Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa
File:                     9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa (raw, json)
Hash identifier:          tpzZ5NNNK8GyxcJzSyfZz5sjAZdDbxps+93oN8em9wE=
Subject key identifier:   C4:36:9A:85:D3:FD:7E:82:A7:DF:FD:1B:AD:08:8D:2B:22:DE:8E:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D7A0E0757F93B23DA5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        174.160.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:7a:0e:07:57:f9:3b:23:da:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=63705b27-0087-4fa7-84e7-5b17aabf28b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:ab:08:c4:1c:b2:6d:82:3a:7e:56:c6:00:
                    12:6d:65:66:5f:ca:11:1f:b3:02:7b:8a:34:77:f3:
                    ed:3f:5d:0c:6c:b7:2a:fe:7d:2a:41:8a:fd:73:98:
                    75:c8:97:af:50:a7:87:87:2e:08:1f:fe:5e:6a:af:
                    00:81:41:d1:85:eb:ac:8b:47:2d:a1:15:81:e4:7e:
                    2f:42:c8:d8:7a:b4:94:ca:66:81:3e:14:bd:24:6a:
                    38:39:a9:ba:c5:79:08:f6:ea:50:d2:1d:3b:79:20:
                    c5:39:92:73:7d:0d:99:fc:8e:1b:6a:c2:78:9d:32:
                    a2:8a:e2:88:3f:c2:04:0c:ef:5d:d3:6b:a9:06:ce:
                    5c:82:78:ae:af:bf:d8:a6:9f:9b:80:d4:89:f0:36:
                    6c:5d:5d:f7:c6:e6:67:ee:77:ed:4d:b4:eb:ac:61:
                    8f:71:e1:fb:4d:d7:f5:3e:35:4f:e7:82:1e:86:c6:
                    61:d0:2f:a3:c0:50:b9:2d:a6:f8:9f:59:20:b4:90:
                    eb:18:83:0b:2d:86:f3:ae:fa:d2:15:fa:92:b3:9d:
                    42:d5:5e:c8:d8:e1:35:0e:59:f2:28:f4:c8:c4:a3:
                    0d:6f:20:71:30:d6:27:8a:ce:ee:47:93:d9:b8:b6:
                    54:06:69:ef:05:aa:ed:4f:39:48:d5:cc:14:62:76:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:36:9A:85:D3:FD:7E:82:A7:DF:FD:1B:AD:08:8D:2B:22:DE:8E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9175e562-78bc-3b02-861f-aa51f3b0b8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ba:a3:16:09:95:95:a2:12:5d:29:ad:79:6d:98:ea:18:9c:
         f5:68:ca:b6:6c:ad:a7:cc:4b:a6:a0:fe:29:42:78:af:f4:dd:
         df:cf:f6:d1:59:a4:66:e5:32:14:2e:1d:e2:f5:00:a2:76:5c:
         17:d6:84:b1:d2:52:b8:57:c7:07:56:69:9c:6c:b4:54:af:5e:
         d8:da:10:1e:aa:98:c8:50:53:77:3f:63:fb:08:85:c0:aa:9d:
         73:75:2a:86:67:cd:ce:73:73:ec:ff:aa:dd:13:ce:db:30:55:
         c1:56:e9:eb:33:b3:f1:2a:a5:c4:de:e7:c1:29:8e:ba:b4:1d:
         9f:0b:ea:a0:46:14:28:ed:ed:9b:ca:de:d2:e1:e7:d7:fa:95:
         a3:63:89:aa:98:dc:b5:8a:f4:a1:b0:6f:5b:4b:65:0b:5e:0b:
         d7:5f:01:ed:01:ff:60:59:28:91:9e:af:0d:f1:c2:f6:0a:d5:
         1d:60:b2:73:e1:68:d5:dd:d7:68:25:3e:67:03:ec:4e:7d:dc:
         a3:46:7e:b7:49:c0:07:19:fd:b6:3f:7e:58:41:32:c1:07:c9:
         a5:0e:96:cd:ee:7b:37:fe:15:49:79:fa:5b:68:96:a0:93:87:
         db:06:a2:07:16:4d:51:5e:3e:33:8c:ac:30:5c:e9:d0:b7:4e:
         5b:41:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:50 2026 by rpki-client