Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52509e8-6d1c-32c7-b765-5bc28583e168.roa
File:                     d52509e8-6d1c-32c7-b765-5bc28583e168.roa (raw, json)
Hash identifier:          l4mxQWcN8/z7y6lkJ/THgMJPVKVUi11CmI/V0SU8f74=
Subject key identifier:   0C:EE:65:42:54:9F:57:E5:8C:E0:FE:50:A7:1E:6D:10:0B:6E:1E:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8620759A5BE2656B7108BA4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52509e8-6d1c-32c7-b765-5bc28583e168.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        73.164.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:07:59:a5:be:26:56:b7:10:8b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d19a6711-18d8-4b9e-bf46-2e9987e88321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:70:ad:49:a7:9e:e9:e0:3a:19:91:cc:e1:
                    0c:57:ef:e3:ce:f2:36:f7:a0:4d:8e:c4:12:0f:b2:
                    4c:5d:3a:8c:a2:f7:21:4f:06:31:82:1c:d8:6a:09:
                    1f:8d:76:36:48:75:7a:19:5e:d2:d6:b6:cf:66:cb:
                    19:3c:e4:84:14:b6:42:85:80:b7:c6:84:28:55:89:
                    f6:65:c3:b1:ee:c4:b0:5a:a2:7e:ab:75:d4:e4:94:
                    75:ab:78:39:57:7a:7b:35:97:dd:7d:8b:1d:92:08:
                    bb:94:5e:b6:d7:d8:23:b4:1e:c1:d6:b2:3c:a0:75:
                    16:c4:2b:93:e6:b0:f4:8e:69:4b:9d:d5:d9:3d:fa:
                    67:ba:04:41:99:d8:ea:86:a1:43:7a:4c:68:c5:e5:
                    b4:bb:40:e5:f4:7d:8e:de:d9:e3:7c:c6:40:9c:36:
                    dc:12:2a:bc:cc:9a:cd:16:7a:c7:50:1f:0f:f5:0b:
                    53:ae:1d:0d:3b:e1:39:24:4a:fd:eb:fa:de:b2:5f:
                    e8:98:bc:36:ff:07:51:fa:89:47:7d:d5:40:35:01:
                    1b:f4:3d:c2:f9:2f:9d:59:c7:8b:97:a6:20:9e:c6:
                    57:3e:3a:78:46:34:01:33:ab:33:bf:71:e6:8c:ce:
                    1d:82:19:6e:72:ba:b6:3a:ec:7f:85:d7:f5:2b:df:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:65:42:54:9F:57:E5:8C:E0:FE:50:A7:1E:6D:10:0B:6E:1E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52509e8-6d1c-32c7-b765-5bc28583e168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:b0:1e:ed:ee:23:e9:54:ba:ee:9a:24:0a:50:ab:d2:4e:
         9e:44:b3:4c:18:10:3c:d4:13:d0:fb:88:4d:c8:89:1d:d1:0f:
         9a:0a:0d:38:1f:cf:12:86:a9:ab:01:57:13:47:8a:da:fa:5b:
         17:a3:57:bc:b7:80:35:b6:df:43:61:a8:a5:ab:54:be:2a:2a:
         b5:0b:b1:23:3e:13:c5:46:de:b0:16:02:cd:78:7b:9e:bb:53:
         21:49:ed:9f:52:fa:22:09:ad:79:10:2d:86:2e:d2:16:03:31:
         df:3b:3c:73:77:18:4e:39:45:92:da:a8:50:25:3d:05:e6:5e:
         50:80:0b:a1:89:ad:c9:bc:04:a5:80:64:70:43:2c:75:ec:01:
         49:e8:a1:98:bc:24:79:29:74:58:71:40:02:3a:3f:de:8d:89:
         e8:b6:80:76:19:14:c1:56:b8:c0:8e:25:26:f7:d8:f6:fe:d1:
         3c:05:3a:89:63:a1:f3:c2:a7:89:8e:38:0d:30:d4:a9:c0:fb:
         1f:c1:d9:0c:3d:eb:aa:18:ed:13:e4:d9:a8:60:85:78:e5:9d:
         89:09:1d:05:d9:68:d6:2f:a8:15:16:a0:1a:fa:79:9f:6f:d6:
         27:eb:c1:db:bc:38:a1:d7:62:8b:b3:f6:7f:bb:c9:72:2a:f4:
         bc:7a:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:33:57 2026 by rpki-client