Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b33d5ff-0538-3023-bef5-b63003f0cd78.roa
File:                     3b33d5ff-0538-3023-bef5-b63003f0cd78.roa (raw, json)
Hash identifier:          BWqTNRdUSbyFlQ6wdw8se81slkvyYuOjCfKyxCS2YIM=
Subject key identifier:   73:83:E7:05:E0:1F:34:9E:BF:46:64:C2:4E:78:D4:BE:B8:55:A4:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497A0F4411D4441F13CFD440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b33d5ff-0538-3023-bef5-b63003f0cd78.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        173.15.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:0f:44:11:d4:44:1f:13:cf:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8dbc8f55-87fd-482d-a279-4311f9fc1e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:55:1e:e8:05:8e:96:52:cd:2b:a1:0c:c8:
                    0c:c1:f8:3b:ac:49:c8:de:ab:2a:72:eb:9f:a9:8d:
                    85:ad:25:8a:d3:a4:3a:aa:28:40:89:95:2d:c4:df:
                    ca:98:8f:f4:ee:db:f4:5c:ed:c6:8f:5c:a0:1d:0f:
                    fc:fe:07:5d:4e:1e:35:bd:95:13:8b:39:f0:9c:d4:
                    d1:91:ad:ac:09:e5:fb:c5:35:c8:a1:b6:83:47:fe:
                    89:f7:71:9f:9a:8c:54:2c:2a:1d:44:9d:72:bc:c1:
                    b6:ce:c6:79:9c:52:59:a7:af:5f:01:79:cd:eb:fd:
                    03:4e:73:c5:89:b9:68:22:26:d8:8b:54:d3:bb:0d:
                    32:96:2f:8b:c4:de:52:53:46:4e:2e:0e:9c:98:16:
                    08:02:34:50:ff:8b:92:aa:b2:e7:6c:dd:ce:f7:a8:
                    19:da:5a:ed:c0:60:84:e5:a5:4d:f0:d9:82:9b:0b:
                    e4:b7:5e:b2:fd:c5:0b:2e:a3:77:e7:bd:f6:2d:c6:
                    ef:99:b7:38:f3:01:5c:8e:a2:30:2d:57:3f:79:e6:
                    66:50:13:9b:40:11:16:2a:04:2a:b2:0d:78:82:de:
                    ab:ef:c0:97:03:22:54:7d:0b:15:c2:77:98:f0:c3:
                    04:14:4f:14:9d:0d:ee:c4:a0:73:8a:19:ee:1b:9b:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:E7:05:E0:1F:34:9E:BF:46:64:C2:4E:78:D4:BE:B8:55:A4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b33d5ff-0538-3023-bef5-b63003f0cd78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.15.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:e3:cc:79:cb:45:ea:71:e9:4c:53:35:1d:83:18:52:54:
         d5:00:08:e0:24:9a:71:fe:89:f2:8d:93:1e:b7:99:61:e1:9f:
         64:02:f8:3e:3d:87:9d:1c:c3:36:ee:e2:cd:01:70:9d:84:8a:
         d5:d5:2f:17:4f:ac:ff:2f:46:28:2e:1c:91:6d:bf:ce:2e:db:
         de:8c:82:90:91:1c:95:88:b6:0e:cc:42:3e:55:03:97:0a:a8:
         17:36:7b:86:19:c8:a9:6d:e7:2d:b2:75:47:03:b1:02:90:c7:
         f0:8c:00:f9:e3:8d:50:ae:a7:91:a4:38:dc:8d:b5:23:27:80:
         92:96:74:d5:d6:16:e5:9a:ed:c1:52:e1:93:31:94:16:3a:56:
         cc:7f:77:48:64:93:e5:a2:73:90:c7:8e:5e:59:98:89:69:cf:
         e1:82:63:b6:f8:3a:8c:f5:1b:24:88:0e:29:d8:2d:41:56:21:
         9d:5c:e5:95:8e:4d:81:84:28:3d:d2:a6:19:9a:3a:2d:b1:00:
         8c:ff:53:c6:69:7a:ef:b1:b0:66:2f:44:60:d5:a6:66:4a:26:
         f6:6f:05:94:8f:f2:d7:9a:43:a8:89:e5:9b:14:7f:aa:dd:ae:
         12:35:38:7d:55:b4:7a:ac:e6:d3:47:2b:e0:d3:2e:3f:4d:4f:
         85:61:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:00:36 2026 by rpki-client