Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f76159-a52c-36bb-9b7a-643bd4f8b1b2.roa
File:                     77f76159-a52c-36bb-9b7a-643bd4f8b1b2.roa (raw, json)
Hash identifier:          3QMlt+y6UoI+ilNmL79li/pE/wPj0B+YlaLVHfI81p0=
Subject key identifier:   1D:51:67:42:3D:8D:04:2D:F2:79:82:EA:0C:97:74:56:5F:F0:C2:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED432134E4C701C216F079740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f76159-a52c-36bb-9b7a-643bd4f8b1b2.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     13367
IP address blocks:        73.94.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:13:4e:4c:70:1c:21:6f:07:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=0a465090-eff5-441c-bd98-9e7309748cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:39:73:4c:ac:a6:a2:b4:70:7f:43:d3:62:
                    a4:d6:d5:2b:1f:c4:02:6e:3d:ff:49:25:8d:97:4e:
                    ad:73:2b:0b:f0:27:3e:82:e0:46:59:c1:0e:58:af:
                    43:20:3b:3f:13:9f:0b:4a:d3:38:ca:fc:9c:0c:a4:
                    2c:1f:81:4d:af:6e:b5:d9:e1:fd:aa:22:56:81:70:
                    ff:89:b9:81:b3:33:5f:63:ba:9c:f7:38:f1:98:04:
                    55:54:03:50:b4:ba:36:e1:25:01:cb:57:5b:fc:ba:
                    2a:55:92:48:67:e6:df:1c:e2:97:08:9d:13:49:7c:
                    87:f1:81:a5:bb:6a:45:05:34:3d:73:09:47:9e:51:
                    bb:1f:cf:08:e2:53:92:32:d0:23:aa:14:76:fb:9b:
                    63:8c:a1:73:68:87:b1:ca:e7:65:cf:1c:f6:83:4b:
                    d9:a5:bc:44:3d:68:20:31:d5:5f:45:9f:0f:0e:9a:
                    13:b3:19:34:03:9f:f9:de:9a:cb:cf:51:b7:da:8a:
                    ab:80:60:c5:c6:13:8f:6c:97:f2:bd:75:d6:54:07:
                    86:9e:96:bc:aa:23:c2:aa:79:55:d0:91:ed:bd:e0:
                    33:14:04:8d:ed:bc:06:2a:bd:c0:f1:83:e2:86:cd:
                    32:6c:6b:54:e9:27:e9:40:50:2d:13:57:e0:18:45:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:67:42:3D:8D:04:2D:F2:79:82:EA:0C:97:74:56:5F:F0:C2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77f76159-a52c-36bb-9b7a-643bd4f8b1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.94.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:4d:e5:22:9f:7f:bc:b9:d3:89:b1:65:10:28:b0:64:43:61:
         a4:0f:1c:7a:d8:4e:21:d0:a6:08:f5:89:a9:46:f8:79:ba:ab:
         d1:78:d5:d0:eb:7b:2f:3f:d1:80:a4:00:2b:d2:28:f2:2c:b3:
         4d:3e:1f:33:6b:b0:fd:1c:e4:d8:6d:04:9a:86:3f:ab:16:13:
         04:14:e2:e3:e7:82:66:43:14:3b:5e:90:a5:f6:b9:a6:88:30:
         55:7c:f6:24:e8:e2:f6:86:f9:35:62:c7:0d:af:b4:77:8b:34:
         30:74:3c:f1:49:e7:b1:75:69:9e:d0:ae:95:e9:f5:ce:94:4a:
         14:4d:cb:86:b0:06:99:e1:9d:23:26:69:85:19:88:55:ef:1f:
         f7:3a:0f:dc:d7:cb:01:02:7c:de:a0:91:5a:5a:8f:66:f9:d9:
         25:f2:f8:43:e1:27:ef:01:dd:06:fe:44:1b:bd:9f:bc:6e:f2:
         29:0a:59:c3:e2:34:8e:af:5a:c4:b1:f9:e8:b3:ab:b7:02:0d:
         28:f0:3a:16:0a:43:66:fc:20:68:d9:2c:56:dc:bd:4b:64:9d:
         a2:ff:7b:db:1a:42:af:0f:f7:bb:31:63:a4:28:90:a9:69:9d:
         4a:db:db:22:c6:0a:e6:83:30:be:d6:58:bb:c5:dc:20:5a:39:
         92:17:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:56:49 2026 by rpki-client