Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa315b8a-95a6-331c-b035-4a84735f9cd0.roa
File:                     fa315b8a-95a6-331c-b035-4a84735f9cd0.roa (raw, json)
Hash identifier:          XTFZFZupkSCYxN34MVE54cYSlCmU7+t5ufBSkvEIa6M=
Subject key identifier:   3D:EB:3F:F6:64:07:23:23:FC:E4:79:41:3D:89:9B:20:3A:0A:CD:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862C8E050B9BFE0D60FEA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa315b8a-95a6-331c-b035-4a84735f9cd0.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        73.144.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:c8:e0:50:b9:bf:e0:d6:0f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=98da87f5-f64e-422c-b86d-f4d55cd885f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:d7:22:c4:8b:67:86:64:f7:31:a3:33:d9:
                    ef:f8:79:86:21:cb:f5:78:75:33:ce:39:4b:ff:c7:
                    08:0f:11:ca:81:70:f0:db:c6:65:ad:fa:3f:3e:00:
                    b8:e8:fb:cf:1e:93:4e:80:8c:d0:05:9e:1e:06:a3:
                    fc:59:42:b8:f5:b7:57:77:97:3a:c6:3e:e1:12:86:
                    21:4b:d4:4b:83:5f:1a:71:9f:e9:54:df:d1:b7:71:
                    10:0b:db:19:b3:2c:5e:07:2f:50:36:01:75:0d:ba:
                    94:12:77:b5:ca:5b:66:36:99:c5:95:7c:3a:30:8d:
                    de:34:52:41:14:81:fb:90:4f:bd:02:ae:fc:f4:35:
                    66:7c:a9:f2:92:5b:ea:0c:31:0c:b1:7b:4e:f3:75:
                    ff:e0:28:91:20:63:f3:17:1a:c2:2b:d0:b3:ff:90:
                    04:31:23:ee:eb:c7:ba:6d:59:ea:ff:8b:02:88:46:
                    54:08:0f:7b:92:6e:62:2e:97:6c:d2:84:a5:56:51:
                    dc:7f:5d:fd:af:9c:ea:e7:f9:fe:d7:ba:13:2f:a6:
                    24:d4:c0:ea:24:f2:19:63:89:b4:76:cb:66:a0:00:
                    1a:c5:57:24:ab:4d:c6:42:27:7c:7c:2c:04:22:f4:
                    65:98:06:91:0c:c2:8b:c5:d2:5f:01:fe:8d:fc:d8:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EB:3F:F6:64:07:23:23:FC:E4:79:41:3D:89:9B:20:3A:0A:CD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa315b8a-95a6-331c-b035-4a84735f9cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.144.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:b4:5f:21:89:a6:a0:91:f6:5e:d0:96:98:d9:f9:93:de:
         7d:84:f9:0d:1d:aa:ac:b8:5a:21:5b:a8:bb:93:82:bb:cd:c7:
         0f:5c:3c:23:cf:34:87:f5:4b:69:fe:93:39:14:04:36:63:ac:
         64:cd:0e:3e:97:de:52:a3:15:ba:ee:20:dd:22:5d:87:4b:2b:
         6f:a9:59:46:4c:eb:d8:42:a4:a3:0a:8c:b9:b9:85:0b:b3:33:
         be:5c:84:14:62:e5:d9:df:b7:3b:9c:86:80:82:83:7b:2a:e8:
         00:82:84:43:62:71:21:f0:d4:d2:ad:5a:b5:08:b4:30:d0:26:
         c8:56:56:63:24:ff:e3:14:09:8b:3e:63:f3:40:d6:e8:07:1a:
         24:dd:55:9a:54:7f:04:e5:23:99:a9:9c:ec:f3:c5:61:82:93:
         5c:41:bb:2b:86:f9:32:1f:8d:f0:f3:4b:93:8c:5b:05:3a:e9:
         5b:52:b3:06:0e:ef:6c:e9:cf:8d:b0:7a:bf:54:02:6f:6c:a8:
         37:a2:09:82:fa:3b:da:d0:36:e8:95:64:27:21:4f:1f:fd:db:
         82:be:3c:45:f6:cb:32:fd:92:1c:93:9c:e9:f9:c1:a7:85:fc:
         22:b7:89:85:5b:f9:26:73:2d:84:6d:9c:0b:f6:0d:24:70:59:
         43:a2:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:30:30 2026 by rpki-client