Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa
File:                     c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa (raw, json)
Hash identifier:          U3u3gYeG+kJed7deHWZj37nUheTpt6kykVtuWSORYQQ=
Subject key identifier:   2D:56:AB:C9:4C:62:5C:43:71:42:E2:AD:91:00:5E:72:02:C1:FC:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980C2ABAE58047FFAB0AE60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33490
IP address blocks:        71.193.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:c2:ab:ae:58:04:7f:fa:b0:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=738e3bbc-6cb0-4ed1-82bd-f6f8a814c42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:91:e4:20:2d:3e:e5:f0:35:4a:4b:0c:60:
                    00:27:45:cb:b6:8a:b5:2a:b6:29:41:75:cf:56:31:
                    de:72:82:f6:97:d8:d8:44:51:30:08:54:1d:2a:13:
                    66:d2:1b:aa:c8:6e:e6:b2:e4:fa:d9:1b:89:e3:90:
                    7f:21:95:ec:7d:23:3b:26:7b:7a:4d:7a:7b:14:15:
                    46:6a:62:68:fb:23:15:a2:98:85:0a:86:12:c0:cc:
                    d2:11:9e:71:cd:c0:eb:55:81:05:75:8a:3c:5b:ec:
                    43:9d:36:33:4f:d4:a9:85:18:87:48:f5:3e:df:0b:
                    76:f3:19:ec:e1:c5:95:3f:b9:4c:5f:58:ba:b3:ae:
                    07:f2:21:c8:9f:ce:fc:55:72:72:9e:c8:69:cc:52:
                    82:9f:bc:5c:48:7e:10:97:fc:4d:61:a4:fe:d3:5d:
                    42:6a:0d:76:02:98:78:3f:da:ce:11:71:1e:1d:b9:
                    c6:ae:21:65:15:e9:72:8c:e7:27:4a:01:23:58:80:
                    18:7a:b2:ef:21:da:ca:29:4a:39:e0:c4:a3:45:02:
                    cf:81:03:d0:9b:aa:ab:e8:d2:e6:49:11:99:84:d1:
                    54:97:2d:3d:d8:99:4b:af:9c:8e:e7:3d:42:9e:d9:
                    d1:75:80:90:36:df:46:6e:e5:2d:0b:33:48:b7:b7:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:56:AB:C9:4C:62:5C:43:71:42:E2:AD:91:00:5E:72:02:C1:FC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.193.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:f7:1a:d9:8a:84:c5:c9:27:d3:90:07:8d:a2:60:7e:a5:
         56:00:21:d2:43:b9:38:dd:d4:69:16:a1:21:b1:23:5e:eb:ca:
         65:8e:f2:18:e0:0a:e2:67:b1:1c:4a:95:aa:90:8c:67:84:f8:
         40:f6:63:ed:77:c8:c9:eb:09:07:c4:7f:80:e5:6c:07:83:8b:
         4f:fe:8a:e2:d7:d1:f4:8e:70:f3:e1:ff:7f:47:a2:a4:6d:6c:
         1d:53:fe:db:b1:fd:e2:1d:1a:b6:66:6a:1d:63:57:2b:a7:d7:
         3b:fa:7f:a7:60:da:94:04:9f:3d:43:35:f1:a9:d0:6e:c8:a5:
         07:70:43:fc:63:ee:36:0a:45:7c:82:95:0c:8e:c7:e9:00:9f:
         b2:68:40:c1:38:d2:37:12:45:a9:fd:d4:06:12:47:65:a9:e7:
         bf:43:75:a1:9c:7e:c1:70:2f:89:f3:d0:64:ce:cb:f2:97:ac:
         06:3e:5d:5b:1c:6c:d7:d8:0b:ee:27:d3:04:8b:e0:d1:9f:30:
         de:4d:73:38:6f:82:6c:ca:43:70:e4:b0:8b:a2:15:76:17:3a:
         14:d3:cc:ac:1a:6a:24:3f:ae:de:20:88:80:cc:22:14:ce:81:
         3f:ab:32:97:bf:7a:51:60:59:95:99:d2:80:00:55:d9:04:e7:
         75:c9:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:12:57 2026 by rpki-client