Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce8d7dc-fbc5-332c-8b7c-491a508ac13c.roa
File:                     2ce8d7dc-fbc5-332c-8b7c-491a508ac13c.roa (raw, json)
Hash identifier:          gbMC9iB7DewqTHbvPYIl9GC+BVejZKBfb9vGFeH6Mp0=
Subject key identifier:   86:B8:B0:A5:62:CA:72:EC:62:DF:9B:B2:C2:80:41:19:5C:B9:A0:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600B6C9C35BD2EFBA5E9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce8d7dc-fbc5-332c-8b7c-491a508ac13c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.227.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:b6:c9:c3:5b:d2:ef:ba:5e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=4e72875a-52f7-40bf-9e3d-a9dcc9465352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:01:14:d3:10:9a:30:50:e5:10:58:d5:6f:
                    b2:45:02:be:9b:25:65:43:b0:56:de:77:35:1e:63:
                    a1:dd:ba:7d:df:9f:07:bb:7f:43:80:ce:05:a6:42:
                    d2:28:5b:c3:f9:4e:75:7c:53:3a:5d:f0:ba:99:c5:
                    37:63:54:1b:a0:95:af:e1:59:60:14:d5:6d:e6:27:
                    fb:0e:27:14:b3:3f:23:8f:85:77:8f:49:9e:4f:a5:
                    a1:6b:1f:4b:fb:5b:c0:3f:91:80:01:85:51:69:50:
                    5b:31:48:53:34:f2:58:ef:05:0d:f4:8f:ec:3e:df:
                    62:4b:bb:ea:51:6a:82:e3:ef:62:03:6a:3c:fb:0a:
                    10:d6:c3:46:46:f9:23:cf:ff:a0:d9:1d:81:50:bd:
                    23:02:a5:63:1f:b2:46:e2:fb:d8:da:13:19:27:24:
                    64:e4:96:75:65:1f:26:7f:ae:5c:9b:8a:c8:d9:14:
                    36:82:ff:cc:6b:e4:4f:5b:80:27:4d:6b:eb:0e:f5:
                    a5:e3:c6:3e:2d:e5:96:28:3c:1d:7c:ac:e4:9d:af:
                    c7:4b:7e:61:c1:c4:66:af:39:2d:75:36:04:5b:e8:
                    83:54:64:0a:c5:6d:74:a7:b5:60:e8:82:40:4c:59:
                    52:49:6c:77:4f:28:a1:34:8c:12:00:74:ed:17:af:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:B0:A5:62:CA:72:EC:62:DF:9B:B2:C2:80:41:19:5C:B9:A0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce8d7dc-fbc5-332c-8b7c-491a508ac13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:42:67:b8:c1:59:ea:48:f2:24:97:de:15:0b:46:5a:38:fa:
         73:5e:bc:c9:19:15:07:0c:61:93:c8:19:db:ea:78:a9:e5:fa:
         bd:7f:57:80:66:ed:52:44:09:69:f8:ab:4c:9c:b7:56:6a:81:
         86:11:d5:24:aa:2e:28:5c:67:e7:78:1d:87:ca:68:dc:e0:ab:
         c8:db:88:fd:eb:7a:bf:91:e0:de:dd:59:df:78:bc:a9:91:d5:
         a3:6f:c7:c0:7b:64:d5:92:c2:a9:23:7f:dd:2a:a0:b8:5b:af:
         0b:5d:f6:75:da:c5:c6:bf:01:6d:02:1e:1b:03:a7:e4:7a:40:
         ca:c2:f0:6a:8c:86:23:21:4c:fc:3a:8f:e1:2a:c7:74:9a:81:
         95:05:ef:5b:02:1f:4d:ac:28:80:b6:71:74:79:90:43:fa:5e:
         d1:af:fd:61:d7:08:fa:84:3f:7f:10:a2:25:80:d8:2c:4f:5b:
         c3:e7:3b:8c:17:e1:03:df:85:8c:49:75:19:c1:39:83:19:3c:
         67:19:4a:f1:4a:46:96:d6:2e:8e:e7:b5:97:6c:d1:73:93:ee:
         fe:28:b3:26:f6:98:53:9b:04:50:47:42:ac:f2:36:55:9c:16:
         aa:f1:b6:b7:20:07:96:d4:fc:dc:dd:1a:df:ae:d7:62:74:6c:
         96:4b:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:49 2026 by rpki-client