Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2059bb04-4c72-3037-b03d-584d73fee2a8.roa
File:                     2059bb04-4c72-3037-b03d-584d73fee2a8.roa (raw, json)
Hash identifier:          yJHwZtxYGIleUWbFazmCYCCBtgrBq9Xf2D7hSgtHEAo=
Subject key identifier:   11:65:B8:63:8A:49:26:77:72:B3:FC:A8:15:63:23:B0:F4:62:5E:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A80D079B14DB86EEB7A4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2059bb04-4c72-3037-b03d-584d73fee2a8.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        71.207.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:0d:07:9b:14:db:86:ee:b7:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=018ac6a2-c235-47c9-9eb7-69ba558f1f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:77:39:83:4c:cb:11:72:22:2e:d3:b7:31:
                    53:ba:b9:02:8d:7d:ed:cc:30:5f:ca:23:ed:f1:69:
                    05:c7:53:57:cd:c9:7e:ba:c8:d7:e5:9a:88:10:ff:
                    3d:6d:c1:ac:66:42:45:a3:35:9e:8a:32:8e:b4:30:
                    d2:d3:b6:c3:f2:79:e6:05:fd:d4:26:53:6e:86:9e:
                    2f:69:af:4b:b2:62:e5:ce:50:7e:74:6a:09:db:32:
                    a3:11:d1:6a:24:08:a9:d8:28:d9:05:24:bc:81:51:
                    c7:46:96:3e:3b:79:5d:07:55:d3:e7:91:22:09:3a:
                    2b:a2:d2:3f:33:dc:1f:1f:29:64:98:32:b9:b0:af:
                    c2:b5:61:a2:f5:6c:f5:28:82:86:8e:4b:2f:04:a9:
                    f4:38:fd:ef:69:0b:40:c9:39:6d:ba:0e:f8:2e:63:
                    5f:c1:91:b9:f3:88:22:84:61:29:b8:fa:a4:09:cc:
                    37:fb:c7:fa:05:96:50:ac:d0:cd:d3:b2:e6:b3:be:
                    49:4d:f2:83:7a:f8:6e:60:5b:fe:21:a5:e5:a9:dd:
                    ac:33:fc:f4:e8:94:ba:67:6a:ed:67:82:c7:7f:84:
                    5c:17:49:cf:89:62:ff:0c:d1:64:26:46:31:e5:0a:
                    53:b9:f1:c7:f8:e2:b8:e6:43:bc:ce:df:7d:fd:c2:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:B8:63:8A:49:26:77:72:B3:FC:A8:15:63:23:B0:F4:62:5E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2059bb04-4c72-3037-b03d-584d73fee2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.207.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:14:a7:77:93:b0:8f:50:d7:2b:0f:f8:9e:7b:98:9e:fe:
         54:38:e8:95:b5:89:e4:6f:d4:15:35:59:5a:98:19:01:3f:f3:
         9c:9d:64:db:7b:38:ef:a5:cf:18:6c:7c:d8:62:b8:17:ee:69:
         f2:4d:35:b8:6a:e6:de:e6:df:cb:71:de:5a:4f:3d:de:b1:7c:
         de:67:75:26:de:24:ee:2f:df:32:bb:72:de:b8:21:4a:9e:f6:
         47:57:06:5f:4a:12:b5:f7:ed:32:2e:d6:dc:7c:d3:d6:89:e7:
         57:8f:93:97:8d:69:98:7c:ac:4b:66:37:81:ca:4b:38:03:a2:
         9a:32:d9:63:31:fa:da:e1:b4:d2:fd:ad:12:7f:99:cd:fb:f1:
         28:75:21:c1:a0:75:53:86:1a:c2:58:43:28:be:a6:f1:7f:48:
         37:fd:a7:1c:7b:0c:06:a6:bb:46:dc:28:84:01:21:dc:fb:c1:
         19:38:d7:05:d0:45:b3:98:dd:2c:3f:3f:d8:cb:02:2c:98:8c:
         7d:46:45:70:2c:30:55:a2:05:3d:bd:3d:84:05:57:9d:fb:90:
         24:bf:b2:1a:56:0e:a1:d4:62:9e:26:c2:e7:6a:0a:2a:b4:67:
         3f:f0:81:b9:f4:e9:54:3e:bc:66:1c:7f:c5:b7:35:76:03:a6:
         48:53:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:59:52 2026 by rpki-client