Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba70e382-ab78-3e53-b660-37f2adf4000c.roa
File:                     ba70e382-ab78-3e53-b660-37f2adf4000c.roa (raw, json)
Hash identifier:          xE8URMW++pxcwJ/z6hCVcZnTYXm5qbPUum11Q8HrP6c=
Subject key identifier:   ED:BB:04:E1:A4:26:E1:A6:AD:67:49:0A:1D:E3:2D:42:72:C4:A1:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED4320D0785B4AC5302173580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba70e382-ab78-3e53-b660-37f2adf4000c.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        73.252.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:0d:07:85:b4:ac:53:02:17:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=d69dce7b-5fd1-4f9e-ad42-5dce9b142af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:e5:45:54:b5:a2:ec:d5:69:db:35:e2:bd:
                    79:68:25:73:ff:eb:cc:b0:56:8c:9e:7d:c9:0c:a6:
                    21:55:b3:ac:ea:e4:20:73:04:4d:09:b8:80:cc:10:
                    3d:23:4e:f4:aa:ec:8c:97:ed:7e:af:4e:3b:dd:ca:
                    31:4e:0b:0e:03:0c:83:dc:04:97:f9:ec:2e:ee:3d:
                    e7:cb:d6:b1:de:c1:18:86:76:50:51:af:de:9f:0f:
                    98:32:37:93:c7:ef:85:50:95:de:4a:5a:9d:29:0a:
                    8e:5f:04:5b:f4:19:35:52:b0:62:28:36:79:2f:2a:
                    6b:61:67:a4:cd:bb:89:53:1f:b1:04:9c:41:9b:07:
                    be:c3:69:ac:21:68:8a:39:d3:d1:91:c8:be:77:ea:
                    0f:75:d0:ab:e3:87:d7:55:ce:f8:93:01:cc:e9:75:
                    b3:60:53:ca:96:21:0a:df:79:24:cc:d5:06:03:97:
                    09:ee:6c:4d:7f:ac:80:0e:5c:82:fc:4e:f2:e5:2f:
                    ab:af:c9:cc:ce:9e:01:d0:f2:9f:f4:de:ea:8d:72:
                    eb:a1:55:b9:f1:8a:2f:0a:35:c0:71:61:3d:e4:71:
                    44:22:bd:a3:10:d4:85:4f:cc:c2:f5:99:5e:59:db:
                    54:f7:cf:8f:6c:5a:be:0d:4f:c7:0c:d7:ed:5e:e7:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BB:04:E1:A4:26:E1:A6:AD:67:49:0A:1D:E3:2D:42:72:C4:A1:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba70e382-ab78-3e53-b660-37f2adf4000c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:c2:4e:72:b0:20:d5:87:da:1b:cc:c3:77:71:06:b6:8b:
         c3:91:6a:fa:8b:8e:02:7e:c6:1c:c0:b5:ed:9a:de:46:dd:9d:
         43:e1:b1:20:68:ed:6f:67:63:c0:d9:d6:26:da:65:5c:a3:92:
         16:2a:e6:38:a6:3d:c2:df:a7:57:d0:b8:6a:91:56:13:ba:aa:
         bd:28:cd:c5:1a:d7:6e:b8:83:c0:ba:21:0a:db:78:18:3d:d5:
         63:1c:37:68:06:e6:2e:62:8f:aa:a5:6d:30:ac:45:78:11:81:
         aa:80:f7:c9:63:ab:59:ce:26:47:05:fa:cb:f8:c2:9c:a4:06:
         87:61:18:4b:1c:da:20:6a:7c:1a:8b:49:15:0b:e6:b9:b9:02:
         3e:f9:66:83:fc:9d:e6:5f:a4:09:30:d8:33:75:e5:49:ea:c6:
         a2:0c:51:8c:f6:3d:b2:d4:1b:3c:41:42:c8:20:2c:3f:22:35:
         bd:bb:2e:a2:d0:d9:de:d3:f0:08:ed:6b:96:4f:d3:ac:7d:6e:
         7e:bb:25:5d:06:cb:3c:fe:ca:93:3f:e9:b0:24:a6:3b:78:f7:
         50:58:f8:68:b8:0d:eb:b0:57:60:0d:38:64:69:ff:fb:c6:c3:
         e5:4e:7b:02:07:56:53:49:71:45:dd:91:c4:de:d1:47:20:16:
         b8:1b:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:58:06 2026 by rpki-client