Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa
File:                     b948726f-90bb-3f1d-a797-9980277b05db.roa (raw, json)
Hash identifier:          +g51M8yTCMNG8n+YmS/Ae4dqe4ho5eU8QSpzCGa062s=
Subject key identifier:   DE:59:9A:25:38:62:B3:D0:14:F8:3B:25:EA:F8:F4:AE:C1:FF:CB:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D466EB4CACE2973282700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.112.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:46:6e:b4:ca:ce:29:73:28:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7f43a6ed-f546-42fa-8903-ae2c86d7928b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:ea:4d:92:f2:bb:8f:79:22:10:e8:91:db:
                    5e:39:7a:98:a9:8b:f4:64:36:50:cb:ca:67:dc:1c:
                    f3:af:9c:40:d0:17:4c:5f:1b:25:b6:af:f2:18:0b:
                    df:07:09:d6:fc:a5:a4:3a:98:80:67:54:ad:9b:e2:
                    b0:d1:47:d7:8a:16:28:17:98:22:e5:86:c4:95:cd:
                    d3:d0:a5:65:bf:96:03:00:5e:b7:2a:48:05:d8:81:
                    98:b4:11:a1:fc:cf:cf:6c:2a:7e:1a:18:a5:cb:3d:
                    5e:47:68:68:b2:b4:7d:36:50:45:0f:3e:aa:03:ab:
                    a1:51:8f:3d:82:fc:65:20:61:dc:e2:68:45:85:5f:
                    35:f4:e8:9d:2e:42:ca:cc:ba:f4:df:75:90:82:a8:
                    9e:13:48:dd:f8:97:6b:42:21:f3:a3:95:17:5d:0f:
                    41:20:9c:dd:64:2b:8c:73:23:a9:26:4c:bd:63:c2:
                    19:ce:05:89:77:f2:6d:5b:10:a7:1e:8b:f2:fa:98:
                    59:10:f4:15:17:f7:29:ea:30:a9:8c:80:51:7b:2f:
                    bf:56:71:a7:58:5b:58:e6:5e:92:6b:a7:7f:9d:7d:
                    db:6a:64:62:02:c4:1d:52:ea:a5:22:55:d6:64:6e:
                    a0:a8:b9:9c:7f:06:7b:3c:f2:b2:0c:c9:ea:53:6b:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:59:9A:25:38:62:B3:D0:14:F8:3B:25:EA:F8:F4:AE:C1:FF:CB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b948726f-90bb-3f1d-a797-9980277b05db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:19:7a:4f:86:5c:b3:9c:43:04:9c:ba:94:6a:d7:ea:1a:
         74:18:c1:c4:d5:87:70:25:dd:be:59:07:31:24:f3:06:8b:df:
         22:57:f8:41:94:db:dc:6a:d9:69:6c:f7:7b:ac:14:7b:65:90:
         6c:69:50:b6:5f:b3:08:f2:e3:75:f7:b4:ed:71:db:50:49:b6:
         4b:74:7b:fe:52:08:58:07:93:62:81:34:fa:ba:df:d8:70:db:
         2e:cd:05:d8:07:8f:ca:28:ad:35:f5:0b:05:ee:35:f4:98:c7:
         71:51:fe:46:c4:52:cd:d9:0c:c8:86:95:9a:da:e6:e7:bb:c6:
         3a:73:7c:b5:05:f2:9f:c7:40:68:62:7b:6b:51:0f:be:4d:ee:
         8f:80:0f:4f:fc:ab:dd:97:63:88:27:1c:f0:2f:ef:7b:e6:86:
         bd:eb:ec:cf:0d:11:56:2a:84:c6:c5:09:1a:c8:e6:ad:f9:26:
         ab:5a:e9:ba:ae:a4:39:f5:32:c4:f1:87:77:6c:cb:7e:30:f0:
         2f:9c:b6:93:db:ba:b6:e3:81:eb:1a:14:8c:ee:e5:e9:15:d0:
         e9:bd:c2:a7:24:00:7c:2b:5f:95:f0:6a:59:29:a7:e3:2a:3f:
         44:a9:e5:4e:55:70:05:33:3a:93:c4:06:5b:8e:e7:d0:6a:bb:
         f0:8c:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:15:49 2026 by rpki-client