Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed8d2d6e-78c2-3ff5-ba6c-a1ad778685e1.roa
File:                     ed8d2d6e-78c2-3ff5-ba6c-a1ad778685e1.roa (raw, json)
Hash identifier:          3t9EaOa3qIHfPbtFig3tHZ3RvACZBda1myjSQuLydhE=
Subject key identifier:   57:F5:4A:61:27:6C:7E:C2:A6:3C:36:4D:04:8C:3D:FB:5A:67:A2:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FCF326C4EC6E27CBD2300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed8d2d6e-78c2-3ff5-ba6c-a1ad778685e1.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.166.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:cf:32:6c:4e:c6:e2:7c:bd:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=a75c5097-335b-44a6-85ea-a7f44d951a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:45:d6:36:15:42:7b:af:f3:af:56:35:1c:
                    bd:b5:66:32:90:ee:62:ca:33:c2:8c:cb:17:92:5e:
                    33:60:71:07:68:f1:53:47:70:e5:39:7e:ce:d0:23:
                    57:f7:d5:e1:fc:74:9e:61:1d:e8:ae:29:c0:f9:d6:
                    0d:65:01:01:1b:f5:f1:dd:20:58:8f:76:be:0d:eb:
                    5d:d7:2c:15:63:8f:6a:f9:44:ac:a7:88:b2:63:a6:
                    d9:f2:be:4f:c1:73:3b:16:7b:47:a2:99:b9:4a:97:
                    2d:b7:7a:36:5f:ba:63:31:ea:45:d4:51:19:bc:d3:
                    f5:26:ff:4f:cd:db:8b:79:a3:c6:58:af:af:5c:9d:
                    f1:ba:62:c5:47:72:7b:32:d9:8f:0b:7e:bc:41:e7:
                    03:f1:05:0e:09:fd:d8:5d:9d:02:21:01:cc:38:08:
                    2f:f4:48:34:82:4c:90:e5:66:9d:e1:d7:1d:84:97:
                    e8:9c:af:dc:7d:f5:7b:bb:a4:c3:03:f5:f6:71:dd:
                    7c:a5:9b:89:73:38:c9:55:ab:56:68:04:26:bf:0a:
                    60:7f:ba:ff:65:8a:48:a3:c5:7e:fb:57:02:63:87:
                    0d:0a:70:39:5c:95:ca:af:fb:28:b8:02:be:58:8d:
                    95:3e:4a:2e:6b:db:2a:36:c7:79:f0:36:51:ce:fe:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:4A:61:27:6C:7E:C2:A6:3C:36:4D:04:8C:3D:FB:5A:67:A2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed8d2d6e-78c2-3ff5-ba6c-a1ad778685e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.166.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:fc:f6:07:6c:01:c7:46:e4:3b:73:01:90:ec:6d:f1:5f:
         6c:77:da:97:3b:a6:e4:ea:d8:a9:b9:2e:87:f7:7a:7b:e9:5f:
         5b:3a:42:72:12:c0:0f:23:cd:8d:c9:a2:db:02:af:a4:48:53:
         af:80:a0:a0:c8:1d:d4:5f:fa:cc:d8:ac:ac:46:71:13:55:2e:
         a2:62:cd:b0:76:9d:3a:9f:fc:db:e4:81:14:75:7b:29:43:c5:
         f8:59:7d:b3:e9:b2:ab:83:00:25:c2:53:f2:96:1d:d8:de:1f:
         64:29:76:af:c7:a2:f6:c4:80:60:81:48:64:b5:3f:cd:5b:9c:
         28:01:2d:23:98:bc:ca:eb:88:ea:6a:99:d1:fa:e5:bc:a7:d8:
         e0:b9:3a:ce:28:54:72:f6:d0:15:f4:7f:0c:71:36:91:db:43:
         ac:87:63:27:e0:39:30:3f:e8:69:b2:ac:88:81:83:f1:c8:28:
         88:91:69:55:56:61:4b:38:6f:d9:d1:42:fb:a5:f1:a0:82:fe:
         72:f4:be:c6:4c:19:d7:f0:06:a9:e0:d7:ae:a0:da:fd:fe:2c:
         02:78:cb:4c:a6:76:74:83:2f:be:6c:15:68:a7:4b:ab:2a:4f:
         70:e9:9a:c1:97:2f:b5:95:d1:5f:17:8a:30:36:1c:87:6c:a2:
         d4:3f:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:31:43 2026 by rpki-client