Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8ffec3-23a2-3a44-a6ed-929ec1b01f66.roa
File:                     ba8ffec3-23a2-3a44-a6ed-929ec1b01f66.roa (raw, json)
Hash identifier:          7viSJV9wHLXSmltDiVEzKmgyaOHv0j2vNUJoJsMxLWQ=
Subject key identifier:   DB:47:B2:FE:23:4D:80:EA:18:47:4B:7A:18:23:0D:84:8F:62:FB:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B7BDB6A18228CB22AE180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8ffec3-23a2-3a44-a6ed-929ec1b01f66.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.92.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:7b:db:6a:18:22:8c:b2:2a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b5756800-0372-499f-8e59-d292129c3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:24:17:da:98:50:5c:79:e4:8f:dc:84:4f:
                    92:41:93:4d:2c:4c:32:87:1d:af:83:00:9f:d0:72:
                    c9:85:14:d9:9e:95:a0:f3:c3:52:d0:3c:bc:6d:0b:
                    41:f9:1e:ac:50:90:bf:32:e6:40:15:6c:0e:d8:98:
                    c6:18:74:b5:4b:6a:35:53:77:ef:35:f1:4f:76:94:
                    3f:f2:19:58:93:f2:c4:d7:89:80:80:7c:e6:71:81:
                    86:5e:13:5f:4f:5a:7e:78:84:7b:d7:4e:3b:9e:7c:
                    8d:95:bd:4e:4f:1e:4a:7e:b0:e4:f8:66:84:5b:f2:
                    96:6a:a5:fc:82:ca:c6:0a:b6:68:fa:8c:47:c7:43:
                    8d:f6:f8:bb:1d:d6:93:e2:48:f4:f8:59:2f:08:ed:
                    99:43:36:04:40:e7:37:85:6d:1d:af:7e:d8:53:c7:
                    45:ea:66:ea:97:dc:18:51:0e:b9:24:d2:b5:2e:c0:
                    47:0e:dd:e4:5e:0a:9f:63:45:5a:7e:13:6e:17:00:
                    7f:7d:45:ce:e6:52:cf:b3:9e:74:0f:cc:6b:d6:ca:
                    d7:2a:b7:3e:62:78:85:a2:c7:8b:8e:3e:2b:1d:11:
                    95:d5:44:d9:66:13:97:fc:24:ff:f0:21:de:0f:fd:
                    da:99:5e:bf:07:b7:5f:33:b7:68:60:d1:18:e3:48:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:B2:FE:23:4D:80:EA:18:47:4B:7A:18:23:0D:84:8F:62:FB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8ffec3-23a2-3a44-a6ed-929ec1b01f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:15:c8:fd:d2:80:eb:54:eb:49:d4:2e:4c:cb:86:5c:a4:a9:
         9b:6a:39:58:56:a6:ec:c8:98:e1:2d:eb:d1:83:bd:95:d3:55:
         b2:43:ea:cf:52:2e:44:94:27:ae:f6:30:c3:4c:ff:5b:48:88:
         75:98:45:77:53:94:29:59:25:5c:4c:56:4a:fe:5d:48:d7:60:
         e4:c3:0d:e7:8b:81:f4:3a:7f:a8:51:71:dc:0e:38:12:aa:b2:
         83:b6:0e:9f:aa:9d:6e:8f:41:a5:33:a0:d9:6e:5d:04:24:30:
         53:e3:10:1c:50:4c:f6:b0:a3:c6:d8:98:b2:18:ad:7a:f7:4c:
         de:a4:63:fb:ca:83:f9:f1:3a:ac:d6:db:31:ad:19:b3:33:2c:
         31:59:83:04:fd:36:9f:35:fb:57:d3:fc:f6:f1:b4:9b:07:bd:
         4c:36:d5:fa:1d:5b:01:54:f3:a3:55:e6:5e:42:43:34:c6:1d:
         d0:3f:4a:96:07:44:9c:13:e9:da:84:44:fa:e1:7c:78:22:a0:
         42:3d:85:70:4b:8a:42:27:22:20:47:3e:35:90:cd:08:45:57:
         46:57:4f:34:88:02:2c:ac:31:d4:e1:cc:4e:93:78:16:d6:07:
         9f:19:9f:86:3f:6c:9f:83:6a:48:ed:39:65:eb:d5:8c:3b:6d:
         b8:83:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:46 2026 by rpki-client