Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6e3a59-7f16-3d20-8c51-3bc5fb09fb34.roa
File:                     ad6e3a59-7f16-3d20-8c51-3bc5fb09fb34.roa (raw, json)
Hash identifier:          BqAOc60M4qKnHYaOWwdhGtTtkns2EpvhxnRiKMRQnTs=
Subject key identifier:   17:D8:08:BF:76:5C:70:C4:65:99:ED:15:D1:C4:0A:9B:75:8B:25:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3DFC1643BF8DAC4E3EBCE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6e3a59-7f16-3d20-8c51-3bc5fb09fb34.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.223.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:fc:16:43:bf:8d:ac:4e:3e:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=270e9093-bf86-40d9-bf1a-44fdfdeaf6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:9d:7c:d2:dd:ee:c9:f9:9a:67:b7:71:dd:
                    ca:d5:bf:01:71:a0:55:4b:c3:4f:44:7c:73:52:6c:
                    92:13:16:a6:13:ff:a4:bd:a5:ae:c6:c6:a4:c7:bd:
                    1b:1c:76:d8:1d:46:5c:ef:6e:c5:42:4a:bb:07:ff:
                    37:e1:63:cb:f6:8e:55:94:4a:55:8d:3b:72:c7:7e:
                    26:d3:c9:3d:c3:df:13:7c:ac:cd:38:33:85:52:f5:
                    0e:e9:04:e9:e1:61:fc:83:f8:33:ad:d1:82:d0:ae:
                    10:55:9c:13:fa:5c:52:b4:ec:64:cd:31:0a:cf:5e:
                    94:95:af:a8:8d:19:02:0c:9a:df:2e:e0:dc:67:32:
                    92:ff:e3:2a:e3:34:9d:d0:2e:39:25:51:c6:2f:34:
                    cd:58:69:c8:a4:ec:8c:6d:97:18:64:45:52:0d:60:
                    a1:d2:f4:c5:51:c3:4e:2d:a6:ec:ba:da:36:22:06:
                    69:ac:dc:ab:0f:ec:5e:a9:dd:4f:6d:43:ca:3c:5b:
                    b0:63:b1:c1:08:3a:a7:94:ae:a0:5b:8d:84:ed:18:
                    28:4b:ac:b0:85:43:1d:f9:d1:aa:de:bc:39:6f:c4:
                    69:65:31:e4:4d:6d:6a:6d:ab:55:84:76:ce:ba:1e:
                    16:87:95:75:37:80:96:f4:31:ae:e3:65:6a:02:67:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D8:08:BF:76:5C:70:C4:65:99:ED:15:D1:C4:0A:9B:75:8B:25:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6e3a59-7f16-3d20-8c51-3bc5fb09fb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:be:a7:7a:4d:19:97:26:2d:09:90:c4:37:dd:a4:be:da:
         6b:af:39:5a:ab:99:b2:f9:5c:05:c8:ef:53:9e:1a:86:13:0a:
         a8:20:04:7d:d3:90:4e:82:d2:02:22:94:fd:40:a4:65:2f:ae:
         87:7b:e2:b3:76:ca:b0:2c:f9:f6:3b:00:cb:00:2d:e5:70:7b:
         91:7f:aa:52:b6:e5:a4:52:44:5e:80:4f:93:18:20:3a:60:1d:
         9a:8c:ac:dc:9b:03:d9:d0:8c:f9:62:ea:bd:b3:4e:43:6d:64:
         fb:f5:ba:0e:37:e1:ae:ce:76:0d:a2:42:99:74:87:4e:10:47:
         95:c3:e1:4a:4e:40:89:c1:9c:44:7b:88:cd:e1:24:04:64:b3:
         99:77:c3:6f:09:73:da:5a:b6:73:4f:36:31:62:44:d1:34:ad:
         7d:39:2e:42:24:4e:e0:af:41:b3:09:08:45:4c:37:92:91:6a:
         de:00:87:ec:eb:2f:6d:8f:7b:28:c6:cc:72:e3:ac:f2:57:8c:
         50:d5:7d:fb:87:8a:b9:46:28:fc:bd:ad:15:5c:2e:cf:40:19:
         35:9d:b7:01:03:ac:ce:77:6c:7f:ab:36:4e:ba:d5:05:f9:36:
         f0:e0:e8:2f:a2:b0:d6:5b:3c:4f:50:fe:a4:e3:56:90:b6:5f:
         98:3b:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:32:40 2026 by rpki-client