Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c983447-68f3-35cb-be2a-aaaea82af971.roa
File:                     7c983447-68f3-35cb-be2a-aaaea82af971.roa (raw, json)
Hash identifier:          TUCook8wU4/R0hjO2ur01SKq4YaTYkLOamf5SxGrNXU=
Subject key identifier:   8E:9F:66:42:47:93:C5:DB:09:7C:33:0E:0B:BC:19:6B:BC:64:B1:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78DE89CCCBBE540AC6E9A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c983447-68f3-35cb-be2a-aaaea82af971.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        73.88.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:e8:9c:cc:bb:e5:40:ac:6e:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e75f742a-4239-4de1-b910-d6c0d8947382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:11:01:ec:30:2e:8a:7d:6d:b2:f3:f2:58:
                    2f:ab:68:fc:6c:29:e7:c7:02:14:52:60:02:cc:f4:
                    74:45:db:de:29:cb:cc:5e:95:7f:de:b0:ef:68:0c:
                    b2:22:31:f6:3c:0a:87:40:9a:70:7b:f5:6f:ea:be:
                    dd:9b:b9:be:bf:27:63:7b:87:f4:fc:c7:ae:70:ea:
                    33:ce:49:e7:89:40:06:dc:08:af:a6:44:05:5b:a9:
                    a7:3f:89:19:28:7b:03:ba:dd:f3:5d:ab:2b:95:bc:
                    99:bd:d1:8a:0a:1e:4f:80:ff:59:74:12:45:74:6b:
                    0e:e7:29:f7:fc:9a:02:9f:6d:c6:62:70:d7:7d:3c:
                    36:c4:07:97:9a:1a:76:87:0f:73:fc:d2:77:ef:a2:
                    c0:e6:93:ad:6e:12:f6:e9:1b:69:4e:e8:05:27:43:
                    67:51:17:0a:04:89:e8:0d:f6:a4:62:57:08:23:8f:
                    41:a2:65:40:1d:bd:d4:ab:36:c0:d4:dd:82:18:fc:
                    a8:0e:57:07:42:c9:77:82:63:eb:09:52:46:aa:28:
                    72:9f:d0:6c:75:d5:34:64:6f:50:b0:66:99:49:c1:
                    25:f8:bc:33:4a:b6:f2:24:b3:79:94:ce:f5:20:2c:
                    a1:b6:5f:5f:0b:bd:83:af:23:80:61:73:aa:9d:be:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:66:42:47:93:C5:DB:09:7C:33:0E:0B:BC:19:6B:BC:64:B1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c983447-68f3-35cb-be2a-aaaea82af971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:84:a0:59:d8:40:0e:a7:93:85:ac:ca:10:6d:b8:ec:aa:52:
         a7:7b:38:19:b3:30:c5:6a:70:ad:be:f3:f0:37:fa:a1:64:21:
         46:4e:6f:70:34:09:b9:9a:a4:c2:04:04:ec:3d:98:58:02:77:
         8c:42:d5:d5:c9:19:79:86:a3:ab:56:c0:bd:c7:6f:ba:4a:10:
         64:67:b5:ff:58:a2:f9:60:0f:ff:bd:df:df:60:8b:fc:c9:f8:
         77:84:ac:6f:db:a1:48:da:e2:d1:e8:f5:39:32:99:79:74:99:
         a8:df:cb:f3:ac:50:b5:83:7f:a0:e7:b6:1b:31:57:2d:20:ea:
         8b:8d:b7:61:3a:af:46:73:fc:f2:87:fd:14:71:bb:71:aa:bb:
         ca:50:f2:d9:91:64:5f:d5:d5:68:d2:e8:7a:1f:91:c1:ee:62:
         e5:27:e8:44:70:86:23:22:02:34:4a:10:04:49:71:16:53:a5:
         fa:11:f9:87:99:69:fa:ac:e8:bf:e9:c8:2a:c9:da:32:fe:29:
         ca:15:60:98:e8:b6:07:7e:18:01:3a:48:ad:af:a6:cd:42:76:
         6c:3a:ae:75:0c:10:73:c9:27:d6:3d:a2:d7:e0:2b:55:b6:fe:
         39:39:29:8c:54:ae:aa:e1:b3:92:dd:27:2c:7f:68:eb:2f:f3:
         af:7c:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:15 2026 by rpki-client