Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca25903f-9590-378f-b937-1a46cb33b2eb.roa
File:                     ca25903f-9590-378f-b937-1a46cb33b2eb.roa (raw, json)
Hash identifier:          LXZX3MZiVr6sWavf6VhYI5WKkgRp0/ozk/uJR3fwPew=
Subject key identifier:   D4:C5:23:D8:33:63:04:1F:7C:B1:21:06:6C:8F:C9:9E:9E:99:28:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BA21A4E8449F82E1741E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca25903f-9590-378f-b937-1a46cb33b2eb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        73.127.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:a2:1a:4e:84:49:f8:2e:17:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=977eb060-cce4-4cc0-9edb-066a5bd8f4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:6d:f6:10:12:ad:e0:ca:b3:cb:60:ad:0f:
                    f7:44:62:d8:92:2c:53:df:b0:82:e8:89:bf:d0:01:
                    55:bd:28:27:17:f8:0a:f8:a6:bf:b4:ff:a1:09:86:
                    c6:9c:75:7b:70:fc:5b:6e:f6:e7:c7:94:58:ca:52:
                    f5:03:0f:0f:41:76:af:79:19:ac:3b:d0:78:d4:93:
                    25:ee:45:71:45:a8:55:ec:9a:ab:97:5e:1e:2b:7c:
                    84:07:aa:5c:05:76:83:f8:d7:7e:ca:95:d7:ad:44:
                    98:5b:a9:bf:88:fb:f8:02:ae:0c:28:de:c0:1c:fc:
                    ef:21:9f:10:82:41:1a:cf:cb:41:da:b1:cb:fd:4f:
                    8a:99:97:f8:84:e0:bf:02:21:9d:bb:23:7b:f0:50:
                    f8:0b:d6:4f:a2:e1:0a:66:36:f7:95:64:52:83:05:
                    8f:92:8a:fc:fc:31:b6:59:d1:bf:59:76:d8:c9:23:
                    95:7a:db:6d:61:86:80:f7:d4:a0:9e:4e:5c:2a:3d:
                    46:22:5e:93:d9:38:da:57:c5:88:28:e1:ae:7c:d6:
                    3b:0b:e7:91:db:c7:dc:eb:ab:71:3d:49:b7:c8:0a:
                    ee:95:da:2b:25:35:cf:4a:91:ab:93:ca:53:90:94:
                    f5:a5:98:c5:d2:08:68:25:80:f7:dd:cc:3d:92:bf:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C5:23:D8:33:63:04:1F:7C:B1:21:06:6C:8F:C9:9E:9E:99:28:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca25903f-9590-378f-b937-1a46cb33b2eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.127.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:86:a6:6c:d1:f6:ca:b8:5f:b7:84:ba:46:a5:0e:d8:58:
         d8:7a:bd:01:e7:c6:58:46:6e:b1:59:c1:fd:b8:e2:e3:b6:bc:
         72:54:e2:a7:0a:b5:c9:13:1b:e1:cd:79:5b:3e:9e:7e:d2:66:
         38:33:3c:d1:4f:ed:d3:3f:8f:6a:34:40:e1:17:e9:a5:3d:1a:
         18:0b:c7:e9:b5:93:32:d2:cd:0c:16:ad:74:d0:63:12:72:2f:
         a2:04:71:f5:ab:84:31:38:dc:a0:90:1a:6b:d9:92:e5:e1:62:
         02:50:47:b0:53:df:25:31:d3:c8:91:44:57:55:70:c9:86:e1:
         ba:3f:74:01:3b:ae:b3:cc:4a:17:42:35:b5:cc:5f:dc:9a:98:
         1b:cf:a3:5d:3f:5b:d5:ae:a2:d4:35:74:15:af:10:16:44:9e:
         c8:31:2a:42:a4:3f:18:6a:4d:58:ac:b6:06:9b:85:ac:73:a5:
         ea:97:af:8f:80:1e:91:61:b3:1d:d0:c0:c8:12:a6:30:2a:0c:
         b9:66:a3:3d:0c:3f:40:01:71:a2:85:65:ed:05:f1:f9:75:29:
         26:31:88:35:70:bd:54:e8:8f:c3:1d:14:13:7d:6f:f4:bf:97:
         7e:e6:03:32:5d:5c:85:a5:aa:66:35:35:35:e3:89:1c:22:ba:
         46:39:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:14:52 2026 by rpki-client