Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f431e9-6aa0-398d-858a-4ddab59a0b26.roa
File:                     98f431e9-6aa0-398d-858a-4ddab59a0b26.roa (raw, json)
Hash identifier:          WNW/JYPWuDgqMnvm2OO2TDSITqaKcJTKb4DeMJDxoNs=
Subject key identifier:   55:57:37:EB:9A:8C:1A:7D:A4:CC:D6:0C:E3:C1:A2:9A:DD:A1:EB:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144F37847E2BBD6E46C3920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f431e9-6aa0-398d-858a-4ddab59a0b26.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        73.82.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:f3:78:47:e2:bb:d6:e4:6c:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=83e7d9f1-3fb9-401c-8609-72bf89157b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:e8:8c:19:0c:aa:ea:99:e5:d7:2b:69:29:
                    15:36:31:1a:f3:fb:f5:c9:c2:ea:b9:0f:0e:22:c3:
                    53:a9:e8:02:49:8a:18:39:00:f4:68:2e:46:0f:63:
                    b9:e5:b9:9a:65:9c:44:e5:c5:d2:68:ca:1e:58:ac:
                    af:33:9d:b6:3d:74:65:55:66:0a:ad:5c:7a:24:63:
                    1f:29:35:2c:b2:75:16:0a:1d:38:1d:f7:64:ca:75:
                    8b:07:ab:ec:fa:c3:89:a5:79:a5:35:e0:7f:7c:40:
                    c1:07:f3:80:0b:fd:3d:84:2a:47:a1:f1:0e:a8:71:
                    28:ec:b6:36:6a:51:0b:d3:f7:c3:3d:ad:96:07:c9:
                    07:c3:63:2c:5c:45:bb:11:6f:57:4e:09:00:98:fa:
                    35:94:51:44:74:bb:4f:5e:c0:aa:90:7c:dc:68:62:
                    2e:6e:ee:fb:32:36:64:ff:54:6d:a0:36:a6:5a:80:
                    cb:18:77:96:fa:3b:93:d2:be:9b:f9:16:2e:64:7e:
                    01:c4:58:28:12:fd:ec:5d:f8:e6:d5:e4:b2:a5:6a:
                    9c:6b:08:c0:bd:69:4f:da:1e:66:d2:70:d6:81:05:
                    e0:55:fd:8a:16:a4:0f:97:66:55:10:d9:61:37:e6:
                    df:63:bd:2f:6c:6f:26:66:6e:e4:96:fd:44:7c:52:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:37:EB:9A:8C:1A:7D:A4:CC:D6:0C:E3:C1:A2:9A:DD:A1:EB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f431e9-6aa0-398d-858a-4ddab59a0b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.82.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:04:3c:53:eb:80:06:1e:b6:8b:e4:d7:f5:52:fd:9b:c0:31:
         9e:ac:a1:c5:89:31:b1:40:e8:4a:d4:9e:18:08:bf:23:6c:9e:
         b8:28:e1:73:33:01:9d:5f:68:31:29:95:43:4b:33:67:8a:9a:
         2b:70:db:8d:3e:e4:d3:50:e7:e2:06:2e:c9:84:71:dc:39:c0:
         3b:31:c0:da:ac:85:38:4a:7b:32:96:e8:fd:73:a3:10:97:99:
         ba:90:b6:0c:63:46:44:1d:9c:35:6a:8e:3e:87:d9:0f:b9:7b:
         ce:61:a2:15:e8:f5:66:df:fc:f4:83:a1:7b:33:64:5b:c2:19:
         89:e3:0d:3c:b5:01:2f:33:5a:89:31:96:dd:f1:14:69:50:0f:
         87:76:21:a7:ac:0c:8c:a9:fe:e8:dc:83:43:44:ad:03:a2:cc:
         c3:78:33:23:77:81:29:b6:fd:28:30:99:96:7f:5d:7b:22:5a:
         6c:eb:86:4c:2d:47:b8:a4:09:8a:b0:b0:9d:4a:27:cc:68:13:
         e7:be:12:d0:e7:85:69:a9:4c:ee:c4:af:8a:d9:04:e8:97:c5:
         e1:b8:c5:33:2f:70:9b:42:29:19:28:2d:95:9f:14:f9:f4:ac:
         88:df:71:c9:05:59:d2:4c:00:71:51:1e:1b:9e:de:05:1e:ed:
         14:b2:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:35:17 2026 by rpki-client