Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff8bfc8-9472-326e-8be5-b266472f98fd.roa
File:                     dff8bfc8-9472-326e-8be5-b266472f98fd.roa (raw, json)
Hash identifier:          c9lmLZkWtvy4JaVciMqpdmtrO5h0Jwd8dHTka/tO3rI=
Subject key identifier:   5A:7B:ED:24:38:20:A4:B9:38:84:60:F1:4C:53:03:11:47:C1:D7:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A813CFF10ABFA78CEA6A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff8bfc8-9472-326e-8be5-b266472f98fd.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        73.184.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:13:cf:f1:0a:bf:a7:8c:ea:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=28a06876-708f-40d6-b50c-7cf61d478448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:e7:2d:d3:4b:6b:34:7e:8e:20:83:55:f1:
                    bc:2d:62:5e:c2:5a:c5:2a:ce:dc:0a:41:f8:9e:05:
                    0e:a5:d3:b0:f3:e9:c7:49:40:10:9e:7b:ba:e5:a9:
                    61:a9:6a:31:43:8e:b4:1f:5b:6a:e1:19:25:f7:be:
                    f6:1f:27:64:71:d7:29:a7:56:4b:05:c1:b7:31:5f:
                    14:81:bf:67:fd:40:7d:d1:3d:da:30:23:51:81:b5:
                    eb:d7:2c:1e:9f:da:3e:03:6e:a0:3c:6e:71:74:88:
                    63:3a:cc:68:f0:06:d7:dd:1d:94:7a:88:3d:6d:13:
                    36:20:9b:b1:5f:0c:58:13:a8:d0:db:03:6e:c1:71:
                    53:f4:31:7f:35:d5:38:84:70:90:95:ca:a4:e9:e8:
                    82:e4:ee:87:99:20:f3:2a:d8:48:a2:d7:ad:fd:45:
                    6b:dc:22:40:e5:be:38:32:3c:07:24:fd:25:0e:49:
                    ae:d2:3f:f8:39:79:dd:ba:39:b9:42:c5:86:d2:d6:
                    9b:db:31:e3:4e:24:3b:9c:9f:41:8a:9f:12:2b:7d:
                    3e:75:29:4b:ce:7c:eb:d8:0a:7f:6f:87:c0:17:63:
                    c7:f7:94:ad:59:a6:71:f8:6a:a3:e1:5f:69:21:14:
                    c4:8a:c8:e6:15:7c:35:30:19:e5:1b:a3:12:91:29:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:ED:24:38:20:A4:B9:38:84:60:F1:4C:53:03:11:47:C1:D7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff8bfc8-9472-326e-8be5-b266472f98fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.184.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:4f:d3:de:32:e4:3b:52:5f:d9:dc:54:a9:e8:2e:3e:96:
         1d:3a:e6:a5:a4:ac:96:47:2e:ee:6f:6f:b9:6b:0a:d5:c9:45:
         e1:ab:8a:a7:8b:cb:1f:2e:33:38:99:c7:6f:f5:cb:54:59:29:
         39:1f:53:49:c3:2e:e7:06:00:61:7f:cd:a9:a7:bf:e1:ec:d8:
         8d:31:d4:d5:6d:f1:4c:ae:a5:e4:ab:4e:71:27:74:4c:2e:11:
         2e:6f:18:d0:7e:61:fb:bb:7e:74:e2:d7:4e:de:13:b6:50:78:
         9f:f6:a5:c2:08:b3:8f:bf:7e:8b:6c:a0:e7:91:15:76:ac:f2:
         d2:64:16:04:f1:f2:16:95:e2:32:db:bf:e5:69:01:59:d7:4b:
         7d:62:55:d9:d7:58:3c:a6:e6:df:05:b2:2a:ba:bd:92:59:91:
         86:82:06:c5:47:fd:c5:7f:fa:eb:a9:f0:9d:91:61:1f:38:94:
         94:80:77:34:03:08:1a:be:e5:65:66:eb:24:93:80:b9:73:42:
         f0:64:88:41:ad:23:d1:cd:c1:05:9c:26:6b:81:2c:2e:f5:f6:
         1c:a7:95:9d:eb:8e:d0:b9:58:39:80:3a:ff:fc:ee:96:9b:a0:
         60:93:d3:58:d8:b5:77:b6:d7:e7:08:fa:46:d7:6c:ca:0f:d9:
         00:85:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:30 2026 by rpki-client