Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53212339-8d75-352a-b635-724ea67a3bbb.roa
File:                     53212339-8d75-352a-b635-724ea67a3bbb.roa (raw, json)
Hash identifier:          qyp6IClP7G313Nm3xDXanTnnXKpf5yZGvBpxNOccdhE=
Subject key identifier:   BD:56:E4:3F:09:69:83:66:3F:C7:94:B3:13:06:8F:91:7E:41:34:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA788EFB92980065C442C1880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53212339-8d75-352a-b635-724ea67a3bbb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        73.108.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ef:b9:29:80:06:5c:44:2c:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f67943d9-9124-46e8-a921-5b21a01330c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:27:4e:33:11:b7:e4:af:b9:87:dc:57:32:
                    9d:1a:cc:ea:b0:59:61:dc:72:2d:c1:fe:78:5b:63:
                    e4:bd:85:16:14:68:2d:95:fe:23:f5:c3:32:71:22:
                    27:75:a7:98:81:ef:8f:83:13:5e:93:48:da:b7:04:
                    b8:20:b8:15:60:7e:93:83:7d:af:03:86:e5:5e:1f:
                    ae:20:9a:a0:3b:d8:b1:54:e4:bd:b6:90:5a:22:3d:
                    ea:20:42:1c:64:1a:66:dd:65:e8:9d:e2:48:de:d8:
                    44:92:5c:63:f5:37:ee:10:c3:cd:2b:ad:ab:fd:84:
                    38:75:ef:31:d9:ae:b0:54:61:01:e0:ce:c8:b9:28:
                    d5:ef:a2:d2:eb:38:7c:01:56:c0:64:57:5b:50:b6:
                    05:21:27:81:22:a2:85:53:58:23:56:95:83:4d:0f:
                    9d:cc:57:35:8c:3c:9c:07:74:57:22:f3:eb:ef:5a:
                    37:cc:22:1d:e7:04:86:5f:84:55:50:a3:8f:9f:1c:
                    11:0e:49:fd:7a:02:63:82:54:f2:9d:cc:6b:64:69:
                    6a:0f:29:8d:91:3f:37:42:2a:bb:cd:92:22:9f:bd:
                    8e:ce:ab:59:68:c3:d5:41:d8:7b:ea:b8:20:c5:4d:
                    1e:d5:13:37:23:19:c2:77:54:bd:b2:2c:aa:88:76:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:E4:3F:09:69:83:66:3F:C7:94:B3:13:06:8F:91:7E:41:34:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53212339-8d75-352a-b635-724ea67a3bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.108.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:3b:e8:c2:20:ab:07:2d:25:d4:96:93:aa:76:7f:dd:b6:
         7e:41:ed:29:3e:76:da:6c:25:2f:91:96:5e:2b:e0:10:8d:d1:
         2d:15:c0:e2:08:64:c9:fe:df:cf:52:64:42:1e:01:71:c2:c2:
         43:94:77:07:f8:d4:4e:d6:1b:82:79:5e:40:b4:ea:f3:f6:59:
         07:ba:e3:de:a0:19:b4:18:e2:45:bc:d3:09:47:0d:72:de:b5:
         35:f9:f6:66:11:cb:d4:b0:da:94:b8:d9:17:01:2a:f1:6a:ea:
         1e:20:ca:0f:59:2b:fe:bd:41:c1:33:87:fb:09:01:21:2c:16:
         f2:7b:6e:ec:48:ac:47:c7:8d:07:34:8c:10:08:1e:ad:95:4d:
         eb:20:af:09:f5:88:1c:bb:cb:cb:6c:98:d1:a2:5a:b1:50:86:
         05:83:ef:58:30:f3:cc:a9:b6:5b:e3:bd:aa:c3:50:27:65:84:
         44:fc:02:f6:5d:0d:34:37:3b:5a:48:93:86:4d:43:d9:63:a5:
         5d:dc:06:c8:1f:1e:4f:a1:40:e7:da:f2:51:8c:f3:7d:7d:3d:
         5d:c9:61:5a:44:1e:d9:4c:0e:c6:9d:94:88:e8:24:80:fb:a5:
         4b:f2:16:37:32:48:c6:9e:58:cb:5a:7e:79:24:95:6b:7a:13:
         06:c6:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:37 2026 by rpki-client