Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a08e59-6c90-348f-ae1a-910aa1a9ce21.roa
File:                     a9a08e59-6c90-348f-ae1a-910aa1a9ce21.roa (raw, json)
Hash identifier:          yr6/5cP/zRp+m/kqcLAXovnEVMKVl23AUIC5jsxk3MU=
Subject key identifier:   EF:4C:8E:76:16:16:91:CA:40:21:38:3C:D4:85:14:1F:49:C2:5C:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AFE9773BEB4A0C7B0FF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a08e59-6c90-348f-ae1a-910aa1a9ce21.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.209.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:fe:97:73:be:b4:a0:c7:b0:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=9fccf95f-22ef-4d58-a8fb-3e5d7ae11fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:de:49:28:50:ff:7e:21:82:52:d4:45:52:
                    77:21:a1:f7:c8:00:0e:64:d1:d9:81:21:7b:bd:99:
                    e8:b9:a7:f1:42:4c:b9:23:c6:cc:55:a6:64:cd:41:
                    18:bc:d5:92:9d:f3:29:31:19:33:87:2b:37:75:b1:
                    1d:f9:d4:7e:ae:8a:37:7a:bf:8b:c5:1b:13:15:71:
                    c4:35:a2:67:96:92:1e:02:65:3b:08:2e:10:ec:6a:
                    c6:78:88:32:54:8f:6b:48:31:f3:fe:83:e7:4d:c9:
                    a2:6d:4e:b6:b6:ee:fa:14:55:25:ba:f7:01:74:b2:
                    f7:85:76:a4:7b:78:5d:c4:a3:c3:8c:e4:56:44:67:
                    a5:ef:0f:61:3c:f7:a3:87:e2:e5:45:5f:e5:18:c8:
                    db:50:13:10:09:7f:5b:b6:9f:fd:a2:a2:fc:4a:80:
                    4b:29:2a:60:20:3e:76:eb:13:aa:98:24:01:30:3a:
                    f3:95:3e:48:65:f1:53:45:1b:d2:02:2d:73:7b:85:
                    91:cb:59:4a:6c:7e:59:00:26:b2:39:0e:f0:02:21:
                    9f:ea:e0:00:af:91:38:bf:b3:8a:62:30:bb:04:da:
                    3d:6f:44:87:9b:1a:2e:a6:04:cb:82:a7:d0:37:fd:
                    ae:e5:91:82:ed:72:cf:30:6f:2e:64:5a:ad:72:30:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:8E:76:16:16:91:CA:40:21:38:3C:D4:85:14:1F:49:C2:5C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9a08e59-6c90-348f-ae1a-910aa1a9ce21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:d2:18:2c:03:40:c3:3f:1d:26:b8:92:0d:85:61:21:2a:
         19:2f:2e:f4:e3:7c:47:dd:69:f5:ef:f3:9a:e0:71:d3:97:de:
         7f:b8:99:46:54:9d:5d:c5:04:bb:35:7e:4c:fa:ea:fa:07:57:
         a8:50:ce:c5:f3:86:38:fc:f8:7d:fb:4e:cb:33:c3:cb:d5:7b:
         55:da:e6:ff:da:cb:80:5f:6c:14:cd:3f:2a:77:d9:1f:c5:02:
         e3:eb:9e:5c:2e:02:47:f4:27:dd:c0:a9:ee:b7:ca:18:75:98:
         fe:49:88:d6:35:dd:eb:bf:af:1e:7b:a4:0e:05:77:f1:99:e4:
         e9:0c:94:11:01:0f:8d:ee:51:16:df:ea:4a:a9:0b:cb:4d:1c:
         9e:4d:40:47:31:08:ef:f3:27:88:50:ab:1d:fe:08:36:cf:63:
         74:4f:04:a0:aa:89:20:23:90:1c:7b:1b:53:15:b0:38:09:69:
         0a:76:cb:a2:86:9f:68:cd:52:ba:84:a5:b6:75:2e:f3:62:7e:
         41:0c:5e:3f:49:61:21:14:06:f4:36:76:0e:ba:0d:7a:1f:5e:
         f3:d6:9e:e2:c7:32:8d:21:eb:57:66:11:d6:e7:1e:50:48:18:
         9f:59:90:76:10:94:c5:4a:84:5e:c1:5c:ae:65:1a:49:ec:16:
         ae:db:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:31 2026 by rpki-client