Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7243faf7-ab77-3b8c-8692-14dc67fff269.roa
File:                     7243faf7-ab77-3b8c-8692-14dc67fff269.roa (raw, json)
Hash identifier:          VUTCkn99+KoEd2XXNUJ7gS9COjyHrdEqBhf7fCOx/Mw=
Subject key identifier:   F0:05:D9:3F:43:62:94:DB:58:EE:23:72:20:4C:85:98:58:E1:E8:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF8E2240788037B1BA5900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7243faf7-ab77-3b8c-8692-14dc67fff269.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.17.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:8e:22:40:78:80:37:b1:ba:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5f6584e2-8900-460a-9cc7-cfbdacbad594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:00:0c:44:84:a0:88:d8:02:3c:38:83:47:
                    64:35:3f:e3:d8:aa:85:1d:f2:35:15:2d:ee:b8:19:
                    ca:28:5e:2a:38:5b:ab:ef:b7:08:c6:55:bc:f3:b1:
                    96:b3:6f:8f:41:23:7e:83:f9:89:b9:fc:04:28:1e:
                    0b:21:fd:2f:5a:d4:d3:28:4c:6f:bf:70:43:2d:8d:
                    05:21:e9:11:42:5a:83:49:07:2d:bd:69:d3:89:dc:
                    28:8e:90:5b:94:75:df:b9:2c:5a:6f:af:22:fd:2c:
                    4b:c3:6a:7b:8e:5d:8d:35:8c:88:75:c2:2f:0a:db:
                    44:16:9a:25:5b:27:e2:83:58:71:f9:aa:41:a8:de:
                    fc:95:9b:f8:b0:27:16:b1:97:f7:43:5a:2c:59:9c:
                    c7:dd:0d:69:3e:49:cb:e9:e5:4c:b8:db:3a:15:cb:
                    85:48:96:d4:b6:ce:e2:d1:55:06:35:d7:94:b2:ce:
                    9c:cb:ad:aa:0e:e7:74:17:7f:82:9e:2f:2b:09:58:
                    8a:29:99:bf:16:49:63:ff:cf:7a:37:f5:40:b9:9d:
                    5d:59:f3:9e:3b:d8:8f:e8:3d:4b:f1:b7:49:29:53:
                    fd:4d:a0:49:81:b0:04:80:56:a2:be:17:ca:26:95:
                    1e:8a:ca:c8:79:f1:5c:6d:d2:3f:55:29:0e:cc:b4:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:D9:3F:43:62:94:DB:58:EE:23:72:20:4C:85:98:58:E1:E8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7243faf7-ab77-3b8c-8692-14dc67fff269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:42:72:2c:9a:17:4c:28:7a:52:f2:cd:eb:ad:82:1d:e8:f8:
         e5:af:07:13:fc:de:3e:70:80:da:7d:a9:7b:a0:90:e5:21:51:
         16:d6:6a:38:8a:52:19:92:35:47:01:27:c5:18:88:9b:3a:f0:
         cb:55:fa:c1:b4:4d:bf:28:2c:6d:76:1a:80:04:02:f8:d3:53:
         96:bc:23:4a:46:49:1d:e7:85:d1:a2:68:93:d6:9f:1f:bd:27:
         b3:98:e7:df:f6:9f:a5:f7:45:cb:ac:37:41:78:a0:f5:77:0a:
         72:1b:3e:86:8e:d6:bc:b2:1d:1f:71:2f:2e:95:33:45:a7:81:
         7e:91:b4:24:99:67:b4:44:be:05:b6:36:c6:c4:78:8a:11:42:
         3c:e5:9c:9f:b4:c9:c2:83:40:bb:20:5e:12:7e:f5:a2:70:d2:
         0c:a8:9a:72:97:2a:3b:e7:27:92:19:80:3b:00:31:13:82:5c:
         6b:46:76:45:41:c4:6f:41:79:fd:31:90:a9:b9:5b:4d:19:8b:
         af:bd:b1:fc:30:90:f2:38:b3:9a:54:c4:1d:37:bf:9b:a6:e1:
         c5:f7:70:2a:70:37:d6:8a:9f:47:49:b9:f4:61:2b:3c:61:9e:
         3c:b7:bc:44:0b:13:12:d2:0f:af:f6:10:b1:6d:8c:69:f5:0e:
         fc:15:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:20 2026 by rpki-client