Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c28f89cf-dfb3-32fb-8d26-b3b63e9edab5.roa
File:                     c28f89cf-dfb3-32fb-8d26-b3b63e9edab5.roa (raw, json)
Hash identifier:          +m+1Hcu2mpajW3BEDjc7BTZN2Kak4/PISmVrqTxRBAw=
Subject key identifier:   95:40:E1:12:D3:40:81:CA:15:64:11:6E:77:50:BA:A1:01:B0:FA:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980BD6DFB2B215F44BE72C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c28f89cf-dfb3-32fb-8d26-b3b63e9edab5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        173.8.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:bd:6d:fb:2b:21:5f:44:be:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c32efee1-9844-4304-b20c-fdeba3a2d15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:62:dc:e0:7a:70:d4:5c:49:68:4b:86:69:
                    0e:cf:b4:fd:5d:35:0a:38:97:df:2d:7e:b7:e5:c6:
                    09:7d:6e:4a:61:31:c6:36:fe:c8:c6:9b:1d:d0:f5:
                    ab:bd:2a:40:f6:00:65:8e:7f:cf:47:4a:b4:b4:d0:
                    5f:04:78:c9:b3:4a:aa:57:0d:3a:5e:b1:ae:e6:9e:
                    97:13:6d:a8:48:bc:61:37:f9:fe:5a:11:9e:5d:f3:
                    66:88:ee:7d:17:80:ea:7c:ef:f8:cb:b2:fd:c1:2b:
                    fc:19:88:da:78:13:e8:14:58:71:b0:ef:e9:78:e5:
                    12:a9:6b:a5:57:c3:8b:ca:a4:fc:e5:47:41:c0:87:
                    97:5e:1b:ff:a4:6d:0e:b1:e2:0d:4b:6e:40:32:75:
                    45:85:db:26:1b:bb:5b:de:a4:35:04:84:f8:3d:31:
                    bf:5a:52:ce:7e:62:7d:92:5d:0d:b2:95:7d:2e:93:
                    a6:99:30:a7:eb:6c:be:d1:1b:c7:4c:52:90:9b:e3:
                    01:58:ee:49:06:53:e7:84:08:8f:fc:63:9e:e1:c1:
                    13:3e:ca:f2:28:f0:e6:5c:8c:36:f0:7a:fc:17:07:
                    87:6d:35:32:8f:f1:30:b1:3f:ad:c0:54:c4:f2:d4:
                    ac:04:ba:e2:d8:5d:4e:b1:d0:9f:d3:8d:1f:29:30:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:E1:12:D3:40:81:CA:15:64:11:6E:77:50:BA:A1:01:B0:FA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c28f89cf-dfb3-32fb-8d26-b3b63e9edab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.8.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:5f:03:98:0d:17:83:7e:f3:26:b2:f7:81:5c:6a:13:1c:
         b1:ee:6f:a2:af:ea:40:85:8c:59:34:05:b9:55:30:f8:2b:9b:
         08:d7:37:92:f4:6c:a1:da:d6:23:d8:e6:4e:e0:2e:07:57:0b:
         60:b8:db:57:00:2e:27:87:f3:b5:0b:cf:07:71:eb:2f:fd:ac:
         b5:67:96:38:ac:32:e7:69:b1:b4:3c:5b:b3:4a:aa:5b:61:b2:
         bf:c4:95:07:5f:84:bd:c0:2e:6b:de:ce:fa:b7:91:63:6d:6f:
         2c:00:5d:97:fc:d8:f6:f1:3f:5c:0a:2f:39:07:b2:b5:df:e7:
         e3:8b:91:fc:c3:01:db:74:dd:43:d3:49:61:0c:19:ed:a8:59:
         0d:fa:65:f0:83:cc:08:e5:de:c4:9b:1e:92:ec:d3:6e:51:cc:
         a3:6e:9b:1a:76:88:a1:c0:5a:e2:cd:72:5a:0d:63:ff:1b:05:
         8c:32:01:9a:a2:c8:45:cd:b9:e6:50:4d:63:f5:30:72:c2:d1:
         ec:68:cd:c6:cc:da:a3:13:a0:9a:d0:b9:3f:5c:7f:ca:cf:d6:
         19:e2:12:ec:80:9b:6e:10:48:68:25:35:17:56:7a:08:05:ce:
         90:2d:cf:7d:6a:8a:d1:b0:1a:2c:2a:b2:ab:2e:26:9a:99:87:
         ef:8b:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:41:00 2026 by rpki-client