Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0391384-3197-364b-b987-05189f0df40a.roa
File:                     b0391384-3197-364b-b987-05189f0df40a.roa (raw, json)
Hash identifier:          WXloQP5ax8p3s/M4NRsTRvArea8ngVfCQNH8xLgMh0o=
Subject key identifier:   5D:16:FB:15:9E:05:5D:A0:C6:40:5C:50:05:FC:D5:CB:98:E8:C0:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36001F618954B9685A8D5C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0391384-3197-364b-b987-05189f0df40a.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        73.232.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:1f:61:89:54:b9:68:5a:8d:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=dabf7fec-77d9-432e-a164-88548bb00af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:3a:78:ea:2f:b4:d3:dc:a4:e1:35:91:b1:
                    5c:fa:00:b2:a1:97:b1:af:56:11:95:19:e9:08:b3:
                    9a:4c:df:b6:7a:75:e6:95:9e:25:99:32:de:ac:4a:
                    f9:1f:1c:01:92:49:d9:c9:2d:b7:0d:5f:ec:95:8b:
                    b4:a1:cd:a9:e8:03:38:4c:dd:41:5e:40:5c:d6:2d:
                    49:37:1f:7a:d6:0b:91:06:ed:74:7f:d7:91:c5:71:
                    f5:31:88:a2:c9:8c:4e:2b:1b:11:f0:b6:85:0a:5d:
                    97:26:1c:a0:54:98:53:5d:05:f9:b9:f2:ec:0c:99:
                    24:c0:08:00:53:f2:08:f6:38:d0:da:d0:ee:36:ff:
                    06:10:3b:76:fe:b5:e3:75:29:1f:69:56:59:72:a3:
                    26:de:ad:30:d4:35:be:3f:6f:67:0f:ad:bc:78:95:
                    54:c8:ba:13:3c:ae:6f:bb:1f:4b:45:61:f5:c1:c5:
                    31:b1:e1:37:84:09:24:b0:d1:bc:3c:fb:59:c5:57:
                    f3:94:76:57:60:a9:9d:8e:25:03:52:86:ef:ef:8d:
                    a5:11:7f:a0:ef:5b:af:12:ce:fe:db:7d:7f:36:96:
                    dc:5a:21:6e:d0:eb:17:74:8d:a3:b7:78:ed:da:1c:
                    d6:e2:7f:33:39:15:c8:45:44:a0:13:05:f2:9d:c1:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:16:FB:15:9E:05:5D:A0:C6:40:5C:50:05:FC:D5:CB:98:E8:C0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0391384-3197-364b-b987-05189f0df40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.232.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:82:af:46:ca:65:39:dc:32:d7:47:59:c4:b8:03:f0:fa:9e:
         92:50:84:89:4d:d2:a8:ec:5c:30:c2:6b:0f:cd:82:1f:2a:b4:
         58:cb:46:e2:79:b6:72:1c:71:db:f3:d1:ed:50:ad:0d:56:fa:
         5d:ff:ea:c9:84:13:28:61:18:62:60:5d:89:10:c8:cd:37:f6:
         ba:a9:bb:22:e0:73:ef:5e:c2:1b:de:19:9a:d2:c9:68:aa:d6:
         6c:0c:4d:77:7e:4c:b5:34:b5:71:e0:f1:2b:7e:dc:7b:17:5f:
         46:76:d4:56:b7:2c:14:55:0f:70:c1:2d:3d:19:24:3f:d9:54:
         30:0b:8b:29:a5:7d:83:88:86:53:7c:79:5d:9b:1d:6c:d1:56:
         89:93:c0:e9:4f:1d:b9:ce:a2:ba:ea:ee:ab:3b:c4:7d:f7:38:
         88:21:4b:7f:92:d3:85:ac:5b:14:a8:59:bf:a4:fc:ee:34:07:
         13:c5:b9:90:45:57:6d:d6:b7:76:ef:d2:63:16:2e:f2:cf:ae:
         49:88:b2:4b:55:f9:25:96:c3:54:0d:38:16:46:c5:44:f8:4b:
         8c:d0:08:2c:4a:ee:2d:19:e8:01:62:25:79:d3:a4:af:67:0f:
         c7:a2:19:47:16:f3:f9:9b:93:d6:b7:ff:f1:76:13:b5:d1:11:
         14:81:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:49:30 2026 by rpki-client