Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed61dac0-8fb4-39e8-a61f-7f2644412f8f.roa
File:                     ed61dac0-8fb4-39e8-a61f-7f2644412f8f.roa (raw, json)
Hash identifier:          e3YCeDgS6LakD9J0PROyQ6Tidh7ZqcaIRukQEfywyEY=
Subject key identifier:   FC:EB:4F:51:60:43:51:AC:90:80:E5:4B:42:D9:6A:B1:D7:9D:4E:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA789DDE225501AD6326B0AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed61dac0-8fb4-39e8-a61f-7f2644412f8f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33667
IP address blocks:        173.165.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:dd:e2:25:50:1a:d6:32:6b:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c4cfb23-3e99-47d0-80a5-09e0994bc6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:cf:a6:c6:68:16:87:fe:cf:02:b2:8c:c9:
                    94:ef:cb:f8:fb:a4:9d:74:3c:da:a3:e8:3b:bf:cf:
                    16:dd:ef:ef:72:6f:aa:10:21:d1:81:22:bf:9d:53:
                    26:d6:19:f6:05:44:08:8e:21:fd:b0:3a:ab:06:f1:
                    50:ee:36:82:7b:e9:a7:30:3a:01:48:42:d2:74:49:
                    8d:20:28:7e:c3:56:37:ae:6c:b8:82:8c:ca:72:bd:
                    44:d1:5f:4c:0f:00:87:34:87:e9:e0:04:63:14:63:
                    93:13:9d:a5:29:3f:83:2e:d3:43:ca:75:9c:4e:58:
                    97:d8:a6:96:e3:97:0f:a0:90:4e:ec:20:15:17:8b:
                    d1:a2:0b:f6:6f:b1:51:af:0a:67:1c:4a:0a:a6:0a:
                    94:18:11:12:50:d7:65:1f:83:ac:25:b7:45:9e:29:
                    2b:71:40:ae:46:fe:3c:f5:b7:f0:37:25:18:4a:b9:
                    75:39:7a:b1:1d:01:4d:60:13:a5:e5:fe:fa:35:0d:
                    a6:b0:43:f0:19:6f:9a:40:ea:d1:2f:90:30:3f:68:
                    6e:9e:72:26:1c:1d:ce:6a:6e:55:00:4a:44:7f:a4:
                    47:cc:43:6a:4f:d5:01:05:93:4a:db:f3:9c:8a:51:
                    3b:a0:0e:dd:36:82:a3:09:e0:32:f7:83:bf:f7:90:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EB:4F:51:60:43:51:AC:90:80:E5:4B:42:D9:6A:B1:D7:9D:4E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed61dac0-8fb4-39e8-a61f-7f2644412f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.165.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:c6:a7:cb:e0:c6:80:1f:b8:8f:56:ad:da:4a:0f:b9:e8:
         3e:fb:6c:2e:18:df:8e:4e:0a:00:c8:04:b7:f4:8e:4f:45:0b:
         87:7e:c4:75:94:6e:ba:15:1f:de:02:54:cd:02:72:c2:fc:12:
         26:f6:e3:f0:f7:c2:00:dc:66:60:bb:f7:c0:c4:cf:cc:e5:13:
         90:80:56:eb:32:3c:a4:ed:32:e7:e7:7b:b1:d7:d3:2b:5b:5d:
         b9:68:e8:c7:4e:26:d3:25:f3:cc:ff:ab:82:0d:d7:bb:dd:43:
         98:d8:a8:da:ba:c8:5c:0d:98:17:07:be:b1:e1:ae:25:91:9f:
         94:d6:34:37:04:9c:f3:ca:c2:e8:cb:5f:cb:fd:1b:33:38:89:
         79:7e:d0:0a:78:49:57:a5:c1:f9:cd:dc:d0:1d:f3:50:7d:d0:
         fe:64:b0:55:64:ec:64:e9:fd:10:ef:4a:42:f0:f8:ff:4a:95:
         79:a4:bc:6c:b4:a9:e8:a5:6c:73:9a:35:90:fa:d0:e8:8f:a3:
         83:87:87:67:88:10:bd:b6:15:33:97:87:b2:e3:8f:fe:5f:9d:
         7b:0b:6c:f9:64:3a:80:9b:ac:c0:58:ae:6f:10:47:c8:dc:79:
         e7:2d:0c:22:f5:3a:0d:12:5b:5d:35:f6:af:9d:5a:c7:09:57:
         49:98:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:25:37 2026 by rpki-client