Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa
File:                     2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa (raw, json)
Hash identifier:          4SJT5AkIiftkssXVf7ZILD1PXlhdJKDX/pvwuU+uXCI=
Subject key identifier:   D9:AD:47:61:DA:AE:71:33:F7:D0:F2:0A:2D:78:93:BE:69:23:A4:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EA6DA6937070F43466D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.178.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:a6:da:69:37:07:0f:43:46:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5f2c613e-918a-4a2b-af60-543a07bae7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:89:47:39:17:bf:f9:40:c4:2d:9e:54:7b:
                    8b:93:87:ae:24:6c:47:3c:f1:30:57:7d:7a:a9:5d:
                    9a:71:aa:89:4f:bb:22:7b:17:91:80:91:6b:1f:4a:
                    5e:91:45:b6:63:4a:c6:8a:8e:48:26:3f:bc:06:2f:
                    f5:65:bf:18:fa:c0:98:6c:90:dc:2e:c1:b8:6a:dd:
                    3c:31:b6:de:4d:d7:de:d1:91:e5:60:0a:a7:a6:4f:
                    ea:27:ea:35:d9:66:0b:39:81:7c:f4:b8:1f:a6:bb:
                    0b:e1:c9:a8:e9:74:61:ee:4a:e9:d7:5c:ed:47:65:
                    f5:e5:91:12:af:00:52:a3:c9:cc:61:78:13:a8:f0:
                    40:ec:1d:15:23:17:54:8c:92:d9:5e:02:03:90:1a:
                    cf:ba:97:de:58:9e:0d:6f:52:21:56:dd:e1:54:2d:
                    49:4f:bd:1e:c3:b4:17:36:ab:57:98:a4:12:29:89:
                    eb:f8:52:48:7e:ad:95:c6:2f:f8:06:29:69:b7:51:
                    22:88:d5:c2:59:8d:df:a3:40:22:bf:bb:a8:66:70:
                    07:ce:e3:c0:ee:89:26:b2:59:cb:b0:88:0c:1f:1d:
                    1a:b5:0c:7f:b1:be:d4:76:cf:a7:da:b8:5e:3f:2d:
                    b9:d3:a4:00:00:22:83:e9:4f:6c:f9:4a:6c:d5:a0:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:47:61:DA:AE:71:33:F7:D0:F2:0A:2D:78:93:BE:69:23:A4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.178.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:da:ea:3c:c5:73:69:c5:ca:c1:85:66:f2:1a:41:4c:d7:2e:
         01:b2:e6:17:5e:7c:76:24:57:1b:6c:09:1f:18:76:65:c7:46:
         7e:de:1f:b0:b5:1c:ac:46:38:7a:3d:fa:1a:5e:54:06:76:91:
         dc:2e:5a:49:3d:e1:72:c8:51:ed:39:8d:fd:a1:8e:c8:37:f4:
         d5:d1:fe:89:ed:27:cd:3d:72:60:9d:e2:e1:9b:54:29:2e:3f:
         eb:4e:46:70:e0:70:74:12:93:e5:ca:f6:08:12:05:43:fb:e1:
         67:10:ed:3c:26:95:70:05:1d:14:fa:70:32:ab:4d:da:ad:f6:
         a4:fe:13:e0:c2:86:ff:e9:12:29:56:96:36:df:ed:fc:09:04:
         82:83:94:a0:3e:8b:12:7c:97:2c:02:af:d0:31:8d:0c:83:b3:
         95:b2:f0:48:28:b5:b6:d2:02:da:6a:cb:28:d8:d8:b4:5f:3a:
         d5:04:cc:30:af:81:f4:b3:91:25:f6:a4:aa:01:8f:0a:51:95:
         55:f9:83:67:c7:f1:d1:5a:d1:1a:fc:4a:02:ea:76:68:d6:7b:
         3f:77:cf:c6:b7:b6:a2:b1:25:3b:fe:9f:f9:4b:a4:50:8a:a8:
         f6:9b:fc:72:42:99:33:e6:7d:05:e0:a3:3c:bc:c5:4a:b3:ef:
         0b:8b:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:55:04 2026 by rpki-client