Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fad75fc-5acc-37e8-85a2-0473d1c98e0a.roa
File:                     6fad75fc-5acc-37e8-85a2-0473d1c98e0a.roa (raw, json)
Hash identifier:          XpQ1NKOH8VBmIdQ0oEUxTfcpczc4UI/+Lw2ZlDHj8K0=
Subject key identifier:   F0:20:29:2F:CF:41:18:43:13:B4:85:83:D5:11:4A:19:3D:A9:4C:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E44EAC6199342165E5D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fad75fc-5acc-37e8-85a2-0473d1c98e0a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        73.189.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:44:ea:c6:19:93:42:16:5e:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=95682c82-6591-4cb7-90f9-a04a24611777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:40:94:3f:e0:b5:5f:1c:b0:25:60:be:bb:
                    b5:c0:cd:83:ed:9a:ed:7c:fa:74:c8:f0:45:2d:ae:
                    74:3c:84:7d:74:6d:7e:ec:fc:c1:eb:97:f4:82:0c:
                    3a:de:84:56:84:a0:93:05:9f:31:d9:ad:62:3c:b7:
                    d3:ca:f3:43:ff:0e:6b:d2:0c:97:59:90:9a:ce:39:
                    96:87:ac:82:92:8f:08:7b:b7:f0:de:fb:0b:c0:fa:
                    fd:e9:68:19:59:32:6b:68:c4:ce:69:99:88:6d:bd:
                    0c:cf:26:17:11:5a:11:a4:9e:cc:15:bd:f7:0f:2b:
                    e4:b1:80:8b:e1:80:8a:4c:e4:68:e0:76:0b:84:0c:
                    67:cf:b2:04:56:84:c3:81:ac:12:4b:04:0f:d2:62:
                    b3:ca:17:45:a7:42:44:52:d8:f5:1b:1a:22:7e:d6:
                    de:35:54:93:76:a5:5d:21:7e:35:07:df:be:76:14:
                    58:63:2a:40:23:3a:53:bf:69:08:2b:87:d5:fc:cb:
                    11:6b:fe:87:a3:ff:f2:7a:35:d1:01:d1:dc:00:e3:
                    65:b3:ce:e7:19:a3:62:cb:6e:b2:8b:9e:a2:3d:0e:
                    6c:d4:12:ef:d7:94:32:fb:5a:2a:de:2a:1a:c6:08:
                    5d:da:e3:90:57:5a:35:5e:5c:2f:0c:84:61:6a:27:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:29:2F:CF:41:18:43:13:B4:85:83:D5:11:4A:19:3D:A9:4C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fad75fc-5acc-37e8-85a2-0473d1c98e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:de:e0:91:9f:29:74:e5:e5:33:a7:1d:e0:92:0f:3d:33:0c:
         df:36:56:a5:0b:71:fe:8d:7f:82:eb:02:f0:25:8a:d7:39:24:
         d2:3c:77:41:df:c1:b8:ea:9c:7c:a1:23:4c:00:30:d9:89:61:
         d1:e5:5f:0c:82:65:3d:5d:72:68:d7:26:67:42:d5:19:5e:b0:
         87:34:34:51:ce:b5:03:d2:28:ff:9c:5d:92:05:72:77:0a:74:
         cf:b7:85:ab:03:32:62:8a:01:e7:54:4d:33:e0:de:f3:35:fd:
         3f:e4:c8:58:57:3f:8b:6c:dd:33:fd:37:4f:42:af:91:a9:cc:
         8e:61:25:0e:b6:45:96:03:dd:b6:f5:81:f7:74:4d:2a:c9:72:
         f5:96:5f:93:87:fb:e3:08:ca:6b:02:55:94:8f:85:09:3a:92:
         ae:df:2f:54:64:be:f0:48:0f:94:9c:56:28:9b:a5:d8:33:82:
         4a:aa:82:31:b5:82:e5:25:de:e4:ec:64:9e:a5:ad:6d:76:14:
         5e:d4:76:29:c7:5f:00:bc:92:af:2f:48:de:a5:5b:c0:d6:bf:
         2e:52:b7:57:4c:14:36:14:c0:6c:1c:11:d7:bd:c3:ec:dc:b1:
         86:f0:13:63:e5:41:24:00:a3:6e:f2:fd:f4:d6:b9:72:7a:4f:
         5a:2e:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:00:22 2026 by rpki-client