Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfa2e92-d6c1-3f34-85ba-6346099e8e7a.roa
File:                     6bfa2e92-d6c1-3f34-85ba-6346099e8e7a.roa (raw, json)
Hash identifier:          SNn/7DCtIEd9BHFtKgQlpP2bVZbl8RgSTnZNAde7Pac=
Subject key identifier:   64:45:4D:CF:B2:86:86:A2:8B:69:55:83:F7:C5:E1:25:2C:30:BA:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8678A010ADE156F9C20A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfa2e92-d6c1-3f34-85ba-6346099e8e7a.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        73.5.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:78:a0:10:ad:e1:56:f9:c2:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=84c42bb5-079d-4eeb-9651-b7964140e5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:02:30:5a:19:8c:42:89:52:24:2a:ca:79:
                    52:d3:53:4a:a1:74:f8:09:82:9c:90:51:f0:c8:98:
                    5a:06:d1:92:2b:6d:91:19:eb:fc:81:e1:73:0b:dc:
                    5c:dc:15:9b:e0:8e:a4:76:f0:25:07:a9:b2:f1:23:
                    1f:6d:b2:48:5d:01:d1:85:46:df:ce:b7:f1:13:14:
                    5f:ed:a8:40:26:d5:21:14:15:40:03:d2:50:97:92:
                    a4:7a:b0:bc:08:c3:1b:42:f0:f6:71:11:63:d0:98:
                    d4:7c:41:c2:db:09:1a:32:ca:d7:c5:26:6b:ef:30:
                    74:fc:2b:0a:6a:a3:0a:74:04:ef:d6:6b:bf:26:a6:
                    e2:d0:d6:87:28:66:ae:57:eb:39:21:81:31:f0:90:
                    66:e0:b4:df:05:8d:39:4f:6a:95:fd:5b:b8:f1:57:
                    0f:33:7a:15:04:e8:e0:9c:61:40:7e:57:01:a7:67:
                    b8:52:71:42:9f:2c:62:28:94:f0:2f:36:ab:31:bd:
                    c9:18:8e:33:2c:e6:89:a5:fa:0c:9b:d5:42:f3:ee:
                    e4:65:66:e7:cc:da:c8:87:55:85:d9:6a:ca:96:5d:
                    58:e5:a3:2d:41:bc:88:2f:d4:54:8d:fc:4a:c7:30:
                    da:bf:1b:b1:a5:24:8e:54:39:31:70:60:a5:7f:ea:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:4D:CF:B2:86:86:A2:8B:69:55:83:F7:C5:E1:25:2C:30:BA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfa2e92-d6c1-3f34-85ba-6346099e8e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.5.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:c6:de:ad:fd:0d:64:41:9e:22:06:e9:5f:c3:04:12:c1:
         4c:3b:c1:02:34:50:a8:3c:81:3c:ef:be:11:b7:26:27:17:b2:
         8c:fe:fb:1a:59:2f:e3:62:8d:9a:f9:fa:e1:8c:d0:21:ab:3c:
         db:17:36:9a:76:30:d5:bd:13:60:ac:a7:fe:e7:10:73:a3:b2:
         cb:a1:a4:b6:9e:49:20:0e:03:95:c9:70:dd:f3:cd:db:54:52:
         d0:02:03:26:51:8d:4c:f3:f6:a7:9c:d9:94:27:80:36:2f:3a:
         9a:7b:6b:75:18:aa:b2:f4:ca:fc:37:0f:28:90:a4:6c:cc:50:
         5f:31:87:80:c2:b1:84:75:6b:6d:72:4d:d6:f8:d7:61:4b:5c:
         df:e6:eb:e2:a2:f1:70:12:ca:ae:bf:87:89:de:ae:94:4f:fe:
         85:2d:6c:04:e7:d1:fc:a3:c1:e0:19:30:99:d0:bc:78:fd:c8:
         12:2b:af:eb:99:17:bc:47:00:e4:08:e4:ce:78:04:3a:6b:4b:
         fd:8f:b6:2c:51:6a:72:30:5d:68:dc:ff:5a:88:10:53:dd:18:
         e5:15:ae:01:7b:c6:2b:1a:e0:30:fc:15:90:86:d0:e3:fc:34:
         04:f9:1d:87:45:c3:3d:be:41:f8:e6:a0:f8:c4:29:2f:66:5c:
         13:55:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:53 2026 by rpki-client