Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301f0221-f35f-3f47-9f8b-6f026d308754.roa
File:                     301f0221-f35f-3f47-9f8b-6f026d308754.roa (raw, json)
Hash identifier:          gzkqT6rnub1fsOez75j0L/u5zfnlpvXV5serGTplf4s=
Subject key identifier:   07:B0:AD:EE:60:D8:DD:14:4D:6D:E5:17:7E:57:E4:8D:A3:C9:82:28
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8641D36382F7E98FCA2B9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301f0221-f35f-3f47-9f8b-6f026d308754.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        73.32.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:1d:36:38:2f:7e:98:fc:a2:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d0405cc9-a3de-4aca-9eea-83eed3870933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:e2:5b:e9:16:c9:50:e4:57:9c:98:95:fe:
                    42:49:ba:61:db:fc:f0:6c:f2:e8:63:e8:b9:2b:ec:
                    e4:73:a7:e9:64:a3:6a:10:4d:63:a9:ac:86:20:e4:
                    c8:73:32:cc:5a:1f:ac:03:43:5c:93:90:c4:17:43:
                    8f:41:33:5b:ff:a1:3a:56:f5:0b:9c:1d:7d:f2:d5:
                    b7:5b:68:86:04:5e:4a:e6:ef:6e:d6:04:8d:e0:de:
                    07:ff:bf:c7:75:1b:3a:6a:fa:95:3b:5d:13:05:90:
                    22:96:c0:f2:85:62:28:11:27:7c:41:e8:66:9b:01:
                    28:7a:91:6a:89:9e:fa:b7:e2:33:f2:80:7b:0f:db:
                    df:1f:17:fa:18:3e:cf:60:3b:eb:d4:94:10:63:7a:
                    fc:e6:f4:9f:1a:17:4a:63:7f:4a:59:91:97:1d:1d:
                    53:b1:a5:fd:b3:df:b4:ea:d7:e8:13:87:d2:43:b0:
                    50:b2:80:9e:96:37:d0:15:2c:bb:2f:0c:35:77:5b:
                    05:b4:5d:82:98:cf:20:9a:74:7f:96:8e:8e:f2:b5:
                    e7:74:e8:03:87:ec:95:61:8c:7d:7d:3c:50:9e:47:
                    c0:fa:95:da:a8:e0:a3:fd:80:a0:58:af:9d:f9:2d:
                    65:02:f1:b2:a0:7b:06:31:89:35:2f:e5:a3:22:8e:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B0:AD:EE:60:D8:DD:14:4D:6D:E5:17:7E:57:E4:8D:A3:C9:82:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301f0221-f35f-3f47-9f8b-6f026d308754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:6f:6b:29:8e:90:05:ad:d2:60:25:c9:c3:80:7f:19:39:
         f9:b9:00:b8:ea:07:49:2d:0c:62:9c:a5:69:c4:f2:ab:24:88:
         9b:8a:69:20:f8:12:03:fb:fa:b9:77:b2:6f:37:8b:93:a6:4f:
         f2:01:3f:3a:b3:12:61:63:aa:c9:a4:c7:9b:27:8e:5c:38:10:
         2a:f1:04:33:18:81:a1:2f:12:72:73:dd:06:b5:50:0b:55:09:
         43:6e:c5:9c:dc:b8:81:0c:19:76:97:10:76:b3:ec:c4:97:5d:
         a9:bb:12:05:e5:ed:49:34:b0:95:0e:99:b7:f6:a8:ad:43:ed:
         7e:12:69:4c:15:cb:c6:81:9c:bf:0c:fb:79:e4:34:b4:c5:76:
         1a:50:76:42:7d:e3:a3:ea:fc:d9:9c:e0:5c:72:05:fa:88:d8:
         f6:f4:ff:e9:38:f2:ce:a0:d2:60:b0:e1:c4:af:e6:05:ec:f6:
         85:51:92:95:c3:15:f6:9d:31:98:84:82:87:24:03:38:23:b3:
         cd:84:43:22:bc:5d:96:4a:c6:ac:27:0f:80:57:b7:9e:5d:a5:
         0e:03:e4:fa:1d:84:2c:9b:ac:02:24:6b:b5:06:f8:bd:d4:d7:
         e9:fe:8d:f1:df:76:34:85:ea:13:c2:4a:dc:a6:34:11:8c:4b:
         d7:9b:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:02:46 2026 by rpki-client