Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c59b93df-d192-3426-9d45-1c153eb07c4b.roa
File:                     c59b93df-d192-3426-9d45-1c153eb07c4b.roa (raw, json)
Hash identifier:          tMT1MpKySWRSHizX/tNiDBfgaUOPTWpyXBej8Wb7Nbo=
Subject key identifier:   C5:40:37:F1:42:E7:7B:1F:0B:C4:85:58:AC:5C:33:95:3E:F5:F4:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EA94AE2E9555E9FF58030
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c59b93df-d192-3426-9d45-1c153eb07c4b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.194.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:a9:4a:e2:e9:55:5e:9f:f5:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2b5fe2fd-794f-4af3-b5db-0bb97d980d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:13:e4:1b:85:5e:c4:a7:fc:18:e8:33:41:
                    f3:ef:f2:a0:1b:19:97:1c:25:b8:75:af:d9:a2:35:
                    9d:31:d3:06:b0:95:fd:4a:e6:6f:0e:d2:a7:cf:2e:
                    f2:93:c6:0d:a9:ae:fc:5d:fe:44:af:88:bc:e5:85:
                    60:85:cd:42:4e:32:4f:ac:02:8a:2a:6a:7c:0b:85:
                    90:14:83:e5:ca:06:43:85:55:f9:0f:74:ff:2e:af:
                    43:14:26:3d:76:59:4d:3f:dd:3f:aa:f5:45:59:9e:
                    1d:ea:1e:f5:6c:17:da:db:e4:ac:96:aa:af:fc:18:
                    a4:b5:58:76:77:25:3e:37:a9:bc:b0:61:7a:f4:c9:
                    56:d0:7b:fe:5f:1f:8a:dd:c1:b2:81:2a:a3:99:d7:
                    73:7c:43:91:71:ab:0b:8e:44:16:07:3d:59:55:99:
                    33:be:14:0a:8d:c6:0c:56:c2:a6:9f:9c:a1:fd:e3:
                    b4:c3:fe:f6:95:61:f5:d4:c0:52:ea:8e:e9:b7:9c:
                    d1:c7:87:42:de:6b:f7:f4:57:83:43:2c:32:28:4e:
                    70:07:c4:68:5d:16:22:2f:b9:98:06:96:af:93:80:
                    a6:b0:e9:58:86:cd:a6:66:bb:5e:03:bf:93:8e:26:
                    9f:97:8a:e7:2e:06:78:d0:d1:b6:3c:67:f0:ce:7d:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:37:F1:42:E7:7B:1F:0B:C4:85:58:AC:5C:33:95:3E:F5:F4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c59b93df-d192-3426-9d45-1c153eb07c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:15:e1:b9:6c:e6:32:85:cf:4a:dd:1e:47:ef:dc:68:8b:fc:
         e9:04:e5:f0:46:a8:f4:b8:ba:95:71:f2:47:17:75:7b:ae:fd:
         4c:f3:df:9c:b9:6c:33:b4:a2:fe:c6:a9:94:fd:2c:19:a0:e5:
         3a:f6:29:6d:4c:f4:56:32:97:5f:68:cd:fb:fc:b9:23:3c:18:
         69:0c:c6:79:bb:e4:d2:a5:2c:00:8d:bb:de:da:3f:8c:83:65:
         8e:a9:5d:87:cf:47:3c:ca:ad:27:e7:c2:90:8d:84:e7:ad:49:
         32:34:5d:61:93:64:a3:62:ef:d5:ca:d9:fe:89:0e:a9:fe:44:
         5a:81:11:c2:24:1d:34:a1:b4:26:c9:2c:dd:7a:86:74:a1:9e:
         56:48:0e:55:32:3a:0e:44:9a:ba:b0:27:83:28:55:24:36:b1:
         78:e0:8a:7d:d5:cf:cb:20:c1:ee:33:09:80:a4:9b:83:2f:d4:
         b2:e4:8d:b7:33:c4:b6:05:47:4e:97:de:bf:8b:13:4a:5d:aa:
         5b:08:6e:fd:bd:73:39:4e:dc:31:06:93:e6:ab:50:62:d9:67:
         26:b4:3a:0a:3b:8e:9f:41:cd:71:ee:7b:18:66:ba:e7:0e:92:
         21:fe:ba:1a:6f:24:5d:a5:05:2f:ca:66:34:ae:1d:e6:e0:8a:
         80:d3:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:28:20 2026 by rpki-client