Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d327d-5283-3f55-83fd-4ad9177ea095.roa
File:                     cf9d327d-5283-3f55-83fd-4ad9177ea095.roa (raw, json)
Hash identifier:          TFBuunjBwI76UbERdTnHP8+kotMAYlweiQW8p6/4xGw=
Subject key identifier:   CE:BE:3F:CB:72:A0:CA:EE:5D:67:5A:42:5C:ED:E6:90:F8:E0:E1:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D27EC9F1FE40C499F7240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d327d-5283-3f55-83fd-4ad9177ea095.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33660
IP address blocks:        73.65.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:27:ec:9f:1f:e4:0c:49:9f:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1f3180ed-2bf1-4919-9553-7fad02fd4003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ee:1f:ce:dc:60:29:c6:46:1f:7c:3b:01:db:
                    df:a6:31:63:48:c3:ed:56:5e:c6:5f:93:0d:cc:99:
                    5e:48:93:fc:d1:d9:e5:6e:63:05:92:78:56:10:eb:
                    a1:9d:cd:ae:b2:b3:28:7f:19:98:10:39:ce:a5:8d:
                    ec:3d:47:55:7a:ca:a4:78:cf:fe:59:ff:d7:2d:42:
                    46:50:97:09:7d:47:44:9e:60:07:0e:c0:a1:35:5b:
                    e6:b0:d0:1f:c7:9c:0b:34:f4:c5:ae:17:20:02:98:
                    93:9e:d1:60:72:f7:02:28:13:a7:cd:63:d8:2e:67:
                    7c:a8:dc:95:9d:c0:c2:cb:b7:89:4b:55:d5:b5:96:
                    35:bf:98:70:32:56:db:83:74:88:51:f6:98:ff:7e:
                    15:87:8e:c9:13:db:af:83:a2:20:7a:58:24:a2:ee:
                    ef:9b:0a:68:fd:5a:21:44:a3:9e:0a:30:80:5e:d3:
                    d0:b7:8e:9f:bf:c3:f4:64:04:14:bb:d0:ea:7c:60:
                    e1:06:22:a4:43:f0:58:77:29:68:e9:0c:a7:a3:0d:
                    3b:87:61:f9:6a:ac:06:56:80:2f:d6:80:98:d6:1f:
                    b1:bc:9a:c1:c4:6a:66:77:a8:73:49:2a:a0:cf:4d:
                    e8:e0:80:6d:3f:b1:a0:4e:f9:2e:0a:30:cd:c0:43:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BE:3F:CB:72:A0:CA:EE:5D:67:5A:42:5C:ED:E6:90:F8:E0:E1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d327d-5283-3f55-83fd-4ad9177ea095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.65.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:ab:94:68:ef:17:71:ee:85:a1:be:05:bb:9f:87:20:be:
         c3:a8:dc:1b:20:6f:fb:ee:08:b4:c6:c1:5f:ec:9f:5e:bb:0f:
         4b:3b:ff:d9:46:56:2d:ec:87:81:1b:d1:5a:96:7a:4e:16:14:
         ae:e2:0d:bc:9e:0e:55:03:54:4a:f6:ae:7a:2f:7f:c6:69:af:
         98:64:ab:50:df:d8:d3:e6:1f:94:94:8a:1b:d9:7d:98:15:a7:
         ce:b0:fd:d3:d6:98:95:af:35:a8:54:d6:f5:77:0d:8d:c7:a9:
         5d:39:c1:ee:bc:fb:59:20:8c:a6:ca:fa:eb:6b:a1:dd:63:1a:
         54:59:12:97:71:ab:a0:c0:15:05:e9:4b:32:ff:a0:99:a1:ea:
         87:67:59:ea:33:9c:5c:9f:6f:fa:ae:2c:db:c7:d2:34:a5:c0:
         c1:ec:37:19:24:2e:f4:97:ab:91:be:d8:8f:5f:ac:c4:d4:8b:
         08:f5:5d:01:97:a1:48:dc:85:ac:a3:7e:ef:6a:9c:eb:62:4e:
         27:07:d2:ee:67:dd:ea:38:f7:66:76:a9:75:a6:50:4c:30:a0:
         22:1b:f3:bb:7c:59:9d:62:8c:47:78:c6:3b:c8:ca:0f:66:36:
         7a:36:cb:77:cc:11:03:19:9c:d4:87:69:90:73:a2:f0:a5:e0:
         52:c5:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:07:33 2026 by rpki-client