifier:   AD:A9:A8:55:F3:95:56:3E:5E:72:33:F9:4E:90:5D:F1:B5:BB:5A:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61450967F17DC4D2321FE100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d7a774-8406-391c-bde4-c2052d38db6f.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     33659
IP address blocks:        73.196.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:09:67:f1:7d:c4:d2:32:1f:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=748ee2cb-231a-4f81-b095-ab6611aaac59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:ce:3b:61:e6:cf:7b:1b:0f:67:ed:a9:9f:
                    52:c5:03:67:9c:98:11:d1:ec:13:46:26:92:dc:f2:
                    1d:f9:07:4a:2d:95:a3:73:40:b6:d3:53:11:cc:fd:
                    1d:d8:7f:15:43:02:b9:76:59:e2:36:2f:4e:e6:3d:
                    5d:18:ca:20:26:64:c8:eb:d8:6f:88:2c:af:5d:a0:
                    9c:10:da:7f:ac:c6:0c:f9:2f:75:02:e3:6f:ef:dd:
                    2e:a6:76:f4:eb:66:cb:a5:da:56:b7:06:4b:c0:4d:
                    8e:ae:85:ec:a0:f6:35:6c:41:e9:83:93:a3:39:1c:
                    b0:41:59:d2:f8:8c:e3:8c:b8:38:5d:b7:fd:5b:a9:
                    d3:e7:4d:51:7c:7f:3d:11:65:d2:87:15:09:2f:b0:
                    50:44:97:6d:02:ed:0b:72:a9:d4:d9:16:01:70:fb:
                    c6:f6:8c:4e:5b:5c:8e:f0:17:17:f6:26:92:eb:74:
                    81:79:92:d7:a0:97:c2:a8:fe:81:5a:57:33:24:cd:
                    f9:f7:8a:35:9a:4d:81:92:8c:4f:67:b6:dd:77:4b:
                    3c:10:c3:cc:cc:ac:2e:21:4d:b8:a5:5e:2f:b3:04:
                    0e:60:32:f5:a2:01:ee:e4:e1:28:37:ca:e4:e9:b8:
                    fc:4c:69:c8:ec:82:f2:7b:82:97:30:d1:aa:90:52:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:A8:55:F3:95:56:3E:5E:72:33:F9:4E:90:5D:F1:B5:BB:5A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d7a774-8406-391c-bde4-c2052d38db6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.196.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:c4:6d:6a:d4:bf:37:20:3e:a0:dc:d3:07:73:b6:44:71:
         7e:26:d2:9c:c1:ce:01:47:49:10:b6:c9:dd:f3:73:f6:3e:56:
         8f:e6:0b:f6:3e:7f:b9:45:2a:1e:4d:d0:fa:79:9a:b4:28:d6:
         b0:8c:c0:b3:6e:ae:7d:d0:75:ce:ca:7f:b8:26:fe:ba:d3:4a:
         1b:f5:25:14:12:1e:84:b2:8d:13:1c:2d:3c:8b:cb:ab:5e:a8:
         60:6e:15:b4:b9:f4:42:66:5a:11:e3:57:5e:67:4d:8d:78:95:
         14:76:cf:c6:8f:0d:d8:30:f5:d9:3a:ab:5f:14:40:32:15:4e:
         07:6c:53:ad:2b:a3:8a:56:7c:70:a6:d3:bf:7b:92:de:ba:e3:
         82:bc:67:c0:15:39:bc:3b:23:ac:e8:ed:9f:e1:66:12:d2:8b:
         05:71:1e:65:96:8d:ec:21:bf:f6:f8:37:95:22:17:ea:73:7e:
         80:c0:e9:a7:2d:75:7b:9f:5d:38:0b:95:cc:f8:a5:88:d7:b4:
         01:00:4b:f6:c0:90:40:af:46:d3:4c:61:6a:00:05:a1:ca:5a:
         44:80:b2:c9:78:97:80:cf:19:ca:ae:d4:1f:af:6e:15:80:6d:
         1c:61:fb:41:43:54:c6:54:5b:29:51:3f:ba:f3:4f:b2:e9:2c:
         cc:20:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:12 2026 by rpki-client