Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0b5dc0-78c6-374b-ac3a-cd42ee92a3f8.roa
File:                     cf0b5dc0-78c6-374b-ac3a-cd42ee92a3f8.roa (raw, json)
Hash identifier:          9BiDAWV+VYOYWk+1KpSuSgl6E0nI7AWq1zSWRTp6zNU=
Subject key identifier:   CE:F0:F4:5D:22:B1:AB:F2:3B:3F:A7:4B:87:CF:45:7A:13:50:A4:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E12F0A4431DA601FD2980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0b5dc0-78c6-374b-ac3a-cd42ee92a3f8.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.252.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:12:f0:a4:43:1d:a6:01:fd:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4953a324-bc4f-4562-8cfb-21b6f81750bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:f5:81:3a:86:bf:74:28:44:53:be:0a:9b:
                    40:5e:fd:25:21:da:bb:e4:37:e3:68:af:90:00:12:
                    75:7a:fc:17:9a:b4:6a:0a:c9:ad:c1:4a:e1:2d:34:
                    76:71:f5:69:27:2a:55:6f:45:90:fb:ba:90:02:92:
                    b2:b0:d0:93:6d:b9:c3:60:f4:7f:4b:cf:cb:a3:4d:
                    e1:11:85:70:4d:5e:b9:fa:2e:b8:e5:46:da:be:f6:
                    69:77:34:00:6e:42:e1:fd:87:60:e3:a2:11:4a:d5:
                    8f:f3:6d:a9:e1:2a:25:56:3e:63:31:30:e9:e8:ec:
                    a9:4e:99:a7:92:9c:16:4a:07:e9:f4:14:35:b8:27:
                    05:5c:ff:1a:71:1b:31:58:09:65:24:04:7c:f3:b3:
                    fb:74:68:9c:51:29:68:2d:f0:cb:f2:10:08:3a:82:
                    42:26:58:75:49:f1:51:58:16:9e:99:3f:53:41:72:
                    05:67:0d:89:25:14:9c:3d:22:56:f7:50:a3:dc:fd:
                    c3:42:8c:70:81:93:95:db:0d:57:cc:29:3c:e6:ef:
                    ce:d4:08:80:f1:a6:63:49:eb:1d:74:71:25:f9:34:
                    e2:8c:7b:1b:e1:b8:5c:c6:73:ff:7d:87:98:ed:9b:
                    14:dd:28:cf:22:ae:f2:a5:2b:25:8d:a3:98:74:02:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:F4:5D:22:B1:AB:F2:3B:3F:A7:4B:87:CF:45:7A:13:50:A4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0b5dc0-78c6-374b-ac3a-cd42ee92a3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:05:7a:a2:03:73:47:0d:59:8a:e9:f6:c0:1c:96:f4:47:
         a6:dd:24:bc:ed:c7:2c:ab:b8:bc:d1:cb:8b:47:bd:04:f8:b1:
         b9:75:d9:6f:78:8d:fc:cf:38:dc:b5:34:09:fa:9b:b3:5a:95:
         25:ba:2f:5e:5c:5c:95:a1:51:83:f8:5f:bc:43:0b:22:ba:87:
         4c:53:3a:dd:93:c1:56:51:6d:41:89:2a:04:16:2a:ad:0e:97:
         5e:30:cf:86:ae:a5:a5:27:0f:d3:03:26:20:3c:99:f4:00:48:
         07:15:71:7d:ee:6e:1b:bf:0b:d3:f1:85:cc:c7:fc:b7:d3:28:
         42:64:eb:08:fd:b4:39:df:d6:1a:36:24:9b:ad:66:e5:ce:f8:
         ed:60:88:fa:c9:98:38:81:59:83:68:31:77:7d:a9:fe:2c:9e:
         41:33:33:e4:a6:89:85:6b:c7:fc:da:30:dd:a0:75:3b:dd:55:
         0a:82:d9:7a:fa:d7:ec:da:9b:b7:9d:49:5f:4c:4b:62:f9:13:
         6c:e3:b0:9b:7d:6e:47:a2:15:c3:a7:76:5a:9d:04:6d:7c:44:
         c0:b5:0c:42:f3:8d:73:24:b5:98:47:4f:e6:64:1d:ad:b2:03:
         a8:5d:3e:f9:71:4b:31:07:3b:d0:e0:6c:cb:67:a7:0a:5b:34:
         f7:10:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:51 2026 by rpki-client