Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e0d1db-5088-35a5-aec5-d23313bd310d.roa
File:                     91e0d1db-5088-35a5-aec5-d23313bd310d.roa (raw, json)
Hash identifier:          DZgX1gDsoQGPTq+1mO6QpPNZDmeskAmLGDb/c48Bl6A=
Subject key identifier:   D2:09:86:DA:FC:DD:80:88:F0:9B:DC:FD:87:BF:AD:60:2C:C8:8F:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A8BF2A6FED9A323011F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e0d1db-5088-35a5-aec5-d23313bd310d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        73.215.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:8b:f2:a6:fe:d9:a3:23:01:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d7580108-68a0-4532-a197-14f36bfc70ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:e5:54:9b:c0:a6:ca:c4:d5:42:14:49:52:
                    17:f7:8b:8b:f4:59:e3:c8:4b:95:55:96:65:89:db:
                    ef:96:9d:fa:bb:b8:d3:17:9b:68:9a:66:f7:50:37:
                    a1:ee:e2:ce:03:02:1f:e0:a9:a5:40:11:58:b8:1f:
                    4f:ff:10:91:5d:0a:cc:10:0d:84:77:8c:1d:cd:e5:
                    13:ed:62:bf:1d:20:54:d1:94:db:e4:2e:a7:1a:de:
                    cf:bc:28:88:82:1f:2a:90:f3:7b:14:5c:10:a9:ff:
                    e0:17:67:39:b8:e3:6b:c8:01:1d:61:9e:62:d1:24:
                    cc:42:a8:cf:d3:78:5c:4d:ab:80:75:10:c1:e0:79:
                    8f:32:aa:3d:ad:4b:16:0b:a4:10:29:ad:7c:06:f3:
                    b2:db:c1:fb:ba:3b:66:05:2c:4a:20:96:5b:af:57:
                    3b:3e:75:9a:fe:e2:7d:76:b0:24:e5:f1:65:93:0d:
                    b7:78:27:82:18:0c:06:1f:70:82:a1:ef:a3:d9:b4:
                    8f:26:02:58:b6:be:ef:80:7d:93:48:14:1f:ca:fc:
                    d6:13:8f:0a:5c:6c:15:4e:23:80:f9:27:e1:a1:56:
                    9f:c1:b0:01:15:52:c7:72:12:5b:f4:ba:71:3c:64:
                    06:9d:5e:47:05:f4:72:87:b9:5b:27:ce:af:0d:70:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:09:86:DA:FC:DD:80:88:F0:9B:DC:FD:87:BF:AD:60:2C:C8:8F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e0d1db-5088-35a5-aec5-d23313bd310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.215.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:f2:3c:26:26:74:3b:8e:c0:a9:f1:6a:be:bf:be:42:f5:
         c3:b2:ca:8b:b3:57:22:56:13:c9:23:5a:b2:d4:88:08:63:67:
         d6:76:8a:59:c6:f2:33:96:f6:a6:e7:f3:c5:79:8e:d8:d9:ef:
         63:4a:a0:9b:0b:60:65:61:89:d1:91:2d:ae:b1:a5:d3:df:77:
         8c:c8:ab:a3:2e:ff:b4:d1:d4:a9:22:57:0c:e2:04:13:51:ef:
         98:25:53:c5:e5:7e:ae:b1:e3:52:c7:b8:e8:9f:a6:ba:d5:9a:
         21:3e:84:19:66:c1:9b:12:35:dd:84:38:3b:7c:73:bc:17:55:
         0b:8b:ac:1a:c7:5c:fb:5b:b6:f1:36:df:cc:c7:6c:8c:92:50:
         ef:1d:d2:2e:8d:3a:7e:82:ee:4c:28:e9:df:ab:62:06:26:d1:
         fd:3d:33:eb:5f:05:54:62:82:b9:5c:d3:de:cb:09:83:6c:39:
         48:35:c0:b2:ec:a9:01:25:0f:b7:9a:c5:37:ad:8e:c0:25:05:
         8e:fe:70:5f:47:79:29:da:53:78:c6:5f:94:30:16:ee:12:01:
         d1:c9:c0:f3:31:93:fe:19:12:2f:6e:01:bd:dd:00:41:71:53:
         50:77:a4:54:bf:bc:32:30:db:65:d2:27:10:79:97:cb:21:8d:
         7c:19:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:10:55 2026 by rpki-client