Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb10cc39-4e75-3525-be0e-9cd4e4fe3524.roa
File:                     cb10cc39-4e75-3525-be0e-9cd4e4fe3524.roa (raw, json)
Hash identifier:          VEr1Cb6Pq8Q9B2uV/FNeSNf11NpX3x97cmousDn5ohA=
Subject key identifier:   44:0C:62:03:CD:22:F4:C4:B0:30:95:EB:F0:6E:2B:E5:27:D4:03:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144ECD32FA8E7F864D73F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb10cc39-4e75-3525-be0e-9cd4e4fe3524.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        73.43.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:ec:d3:2f:a8:e7:f8:64:d7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=f63cd6d0-0f9e-47df-a57d-7a2038070ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:b1:7c:2e:c9:95:dd:29:43:ce:cf:33:f3:
                    c9:6a:fd:2d:a1:cc:e9:c0:74:8a:df:7a:06:1e:7c:
                    b2:5d:d2:d7:69:8d:a7:e7:ed:eb:3f:bf:b5:90:8a:
                    46:23:63:da:e1:b0:db:d9:c4:df:f0:24:db:6c:18:
                    b2:3a:43:53:a0:d6:eb:bd:00:f3:dc:a5:7a:5b:7b:
                    dc:8f:e8:db:bb:f7:f9:a5:7a:a0:54:b6:6c:a5:67:
                    b6:73:10:ff:eb:dc:42:4e:b5:02:d9:a6:63:bd:4b:
                    3f:fb:f7:c8:4b:99:31:53:c8:7c:3f:74:87:9d:f3:
                    67:36:76:88:9a:0e:08:fa:09:08:ba:99:a2:e6:86:
                    f8:16:c6:3e:ad:69:3b:85:ad:62:e7:49:2f:e0:b8:
                    8b:c9:94:a7:ec:57:ba:45:8c:93:d5:7f:22:6b:a9:
                    6e:47:50:0b:3f:9a:8e:0d:4c:4e:01:06:1a:d7:26:
                    88:af:30:ff:da:25:6b:cb:3b:5d:d2:94:83:3a:31:
                    86:bc:53:3e:77:24:db:6a:a0:3c:8a:39:61:5e:de:
                    60:5a:82:92:76:40:5a:37:55:d5:a2:0f:b7:a0:72:
                    fe:ab:b2:6b:46:f4:95:24:17:f3:b3:bd:1e:43:51:
                    98:7b:05:8d:a5:70:5f:2b:7f:b2:53:e0:2e:20:a8:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:62:03:CD:22:F4:C4:B0:30:95:EB:F0:6E:2B:E5:27:D4:03:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb10cc39-4e75-3525-be0e-9cd4e4fe3524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ec:c4:bd:e1:38:09:f2:21:d7:e6:62:18:1a:e7:0f:1f:80:
         a2:0d:81:fe:61:20:c3:b2:49:c9:71:61:18:70:db:cd:3f:bb:
         31:5b:2a:9c:90:9a:2b:ee:2d:ed:39:9c:04:21:ba:f8:3d:a7:
         5a:62:10:a5:37:69:79:29:a9:ea:87:4e:c0:0a:df:8f:16:84:
         da:e2:84:9e:17:52:4c:de:39:d1:e5:1b:81:71:28:ae:c1:fb:
         1b:ef:61:52:22:0a:a6:33:c2:d1:8c:47:df:0d:e4:8d:48:48:
         6a:1b:43:36:ff:70:bb:7d:78:c8:c2:d4:f3:80:41:d1:c7:46:
         c1:c2:40:cd:dd:64:d0:cb:90:f4:e6:30:fb:db:82:39:8a:80:
         27:2a:da:aa:44:0f:03:21:3a:64:43:d9:43:18:66:38:e7:b8:
         a9:cd:a8:0f:95:f7:f4:17:da:c9:de:44:b8:12:1c:e3:ea:d7:
         a2:e0:e9:c3:36:0a:15:3f:35:51:de:b6:91:b4:84:10:b1:70:
         e1:62:3f:b4:60:31:4e:c9:f6:7b:4f:a6:2d:17:41:e1:8e:7a:
         02:09:72:97:cd:0e:51:2b:9d:ed:46:ec:ff:cc:c6:85:90:48:
         0b:58:6d:c8:71:4a:7c:b6:31:4f:00:9f:91:16:b6:09:0e:32:
         45:b4:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:27 2026 by rpki-client