Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4768843-c2c2-3543-9753-d4eca193919a.roa
File:                     a4768843-c2c2-3543-9753-d4eca193919a.roa (raw, json)
Hash identifier:          8H2WXDnp3lMHB4W+8eEWUflOtlodiwBqNmU9vSE5oVw=
Subject key identifier:   E1:F9:55:1B:7E:1E:EB:68:D3:81:1A:FE:7C:D1:F5:B3:68:5B:9F:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C599988629C4CF2569B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4768843-c2c2-3543-9753-d4eca193919a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.176.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:59:99:88:62:9c:4c:f2:56:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fbc8acb7-3e84-458d-b94e-b4c4b39bfe1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:66:36:bf:04:99:2f:24:56:6f:86:5e:82:
                    9a:8e:e5:dd:5c:21:f8:24:bd:a9:63:3b:52:7c:97:
                    d9:28:63:92:94:9e:d8:7c:c8:b2:21:56:ea:28:d8:
                    f0:89:90:44:10:76:81:3d:c3:55:87:33:94:04:85:
                    6c:7d:b0:e0:3e:f6:4f:1b:08:e2:84:03:1a:53:db:
                    99:ad:1a:b3:a8:ea:53:db:fb:54:04:48:32:53:e6:
                    7e:8f:4c:e5:85:ca:e2:f1:eb:cb:41:f9:04:c6:36:
                    af:d5:3a:91:49:ba:27:3b:41:0d:41:7f:ff:6f:7a:
                    a1:6d:ae:ca:20:ec:4a:4f:cc:b6:a5:69:3f:00:1f:
                    6b:7e:4e:3f:78:ae:64:61:41:2b:36:f6:78:1d:8b:
                    cc:7c:24:65:51:e3:48:8d:06:ec:8a:8c:de:d4:65:
                    58:72:76:31:a3:35:00:52:14:8d:4c:bc:30:52:18:
                    43:94:a3:ba:49:53:c3:2d:7d:03:e9:7c:32:9f:4d:
                    7d:b3:ff:ff:92:fa:df:26:cb:2c:58:47:0c:76:63:
                    80:20:b6:5d:c5:2a:af:59:a2:23:c8:67:ca:8c:95:
                    dd:c2:1f:54:61:d9:23:eb:5a:ad:0d:18:d2:23:cf:
                    87:e5:6e:58:c6:69:92:0f:72:8d:79:c8:41:e9:57:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:55:1B:7E:1E:EB:68:D3:81:1A:FE:7C:D1:F5:B3:68:5B:9F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4768843-c2c2-3543-9753-d4eca193919a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.176.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:1a:ad:57:51:09:82:79:f6:28:f8:11:3f:66:c5:d0:a3:
         fd:c2:a1:71:3b:1f:dd:22:7c:0e:68:82:ce:a5:2f:f5:df:ad:
         e0:31:29:cd:b7:c0:cf:19:58:7a:ff:5c:49:83:a4:0b:a9:6d:
         07:ad:58:f1:ce:50:fb:bb:4e:ea:ef:f9:84:1c:56:65:e8:00:
         17:ee:f6:d6:7c:4f:e3:3a:04:c5:3d:8f:ce:2c:ba:66:e5:36:
         82:d2:8b:0d:4b:0a:5f:b9:af:da:6d:d9:43:67:c7:69:4f:13:
         f0:6f:eb:c5:3a:5e:e6:75:b5:aa:40:b8:e9:62:b6:a4:8e:81:
         09:57:a9:d3:80:4a:25:b0:1d:09:af:09:92:93:e6:77:5a:5b:
         fa:c0:91:8e:92:e6:16:0f:a6:5e:51:1c:1f:c5:42:af:45:7e:
         4f:7c:37:05:f1:65:13:eb:80:03:ae:b5:04:20:f2:f6:cc:bc:
         46:46:46:23:a3:da:06:56:e0:0c:d5:17:b7:ad:9a:0d:17:0a:
         3d:ec:44:18:93:31:64:8c:2a:ba:51:e9:83:ed:29:87:5c:00:
         72:7c:26:8f:25:b0:5b:97:20:e1:da:52:22:d1:68:9a:24:10:
         ef:a9:fc:46:9f:e9:10:21:7f:a1:ae:c7:66:47:8b:73:dc:e6:
         9e:f9:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:28 2026 by rpki-client