Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1021fbfe-d898-370f-952f-b842306c4d1b.roa
File:                     1021fbfe-d898-370f-952f-b842306c4d1b.roa (raw, json)
Hash identifier:          LirHLArPjOg4/bbTe8Ug6glay1CxxjEW7o5IQTIDoGw=
Subject key identifier:   BF:24:D4:CE:98:58:A4:E7:D4:3F:63:1F:DF:30:65:37:92:89:54:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4979769B7DE96E4D8D86AB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1021fbfe-d898-370f-952f-b842306c4d1b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        73.94.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:76:9b:7d:e9:6e:4d:8d:86:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0a708789-0c80-488e-bcf1-0aba959cff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:32:56:73:39:81:4c:1f:f8:76:77:40:a8:
                    1a:dd:3e:34:9f:38:d7:1e:fa:32:56:6f:63:4c:48:
                    0f:b2:0d:05:ca:df:08:eb:66:31:54:ab:a3:de:ed:
                    29:0e:9c:b9:9a:ff:5d:cf:a7:2b:d3:bf:6f:c9:af:
                    66:f6:72:f2:ea:70:7f:d1:4f:d8:6a:b8:e2:e2:aa:
                    35:d6:60:6a:86:6a:54:10:d6:52:9f:8e:21:0c:e4:
                    c9:b2:bd:6d:f3:e8:56:e8:09:d4:73:27:96:8d:47:
                    43:8a:ab:87:2c:36:7a:b0:8c:bb:71:41:1e:0f:be:
                    69:49:79:16:7e:15:0c:a1:99:00:ec:bd:90:b4:df:
                    cc:27:a1:dc:45:2c:ed:84:18:d5:3c:fa:08:dd:bd:
                    12:90:4f:0f:2f:5a:7a:9c:43:aa:fa:30:88:31:53:
                    d9:4b:7a:95:9d:28:6e:6d:fe:f9:35:95:0d:b5:5c:
                    e3:42:f9:d1:4d:58:ef:ba:47:3d:29:c6:c8:b1:dd:
                    b1:3e:6e:f3:3c:bf:48:0f:b0:2d:bc:3d:21:16:96:
                    8b:2e:1b:34:e9:69:f7:86:82:e1:26:2b:8c:ef:39:
                    a2:35:a2:9e:ff:e1:41:29:62:92:3e:65:62:a2:ba:
                    07:14:a4:4c:79:f1:ae:b5:7e:3b:01:f8:23:2c:2b:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:24:D4:CE:98:58:A4:E7:D4:3F:63:1F:DF:30:65:37:92:89:54:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1021fbfe-d898-370f-952f-b842306c4d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:8f:eb:0f:0b:fb:5c:ba:bd:60:f9:24:6f:36:74:73:29:
         1d:73:10:07:99:cc:db:79:c1:5c:4e:e3:35:ad:41:29:e4:37:
         2e:d3:12:2b:64:31:89:5a:34:26:49:28:7b:c1:f7:3c:3d:0d:
         fe:b1:be:e7:67:36:42:54:ef:03:5b:8d:78:7a:41:0e:e9:0b:
         1c:e4:63:d0:b7:32:66:e1:92:3c:08:6f:2c:87:24:a4:f6:34:
         dd:e7:eb:0e:80:10:21:3d:31:9a:75:cc:40:7b:52:15:c1:cd:
         92:7e:10:53:de:04:07:eb:ee:d5:94:e0:85:ef:e1:ef:56:81:
         f4:c5:7e:e2:31:11:d8:f7:41:e9:70:84:bc:2c:28:9b:68:22:
         d0:e4:60:2c:95:f8:9a:7b:9e:94:78:08:c0:f6:e2:02:83:fd:
         ec:6f:9f:5a:4d:72:21:4e:05:b2:7e:1f:2e:cf:d0:01:ea:6b:
         c8:48:f8:a4:9d:48:e5:58:94:e0:05:38:2b:58:f8:6b:b2:eb:
         76:51:4b:0f:04:2f:bb:c4:a8:f0:2c:c3:7c:79:8f:37:2e:c7:
         db:7b:b6:77:f1:cd:81:26:21:87:cf:aa:48:36:0c:6b:f1:30:
         05:2a:de:c0:56:66:81:4b:3c:49:26:20:74:4f:38:9a:03:c2:
         8a:5e:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:51 2026 by rpki-client