Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dd0e6c4-29c0-3ffa-af4d-b51fe90f1b34.roa
File:                     9dd0e6c4-29c0-3ffa-af4d-b51fe90f1b34.roa (raw, json)
Hash identifier:          NGskFIJv+CI1R07bjrk1dPtjnhUF7pBG3ynvGc0S0rs=
Subject key identifier:   1E:7D:DB:E6:47:25:1F:16:72:52:35:10:72:E6:8C:E8:E9:EC:B5:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A066325D9A57BA0D94D800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dd0e6c4-29c0-3ffa-af4d-b51fe90f1b34.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        73.170.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a0:66:32:5d:9a:57:ba:0d:94:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=cf67bb26-8693-4c5d-99cc-7745d6b6d8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:31:f1:50:de:b2:24:c3:d1:a5:68:e9:86:
                    55:ab:bf:97:8d:6e:36:4b:e6:e7:aa:ae:0b:55:fa:
                    49:7d:d2:2c:3c:90:f7:f0:2e:01:7a:44:d8:08:d8:
                    98:b7:4c:04:c5:09:cd:48:c1:26:6c:38:63:38:92:
                    b6:b0:13:96:91:cd:b7:5c:fa:29:3e:ea:c9:ca:9d:
                    02:29:28:3b:dd:12:45:27:57:2a:e5:c3:2b:f3:e5:
                    23:28:4e:e9:39:16:17:32:d7:d9:7d:cd:bd:12:64:
                    20:cb:5f:47:8f:ff:53:75:77:5c:5e:05:7e:b9:a6:
                    8a:76:86:4b:2a:19:c4:3c:a8:be:d6:a5:29:2c:0b:
                    33:09:50:0a:6f:bd:db:25:40:25:02:10:0e:51:e7:
                    d1:39:5d:6f:a4:a5:58:01:76:36:89:f4:50:9a:3c:
                    5f:66:bc:67:96:d9:7e:0c:41:18:f2:36:cf:ed:ac:
                    ab:fc:22:2b:b5:eb:fc:7e:f9:eb:8c:41:27:0e:8d:
                    cd:82:1e:4c:88:3b:52:14:06:c8:89:9b:86:2c:6f:
                    40:f2:22:e5:2d:d2:7c:ee:b0:05:54:1f:33:f1:5f:
                    95:71:fc:48:f5:02:1b:fc:ac:85:cb:1d:42:f4:52:
                    0e:92:aa:ce:8a:bf:4f:a1:31:db:5f:a6:0d:11:29:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:DB:E6:47:25:1F:16:72:52:35:10:72:E6:8C:E8:E9:EC:B5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dd0e6c4-29c0-3ffa-af4d-b51fe90f1b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.170.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:de:cf:50:ec:60:f1:fe:58:c0:28:bb:78:aa:ea:ab:42:1a:
         1a:15:d4:0b:0b:57:84:44:84:bb:c3:94:bb:d8:da:9e:c5:d7:
         57:cf:a1:a9:e1:42:96:b2:bc:cd:c3:88:ba:33:ae:d3:4d:45:
         71:38:ab:b0:ee:c7:f2:67:4b:11:77:e5:3d:71:7f:62:f2:37:
         43:d0:ae:39:81:d5:ce:c0:a5:e9:4f:bf:a6:74:89:b8:28:34:
         09:a4:d3:74:2f:52:5a:0f:7d:78:3a:95:0e:b2:bf:26:f2:7f:
         91:3e:67:11:07:32:17:1f:8e:89:92:ba:3d:fa:54:01:fb:5f:
         66:0d:62:b2:b4:f5:0e:7d:59:fe:61:2b:8d:24:ed:68:6c:65:
         f9:20:91:75:c2:27:01:51:c8:a1:c1:d3:da:30:f2:6e:37:ac:
         87:d3:0b:4b:eb:c4:94:3e:0e:34:1e:e2:6f:00:b9:4e:25:14:
         a9:0b:a7:06:78:11:ac:ad:b1:15:2e:81:16:dc:84:f6:ee:aa:
         8d:00:74:af:71:8f:c2:9a:cc:32:a4:91:4f:c1:bb:89:f6:ce:
         8c:5b:82:72:c1:a9:7e:f7:c6:7a:d3:53:8b:0d:55:27:15:f9:
         4f:15:23:ac:6e:ed:28:ac:05:0a:05:87:fd:94:c1:03:9b:a7:
         be:b1:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:02:01 2026 by rpki-client