Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33d16a6-34c5-3542-a07e-6adae84f9467.roa
File:                     b33d16a6-34c5-3542-a07e-6adae84f9467.roa (raw, json)
Hash identifier:          ToIavgrYN0mkNDKU9Ir6h5w/oK+suq6Xay1yCnt3vWY=
Subject key identifier:   5E:E6:92:D6:7C:4F:DC:BA:0E:4A:BD:97:BB:0E:EB:C0:D4:29:DE:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BBF5718CF8B00B3DF8B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33d16a6-34c5-3542-a07e-6adae84f9467.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        73.160.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:bf:57:18:cf:8b:00:b3:df:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=6f147437-c144-4400-8d3a-3b0bc45bc800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ed:fa:b1:a6:d0:d0:7b:d3:9a:a6:79:81:a1:
                    70:de:9d:88:5f:06:01:bf:30:f7:4f:c8:3d:08:1a:
                    db:eb:f8:e9:35:ad:44:83:80:58:d1:4a:80:51:65:
                    0b:4f:14:39:ed:a4:7b:34:d9:2e:1f:f7:05:6d:1e:
                    31:07:ee:51:02:ed:d7:c2:f3:52:da:63:69:dc:35:
                    0d:e4:44:1e:60:b4:fc:e7:48:6a:91:e2:94:0f:80:
                    dc:66:d4:5a:b8:64:c2:0f:03:54:b8:db:88:46:46:
                    ca:a3:39:e7:71:f3:92:7c:b9:31:58:68:01:cd:23:
                    44:42:5f:87:83:a1:c5:08:d7:18:85:f5:da:6e:da:
                    36:a1:03:3e:bc:17:bd:4d:d2:32:20:b9:04:f9:24:
                    f1:a7:d7:9b:74:62:08:c1:29:ad:2b:7d:91:9f:19:
                    c5:5d:89:e8:9c:5b:d8:75:9f:0d:00:5e:78:9e:cb:
                    53:3c:4d:d8:ca:9d:54:55:c6:97:92:23:12:a8:88:
                    04:44:86:cb:d0:c9:ef:03:d7:70:2f:ae:19:a3:c3:
                    30:05:a8:38:95:e8:81:43:95:99:36:97:a6:0d:43:
                    64:45:86:11:3f:d5:76:f2:9e:4e:f1:32:22:ec:f1:
                    e7:04:2f:6f:6b:d8:f7:d6:58:85:fe:eb:e3:0c:28:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:92:D6:7C:4F:DC:BA:0E:4A:BD:97:BB:0E:EB:C0:D4:29:DE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33d16a6-34c5-3542-a07e-6adae84f9467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:07:51:fd:53:60:24:af:18:f9:e5:4e:1f:e1:70:42:d5:98:
         a7:43:3e:31:35:7a:a6:98:97:31:99:8e:be:48:01:47:d7:bf:
         8c:d6:cd:b9:b6:4b:b5:29:cd:7d:bc:af:7e:66:87:cc:67:f3:
         40:82:1f:ee:c7:6c:6c:b2:e1:e4:62:45:ad:f7:d5:13:09:ff:
         17:c0:8d:5a:8d:1d:fd:a6:3a:15:9d:63:16:af:42:c7:61:69:
         51:74:cf:37:3a:17:95:1e:a2:4e:bd:0c:c6:85:40:1b:ce:e8:
         7c:75:91:fe:73:5a:67:06:cc:37:91:66:8e:f4:d1:b1:0f:00:
         f3:b8:bb:50:cf:c8:59:2d:25:b1:f5:f2:41:7f:25:98:4e:03:
         f6:4d:bd:87:3a:8f:c6:e4:a9:99:ea:e1:36:76:7b:bc:7f:de:
         ac:b4:22:94:83:14:8a:1c:79:03:55:f6:25:7b:83:83:a0:d7:
         82:80:97:e7:d3:a4:21:eb:c9:63:91:ec:71:74:b1:64:c1:6c:
         9e:52:d0:09:69:e9:2a:a8:54:42:14:ac:25:d2:ed:5d:17:58:
         45:b8:a0:22:35:1c:56:0a:92:c9:75:5f:ab:d4:1d:3d:d6:68:
         44:03:8b:a3:6a:82:ef:a2:64:bf:b9:51:80:d6:bd:24:9e:7f:
         b2:6e:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:31 2026 by rpki-client