Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa
File:                     73f67946-527c-3528-b0e1-cf375135a358.roa (raw, json)
Hash identifier:          M00s9UP7OdcBh+N8G5fN7Qdr8QM8oFXpiSM79wQ1Xoc=
Subject key identifier:   E8:95:E4:B2:6B:6A:D7:21:5E:E7:B5:B7:EC:BE:E5:E3:14:A1:C3:08
Certificate issuer:       /CN=a143f8bd-d0f8-462d-b90f-e89253313894
Certificate serial:       010D0C9F4328584E376460B1F774E4FF75A1BA60
Authority key identifier: D8:32:F3:94:FB:32:37:29:0A:08:62:DE:5E:84:29:AC:45:FE:9E:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     54751
IP address blocks:        216.150.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:60:b1:f7:74:e4:ff:75:a1:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a143f8bd-d0f8-462d-b90f-e89253313894
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=736f0412-d0d3-4b75-9946-de1e2c654c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:4f:56:38:02:80:25:40:5d:3e:2c:f8:d7:
                    af:42:07:d9:0a:80:9b:44:60:97:36:ee:5c:90:a6:
                    8f:1e:88:f5:e8:51:2c:ba:7a:6e:28:1b:59:e2:61:
                    c3:69:2d:8c:9b:e5:8c:40:a8:1b:47:c0:cb:3c:12:
                    9b:42:6f:11:f1:04:44:b0:d9:2b:f4:45:ef:c2:f8:
                    9c:2e:48:e5:83:49:0a:bc:97:3f:d0:84:13:50:98:
                    a7:d8:33:ef:26:56:72:62:cf:41:c0:26:ce:6c:54:
                    83:0e:ca:64:8f:22:c7:ef:ad:fb:f3:8a:16:b6:63:
                    d9:c1:cb:4a:ee:e1:aa:4e:0a:7d:9a:a8:ac:6f:cb:
                    ce:32:7b:14:11:f6:cf:94:e4:e5:e9:8b:f1:49:f7:
                    b7:05:44:5d:0a:28:e5:a5:b4:63:5a:b6:4b:35:1d:
                    39:ba:fe:ee:45:0c:e1:be:e4:54:f1:5e:9e:cb:1e:
                    f8:5c:86:5c:7e:60:44:7c:bc:e8:31:d7:48:6c:78:
                    3a:0c:05:22:78:cb:c4:0b:39:c3:2f:e5:22:e6:15:
                    bd:cc:25:a7:7e:62:c4:a9:af:18:23:b9:c6:1b:f9:
                    15:1d:c6:e5:0b:cd:db:80:75:c5:de:bc:de:1b:0c:
                    bc:d8:48:c1:21:08:f7:ed:02:ed:bc:c2:3a:ec:68:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:E4:B2:6B:6A:D7:21:5E:E7:B5:B7:EC:BE:E5:E3:14:A1:C3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/73f67946-527c-3528-b0e1-cf375135a358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894/a143f8bd-d0f8-462d-b90f-e89253313894.crl

            X509v3 Authority Key Identifier:
                keyid:D8:32:F3:94:FB:32:37:29:0A:08:62:DE:5E:84:29:AC:45:FE:9E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a143f8bd-d0f8-462d-b90f-e89253313894.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:c0:11:61:be:ad:ba:36:ad:b2:2d:63:ba:47:53:e7:22:
         07:e1:c4:60:ec:a2:26:fc:fa:7f:ea:e5:59:19:36:37:a2:a8:
         86:21:89:b9:bc:ea:9f:ce:99:78:47:2b:35:1b:c2:62:e1:c1:
         82:b6:97:77:3f:f1:a8:26:b3:1b:64:13:49:1a:d8:ba:d1:f8:
         6c:ad:b9:b7:5e:3c:26:15:d6:0b:be:96:b4:90:fa:24:8a:69:
         89:e3:47:5a:5e:4b:76:6e:31:26:53:7b:83:c3:71:e2:64:50:
         27:aa:15:5e:f6:d0:b2:4e:c1:19:8c:3b:ed:a8:02:de:a5:cd:
         63:d7:7a:7e:c2:79:4e:4b:10:c0:78:21:74:93:12:5c:2c:57:
         ab:dc:ec:72:c4:3f:03:a7:ac:b1:58:30:27:58:40:64:2d:1a:
         89:37:d1:4a:38:f6:a1:a9:53:45:0a:ad:93:ca:2b:a7:b3:a6:
         f6:c5:cb:ff:97:6e:46:82:71:b9:fa:46:b1:b7:bb:7b:e5:6e:
         2d:2a:18:15:4b:15:81:38:43:a8:7a:65:e0:f2:36:ce:ac:15:
         35:39:73:04:8f:f4:56:bd:2f:15:50:a4:f6:ab:d2:7b:db:ba:
         66:a5:b7:58:1d:ad:f1:9c:99:42:a0:ed:1d:b7:c3:74:31:66:
         29:19:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:47 2026 by rpki-client