Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df2ff3eb-8d1b-3c9b-8363-e6c5470fac00.roa
File:                     df2ff3eb-8d1b-3c9b-8363-e6c5470fac00.roa (raw, json)
Hash identifier:          0s+nyvfdX2JUdrBVIfNpsPX+x/OcStYQydH8fPZEqfU=
Subject key identifier:   FD:B7:EF:B7:3F:B9:B4:F1:50:20:75:AE:0D:D9:1A:C1:19:77:B3:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E9A8D92C59FFE3794DB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df2ff3eb-8d1b-3c9b-8363-e6c5470fac00.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.115.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:9a:8d:92:c5:9f:fe:37:94:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=50b4a2c0-e408-4ddf-ab13-d6398bddb3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:90:b3:6f:55:3b:76:f0:b2:73:ff:8d:99:
                    e7:8b:f9:1e:ff:63:9f:6c:93:42:6b:a5:52:7e:68:
                    d2:b5:68:eb:9a:8c:f7:b1:5f:51:31:4b:44:43:c4:
                    76:56:e9:5a:bd:22:cd:05:85:8a:5d:95:99:23:6a:
                    19:fe:d9:e3:ed:b2:a8:8f:ed:00:cf:3a:38:80:20:
                    7a:5a:c4:c8:05:86:fb:3f:4c:ac:2f:e3:c4:46:0e:
                    cf:53:85:16:ea:5b:ac:bd:1f:c8:fe:15:88:f2:e7:
                    6e:e6:e2:c2:2e:43:06:c0:7c:a8:f6:8f:8f:78:71:
                    20:38:6f:d1:83:e8:d1:e6:b4:b2:b7:c3:ec:07:ee:
                    77:96:df:83:0e:85:ef:88:a1:f5:3d:53:78:1f:8d:
                    91:ae:60:4d:f5:74:57:e2:7e:47:f4:ff:17:ba:86:
                    4a:7a:fc:52:22:40:05:e1:4d:8c:ec:01:58:1c:ce:
                    48:2e:1e:d3:23:ec:3b:16:63:f7:7e:ba:2b:b8:92:
                    91:69:3e:41:cc:e0:ef:83:26:68:70:ba:cf:36:40:
                    d2:27:7b:e4:6d:cc:45:1f:fe:c0:7d:38:d8:10:77:
                    04:19:66:51:93:e1:ba:2d:6a:00:16:10:c9:c1:e4:
                    8c:5b:22:93:1e:d6:89:01:34:45:bb:03:a2:11:3b:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:EF:B7:3F:B9:B4:F1:50:20:75:AE:0D:D9:1A:C1:19:77:B3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df2ff3eb-8d1b-3c9b-8363-e6c5470fac00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.115.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:09:a6:64:0b:11:c9:72:01:1b:73:37:a7:99:9e:a2:c1:
         61:72:5f:5c:96:78:d4:f8:10:38:0c:15:7c:17:c3:74:c5:4b:
         cd:c8:01:15:de:04:d3:64:21:c5:cf:e0:f5:7c:b8:64:8f:db:
         ba:81:a1:87:c0:e2:60:08:af:01:15:dc:76:ad:33:64:7b:c8:
         1a:9f:ae:62:d4:bc:24:bc:5c:aa:29:fe:8c:8b:b3:81:f6:06:
         25:1d:c0:75:f8:2b:d6:29:98:bd:ac:d8:d6:39:ab:3d:74:81:
         44:8d:0b:75:a9:b4:e1:d3:3a:0c:09:e9:c7:d3:1f:0b:05:40:
         b7:4b:0a:64:ac:85:c1:0b:13:6b:42:08:36:d1:cf:90:a6:a6:
         a0:32:81:dc:13:55:66:cc:62:38:5c:2b:d2:ca:95:52:f2:12:
         8f:63:11:bb:f5:74:22:88:14:7e:d9:7c:3b:7e:10:53:ac:2c:
         4a:0a:71:ec:13:15:e6:ed:6f:9b:37:db:0b:0b:47:b2:90:de:
         8f:4e:7a:9d:ae:80:5c:6d:c3:93:6b:77:9f:53:36:b5:e0:62:
         bc:69:36:50:7e:fc:74:ef:f2:f4:da:85:87:db:a4:de:4b:d7:
         aa:a2:7e:c1:6c:ba:ae:fb:ab:96:09:4a:32:45:eb:3f:95:94:
         65:28:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:47:40 2026 by rpki-client