Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03c3351-e37f-3ccf-92eb-04f812982488.roa
File:                     a03c3351-e37f-3ccf-92eb-04f812982488.roa (raw, json)
Hash identifier:          m6Ke31X8pSLGAkn2zYwnZz2N2rMoBMisXbI49cxJAnc=
Subject key identifier:   84:46:16:86:D4:D9:E5:FB:82:2B:10:4A:9E:CF:F1:ED:9C:31:DA:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862E83F875CDE3DD5B33480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03c3351-e37f-3ccf-92eb-04f812982488.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        73.136.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:e8:3f:87:5c:de:3d:d5:b3:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2e153c68-b327-442a-acbc-98b1a5fa55d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:7c:03:87:73:82:ca:53:37:7f:7e:d8:c3:
                    6d:36:2d:72:3e:32:7e:68:47:88:ec:51:d4:93:d9:
                    bf:83:b6:06:97:90:2d:52:4a:0e:10:d6:18:f4:3f:
                    21:f0:37:a3:d8:80:cf:fa:08:f3:c7:29:31:18:c9:
                    13:b9:24:c1:17:96:19:78:d8:ae:d9:f5:dd:bd:82:
                    d6:ed:0e:e8:29:20:01:65:57:8c:73:4b:32:10:21:
                    99:8c:6f:b6:43:5c:6f:a1:3f:e5:bb:01:cf:cb:69:
                    4b:de:98:e4:4e:cd:3f:09:03:51:b5:3d:c4:50:47:
                    e1:cd:d3:e8:cb:cc:6b:6c:37:07:ab:b9:3f:be:e0:
                    df:cc:97:95:1a:39:cd:8a:2b:be:a8:ba:47:82:94:
                    13:f0:74:d6:fc:8c:b4:3f:f9:cb:2d:26:39:b8:71:
                    a7:b1:cb:d5:3c:f9:ad:bd:f1:1a:01:be:7f:bc:ef:
                    f0:ab:bc:19:14:9d:80:78:df:79:37:91:1c:eb:ce:
                    a3:f6:8d:a2:18:20:9b:41:3b:a7:96:49:03:fd:65:
                    98:b5:bf:e6:b8:70:7a:a1:df:5a:6f:a0:75:42:34:
                    ef:a8:a7:2b:c1:65:0a:0e:32:f0:ae:e1:48:00:29:
                    4c:03:af:4b:6c:d3:15:20:a4:20:7b:ff:65:9d:6c:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:16:86:D4:D9:E5:FB:82:2B:10:4A:9E:CF:F1:ED:9C:31:DA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03c3351-e37f-3ccf-92eb-04f812982488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:e9:35:ae:d7:64:e3:c3:b3:e8:c2:65:74:11:6c:54:c6:
         da:27:c2:65:db:38:a3:6e:fe:01:ec:a0:06:91:19:9f:95:b6:
         a5:06:a2:d4:f2:44:b6:81:36:a9:89:4e:58:17:13:c2:3c:9e:
         16:51:ac:79:fe:18:30:0c:5f:ab:fe:a2:53:09:b3:a1:02:66:
         15:85:b1:94:14:c7:7c:1c:dc:b9:d1:3f:bf:cc:5f:e7:25:53:
         54:55:f9:f6:17:f3:ff:f0:2c:c3:f9:22:9a:50:5b:58:3c:91:
         8b:a1:09:b5:76:a3:a5:3b:9a:46:59:92:7d:a6:b7:e1:bf:bc:
         ab:29:7f:0c:82:bc:90:f3:2a:cb:59:65:57:b9:bf:e0:e5:68:
         a2:be:b0:28:e3:2e:f1:d2:63:b0:24:09:95:9f:0d:2c:60:34:
         34:ad:70:40:36:d3:7b:0e:47:4b:a6:bf:9c:09:2a:34:d0:e8:
         24:37:10:62:68:23:72:b8:37:01:84:97:fe:21:d3:fd:f2:5c:
         36:84:65:0a:75:fc:9c:1c:92:f4:c0:62:3e:9b:39:86:c2:18:
         69:dc:73:66:f8:65:5a:3d:cf:bc:2e:ee:28:9e:c6:35:c9:a7:
         09:14:f3:14:30:96:46:9c:da:9c:b9:39:82:22:ef:dc:bf:b0:
         fa:bd:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:10:33 2026 by rpki-client