Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba9c452-7b7b-3842-8749-41454e4b95c3.roa
File:                     3ba9c452-7b7b-3842-8749-41454e4b95c3.roa (raw, json)
Hash identifier:          xaS3L062VDQRRVhjFvSlxl+7iFjGcYlmbpG3jkx47kk=
Subject key identifier:   02:2B:B1:2B:12:73:05:6A:B9:54:3C:FB:81:A8:C9:3A:37:8F:DF:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600AD8582DC3219CCF41A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba9c452-7b7b-3842-8749-41454e4b95c3.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.186.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:ad:85:82:dc:32:19:cc:f4:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=8ab888a8-f6bb-4bf1-9926-3479c605be88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:42:6e:7d:3e:c8:b2:e1:ed:98:d3:51:3a:
                    3a:75:26:a4:09:41:f3:0f:35:e6:7e:d9:78:29:1f:
                    e4:46:f6:9b:a4:2b:da:12:3e:ce:6f:ea:78:b7:c6:
                    c3:3c:a5:53:dc:ec:b5:01:e7:36:7c:06:1e:f9:16:
                    cf:5f:86:8e:32:bc:49:48:98:2f:6b:58:f4:3f:d5:
                    a8:c6:a0:7e:73:b9:36:72:7c:3e:06:16:a1:09:32:
                    43:f4:85:a4:7c:8e:d8:8a:7f:3e:95:4c:e5:ae:96:
                    ec:78:28:e3:1e:13:d3:3a:e1:05:ca:8f:5c:16:9e:
                    e3:82:95:ca:3c:82:da:1f:8e:66:49:03:0f:53:cd:
                    82:63:7f:cd:15:62:94:f8:86:29:e7:75:3c:5c:0b:
                    fb:c4:49:9b:57:c1:d7:ee:c3:0d:04:86:bf:f7:7c:
                    3e:42:3c:f9:e9:ad:bb:6f:0b:8b:1e:a3:e8:9d:d7:
                    0f:76:67:52:c1:7b:54:20:45:46:31:2f:b8:ed:d8:
                    ee:ac:cf:ca:89:5f:4c:5e:ef:8b:06:aa:48:e3:1e:
                    eb:1e:d4:e5:1e:50:3d:b5:5a:5e:1a:11:fd:dc:3e:
                    4a:c2:33:55:19:13:87:23:43:11:ab:ff:55:dc:e2:
                    e6:00:9f:7e:97:9e:53:55:6f:a4:1b:4b:c5:26:25:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:B1:2B:12:73:05:6A:B9:54:3C:FB:81:A8:C9:3A:37:8F:DF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba9c452-7b7b-3842-8749-41454e4b95c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:36:82:d0:a8:b7:db:07:ab:2a:ee:f4:5d:70:1b:dd:56:25:
         a0:f8:8e:1d:87:66:ee:08:1f:8e:da:c5:d7:5c:e1:49:fa:6b:
         37:c3:74:fa:4e:36:6d:e6:14:15:50:de:6f:76:fc:e5:8c:f6:
         e5:39:ba:15:86:64:9c:d7:54:dd:56:0a:06:d3:55:43:87:12:
         30:e2:8e:02:f1:2e:e2:d6:ca:96:34:cf:c3:54:b6:a8:9b:ec:
         89:d7:1f:3e:df:ad:0b:60:41:1a:5b:df:29:00:bd:6d:ed:64:
         f1:7c:72:39:5c:38:9a:4c:a0:7b:57:6c:c1:7c:8b:ec:91:13:
         47:37:a8:01:c6:a1:d3:fb:24:4c:d9:c1:74:95:69:e1:0e:95:
         5e:48:d3:34:52:6f:6f:f6:19:c1:65:35:85:87:c6:a6:48:41:
         80:5c:64:a1:cc:7b:63:09:ce:21:70:21:4c:b1:66:83:31:05:
         3a:12:97:1c:8d:54:7d:05:ab:a1:0d:c5:f3:d3:15:0d:c0:17:
         77:a5:28:59:96:0c:91:f2:08:b0:e1:47:b7:a7:21:28:c6:da:
         19:e1:4a:a5:b6:1b:7f:cb:04:b8:44:24:54:f1:af:ae:d9:0e:
         36:a2:b4:24:8b:9f:11:7e:c7:e3:c0:23:c7:96:64:fb:2e:2f:
         66:37:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:13 2026 by rpki-client