Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a63c55a-4f69-3145-a0a3-56255488ce42.roa
File:                     0a63c55a-4f69-3145-a0a3-56255488ce42.roa (raw, json)
Hash identifier:          YFRZGqoeXXN8PG779r1qMKeIzw3HgvKn3Xj5ZYoeGlg=
Subject key identifier:   A2:A7:83:1F:80:C7:19:9E:A4:11:A8:C5:9E:F2:A0:93:7A:1A:91:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78B080EE266F7B724A5CB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a63c55a-4f69-3145-a0a3-56255488ce42.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33491
IP address blocks:        73.102.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:08:0e:e2:66:f7:b7:24:a5:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d286741-85de-4766-a100-a8c3548bb841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:db:3d:6a:80:dd:c7:b1:f5:35:d5:e1:80:
                    e2:3e:3d:56:29:64:58:43:10:36:64:13:13:18:1a:
                    f5:8e:57:fa:46:9d:50:be:d5:f8:6f:9f:77:d3:2a:
                    6a:a5:ac:b6:ae:fa:ab:9e:b6:2b:a9:de:83:f2:4b:
                    14:72:2f:b4:7b:5c:0c:b6:c6:0e:06:0a:7e:9e:dd:
                    f4:86:36:36:1d:74:f5:ec:52:87:28:e2:7a:91:28:
                    b3:aa:16:e7:32:8f:73:db:b8:63:54:95:e2:fe:67:
                    05:36:e8:2a:77:80:19:e7:1c:2b:09:97:02:41:fc:
                    7e:00:e6:d5:0d:c8:6d:7d:a2:66:44:8f:8b:c2:10:
                    43:14:56:37:f3:b5:2b:b1:30:37:9e:5d:b1:21:2e:
                    88:e6:f5:39:c4:3e:72:5c:2f:97:60:1e:27:db:2f:
                    f0:62:db:31:c4:6f:8f:21:72:cf:ed:7c:92:a3:81:
                    e5:7b:3c:1c:53:ea:e4:77:f7:b7:6c:4a:a6:82:a4:
                    67:8c:da:77:f8:9c:51:a5:81:98:ff:a4:e3:71:94:
                    a0:fc:09:a5:44:69:cf:99:73:42:49:6f:45:06:92:
                    2c:66:4b:c3:8c:2d:a2:83:db:5e:67:0b:be:63:1d:
                    4d:00:59:08:07:82:65:ab:d2:9f:51:5c:b2:c7:86:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:83:1F:80:C7:19:9E:A4:11:A8:C5:9E:F2:A0:93:7A:1A:91:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a63c55a-4f69-3145-a0a3-56255488ce42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.102.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:b8:82:e4:5c:90:60:86:c6:d9:42:6f:b7:5a:a9:20:5e:
         57:6b:41:82:fe:38:e1:0c:30:07:98:ea:57:c9:86:12:38:d8:
         ab:8d:9e:29:dc:db:c3:1b:f6:36:de:6f:e3:dd:cd:79:d6:b8:
         d7:37:ed:3d:46:9c:db:b2:12:00:c0:58:00:7d:37:25:10:57:
         c2:59:72:7d:69:8a:97:2e:bb:72:b0:12:97:81:fc:40:25:df:
         60:64:2f:01:ae:07:92:fc:db:ad:27:21:f1:55:76:72:cc:8b:
         17:75:d0:ea:d1:99:06:f3:01:09:9f:8f:3a:76:27:e2:c2:80:
         5e:09:59:21:46:e4:21:ec:d0:8f:a6:ca:d4:77:3e:69:12:07:
         d9:40:8c:2d:33:8f:f1:1d:bb:9f:9b:51:72:2a:8a:ff:54:ba:
         1d:54:23:ce:eb:77:19:cb:77:d9:ff:68:79:ca:44:9e:5a:34:
         0e:1e:ae:4d:66:87:3c:4f:f8:4b:32:cc:bd:b1:e4:a6:5a:6a:
         d4:bc:a5:ec:44:8a:28:93:63:9f:4d:6d:d5:47:3b:7e:53:ef:
         26:de:d1:0f:73:6f:7f:fd:2d:d0:cd:cc:e6:ca:21:16:94:75:
         bc:e4:98:c6:a7:f8:92:ff:45:0c:1b:32:e6:94:71:a5:64:38:
         56:ad:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:52 2026 by rpki-client