Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bf42d49-396c-3943-b8fd-4604a1c34487.roa
File:                     7bf42d49-396c-3943-b8fd-4604a1c34487.roa (raw, json)
Hash identifier:          NLwGJ99Euy0X9MFgL0t1O013AVu7Td04wuYiRpjzzUY=
Subject key identifier:   F0:01:8F:36:10:AE:41:8E:21:59:52:15:AD:9A:51:3C:49:F2:05:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600B3558D914CBFA354CFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bf42d49-396c-3943-b8fd-4604a1c34487.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.219.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:b3:55:8d:91:4c:bf:a3:54:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=5bf4a79f-0977-4089-949c-8a0b62282f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:13:f0:bf:7c:e9:4d:5f:49:19:10:4d:86:
                    e1:a4:89:d3:05:f6:59:92:c7:6d:41:ac:9f:4a:13:
                    81:8f:f3:f0:32:c7:72:2e:6d:4f:66:d3:9e:41:33:
                    54:53:b3:9f:55:69:21:a3:ee:3e:a7:fd:40:e0:97:
                    35:66:35:65:bb:ad:e7:db:5e:49:24:75:8e:11:2d:
                    00:c4:86:e5:17:1f:e0:93:2c:60:b0:09:1a:c5:78:
                    45:34:ce:44:e7:d0:ae:cb:9f:68:2e:27:2a:0d:4c:
                    4c:67:f9:d5:0e:e0:3a:22:54:ba:3e:fe:85:78:dc:
                    cf:ee:cc:82:b4:17:1b:98:c7:49:00:8a:59:25:2d:
                    6d:15:09:b6:23:d7:38:4d:0c:93:25:94:aa:62:49:
                    f3:5c:cf:9b:15:7b:20:94:22:83:79:78:89:d8:58:
                    8b:7b:76:84:ad:88:0a:68:61:48:3b:fd:75:f5:21:
                    91:c5:a5:ce:9e:b6:7c:22:84:ef:4f:30:f1:38:ee:
                    3a:a3:9a:92:ec:e6:a1:06:2e:3b:33:3a:a0:0f:10:
                    e5:db:dd:8d:e9:89:51:31:b9:0b:d8:07:84:90:e2:
                    5a:d3:fc:92:5b:35:9e:24:49:a7:cb:99:df:d0:2b:
                    74:be:2a:2b:f8:8d:b1:bd:a7:80:11:d2:d3:64:62:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:01:8F:36:10:AE:41:8E:21:59:52:15:AD:9A:51:3C:49:F2:05:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bf42d49-396c-3943-b8fd-4604a1c34487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:d0:b6:40:bd:13:02:b9:ad:56:2b:40:1b:77:ad:ea:d7:
         a4:09:3e:86:4e:53:fb:6e:2b:2c:c1:e4:c0:0c:b4:08:e9:0e:
         a6:52:ae:43:48:e2:5e:7a:f6:95:56:a6:89:e2:5b:8c:4c:bc:
         87:21:1d:57:6c:c7:bc:91:cc:ba:fb:d0:31:a1:c7:d9:e8:f4:
         63:85:0f:62:53:59:e8:dc:7e:6c:a4:fe:dd:19:38:c1:46:d7:
         95:5b:f8:61:ad:35:d1:2d:5b:05:60:6a:8b:44:95:3b:f0:33:
         11:b1:ef:19:a2:73:bc:48:cb:95:a9:62:a6:3f:1d:b5:86:1f:
         84:3d:d3:97:d4:8c:7d:fa:ce:84:e7:67:99:1c:90:93:a9:68:
         9c:42:f0:b6:ee:5a:29:79:7e:bc:36:87:68:7e:f0:18:78:4e:
         6d:35:2e:da:19:42:b4:7e:89:25:00:5c:b8:a6:92:37:3b:5c:
         a1:0d:0a:bb:28:f4:d3:f7:9f:ff:e5:e2:ea:52:af:c4:ba:0e:
         71:89:a7:52:66:ba:cf:be:cb:d1:97:f7:9e:f2:af:d2:ed:34:
         c6:64:bb:11:2b:54:0a:f5:19:76:8b:70:92:4b:bd:ec:f7:61:
         87:1d:a2:d0:c7:a4:6f:e6:15:40:3d:c3:00:57:ba:b3:52:de:
         59:6a:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:23 2026 by rpki-client