Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d7b9d11-5929-3b7d-ac5d-b30d5a8b43f2.roa
File:                     7d7b9d11-5929-3b7d-ac5d-b30d5a8b43f2.roa (raw, json)
Hash identifier:          pLmp7WN/sZMzHe2fIrd16aWA3TD1F3kTyquNYn1RbjE=
Subject key identifier:   80:9F:52:D8:C7:82:E8:93:FC:82:F4:41:3E:2E:CC:37:9F:0C:53:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D4F15BA44DADFDE769480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d7b9d11-5929-3b7d-ac5d-b30d5a8b43f2.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.193.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:4f:15:ba:44:da:df:de:76:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=753d9c3a-a28c-4e05-adf4-154ec27d53e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:08:e7:b6:93:cd:0c:7c:1f:87:d5:6d:13:
                    e5:16:4a:f8:52:4b:c0:bd:63:be:02:c8:d8:5f:e4:
                    94:97:7f:55:d1:39:34:fa:fe:b0:b4:27:cf:52:b4:
                    8c:89:fc:78:00:2b:95:7c:9f:73:93:34:f5:39:49:
                    69:4f:92:08:b6:79:ce:d3:e6:74:9a:85:d9:c7:03:
                    ef:ca:65:2b:d3:aa:7f:a5:fd:63:81:a3:4c:24:c4:
                    1c:0e:17:47:74:9f:77:fa:09:61:99:e1:c7:d5:94:
                    5f:c4:ab:a1:ba:39:a6:06:49:ae:84:c4:bb:39:08:
                    01:79:df:36:17:89:71:c0:24:46:f8:33:01:f0:89:
                    ab:2d:2d:d1:a9:c5:fe:c1:f1:cb:dd:ef:d1:62:e7:
                    82:85:a4:57:27:ed:a7:38:e2:69:94:36:ac:98:af:
                    eb:c5:88:31:af:b6:34:19:88:88:39:4a:b3:4e:93:
                    78:52:87:73:58:84:2b:6b:57:74:13:71:b2:07:bc:
                    1d:8e:cb:91:15:90:18:fb:29:30:fc:4e:2c:0b:94:
                    49:74:2f:6d:00:39:37:90:c3:e7:ec:67:58:70:6c:
                    90:bd:21:bc:a0:48:fa:16:7a:8c:5f:3c:70:92:5f:
                    c5:fa:c6:c4:be:e7:aa:0e:d3:c9:ba:3a:a0:09:2f:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9F:52:D8:C7:82:E8:93:FC:82:F4:41:3E:2E:CC:37:9F:0C:53:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d7b9d11-5929-3b7d-ac5d-b30d5a8b43f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.193.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:a8:bf:ed:12:ae:c7:df:e8:3f:72:95:57:32:31:d7:76:
         e6:73:2c:e3:e8:a3:79:88:ab:31:06:8e:ee:dd:77:1c:b8:19:
         c0:4e:d5:2c:50:8c:26:d5:23:e7:38:c0:dd:d6:9c:e7:32:29:
         ae:82:64:36:4b:38:1d:bd:da:f2:d8:ea:32:a1:e4:b1:fc:3b:
         02:3a:57:11:78:42:48:fd:28:ef:35:dc:16:52:dc:05:85:50:
         51:c2:bc:cc:06:f6:b6:a1:2d:78:0e:79:b0:a3:bd:4a:b2:10:
         bf:a5:6e:e6:e9:cf:db:5a:72:a5:46:df:93:1f:20:5d:19:cc:
         09:4b:92:a8:b3:13:d7:42:43:4c:54:62:38:41:4d:be:86:a9:
         f1:9a:07:a4:c9:a3:ae:ab:d7:53:a6:d7:9a:6a:bd:9d:6f:01:
         88:fe:9f:61:d9:2f:6e:bb:80:8f:9b:43:c7:84:01:a5:ce:d8:
         96:bd:44:d8:d0:45:e4:1e:d9:c2:88:56:65:05:44:3d:23:5d:
         1b:b4:df:42:5d:0d:bf:a4:80:04:ac:cd:24:73:c5:ed:f2:03:
         46:27:d2:90:0b:ab:3d:ac:49:ef:7a:f0:d5:43:7b:b1:2f:a2:
         d0:32:06:29:6d:7b:07:e4:2a:7c:53:37:44:58:16:e8:8c:19:
         c6:de:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:10:16 2026 by rpki-client