Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1b531c-70ae-3ce1-81f3-16aa215534c7.roa
File:                     cf1b531c-70ae-3ce1-81f3-16aa215534c7.roa (raw, json)
Hash identifier:          wzjx4bId5iG9zMOK1sRj0Dag5ifo1dEkFw0waVp1t6Y=
Subject key identifier:   30:0F:66:B6:A6:B9:8D:CF:E3:F4:CF:C3:F3:16:F6:15:E7:4A:FF:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497977A2E8E89C086B31AD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1b531c-70ae-3ce1-81f3-16aa215534c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        73.94.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:77:a2:e8:e8:9c:08:6b:31:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=129f0975-6f7c-4417-9e92-ecb7612327bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:7c:78:b9:90:5f:2d:a0:79:d5:14:c1:0a:
                    bc:54:9f:e4:79:d6:24:bf:35:45:50:1b:bc:30:57:
                    62:78:b6:ff:bc:d6:19:ca:b3:86:88:95:48:a8:8a:
                    c5:2f:c4:bd:37:85:30:9f:04:dd:7c:0c:53:6d:8a:
                    c3:18:a4:ab:de:e0:47:5d:d9:fe:8a:21:a4:ae:d3:
                    b9:f6:a4:16:82:ec:a2:39:a1:15:83:89:8d:5b:a4:
                    ce:e0:64:66:69:db:4c:59:0b:6b:13:ca:95:de:22:
                    db:1b:ae:21:34:eb:4b:d5:73:d7:68:81:d1:1f:b1:
                    9f:89:76:2e:e1:e1:09:de:94:1d:d2:28:fd:9d:72:
                    3c:5c:4a:c0:fe:04:78:73:28:5a:3c:55:ff:af:9f:
                    ce:e5:5d:6b:74:cd:d3:8f:d0:4e:c8:57:5b:00:85:
                    91:56:55:d7:ec:fd:1d:b4:5d:89:f7:4f:7b:c3:36:
                    50:96:5b:67:e6:b7:39:7a:48:d3:73:fe:2d:5b:5d:
                    33:cf:90:94:76:98:9c:6b:38:1c:27:0b:15:41:11:
                    3c:79:1d:c9:74:06:88:54:7b:79:ee:78:2d:f8:f3:
                    c9:45:87:d6:b3:a9:c6:a3:2d:02:84:91:95:d5:4c:
                    75:a6:a8:d4:95:8c:ca:2e:bf:5a:5e:12:7d:a8:2c:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0F:66:B6:A6:B9:8D:CF:E3:F4:CF:C3:F3:16:F6:15:E7:4A:FF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf1b531c-70ae-3ce1-81f3-16aa215534c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:1e:76:58:97:38:d5:c9:b9:0c:b3:76:92:4e:c2:ca:22:
         1f:13:07:5d:a8:bb:e7:1f:fb:3e:a3:f9:55:83:a4:4b:68:97:
         06:2a:64:a0:74:e1:ff:f8:29:6d:ca:69:ed:46:27:bb:1b:53:
         cd:0b:64:07:d2:3f:2e:e6:7d:e4:e8:99:ca:1b:4b:1a:ef:f6:
         d9:a5:ea:de:99:ae:6e:53:fa:42:bf:b6:d6:d4:ba:fb:b8:a4:
         6c:20:98:ef:7a:44:5a:7d:04:a4:ff:9f:b8:8c:5a:b5:d3:99:
         f0:5f:b2:91:cd:0f:ae:b2:67:e0:8f:b0:83:ae:ff:fd:0f:ab:
         fe:80:c5:f2:19:dc:38:83:b6:d1:4e:d6:38:ff:64:40:8a:08:
         c1:bd:1e:fc:49:f2:a5:c8:50:b4:e3:67:54:d3:d6:24:6e:9f:
         b3:66:e6:1e:01:b5:11:37:c6:4c:8e:e6:3f:9f:92:a8:e9:f3:
         6b:8e:94:6a:f0:fa:8e:df:93:61:4b:e5:f3:83:76:af:c7:89:
         00:a6:04:27:a8:dd:e1:40:c4:74:ee:d1:d1:78:fe:b5:26:79:
         f5:fd:f0:72:f4:3d:8f:35:f0:8a:6c:91:33:11:56:d0:e9:87:
         ba:a0:1d:5f:b9:d2:22:ed:5a:a6:fb:42:7a:1e:80:ec:d1:ad:
         ec:7d:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:26:21 2026 by rpki-client