Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eafe46f2-7745-3a32-b084-a82f96350968.roa
File:                     eafe46f2-7745-3a32-b084-a82f96350968.roa (raw, json)
Hash identifier:          3kvrhQhZ0lnTpe9yXaPuUIb5hGQn17iALPFtU3h7gMk=
Subject key identifier:   68:57:70:26:79:70:C8:51:0D:E6:A9:5B:99:C5:D9:1F:3A:02:E2:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981EA46D4DA382157D8A940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eafe46f2-7745-3a32-b084-a82f96350968.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        75.72.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:ea:46:d4:da:38:21:57:d8:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f7e49802-4c92-44df-aa86-e5ab198bdf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:6b:c6:dc:b2:e5:2c:98:0c:b3:73:6d:22:
                    3d:2e:52:20:bf:3c:43:ab:1e:1f:10:bb:70:e4:f9:
                    86:57:36:ca:28:33:5a:7d:a3:a7:bd:5b:43:36:0f:
                    f8:b5:2f:92:0f:bf:ff:52:82:81:65:7e:a1:eb:b3:
                    4d:b7:aa:04:b5:7b:0f:ec:fa:b4:ad:00:2d:20:f2:
                    03:9d:40:8c:d2:43:7e:a1:14:22:d8:90:c0:7a:4d:
                    3e:20:e6:f9:98:5e:58:d5:cc:37:f2:ed:04:30:08:
                    c6:39:12:74:a7:43:87:24:7e:72:01:78:da:f3:09:
                    c1:d9:5c:fd:c2:80:6c:2e:cd:4a:20:1b:95:75:62:
                    69:ee:5d:a5:c9:40:85:1c:2e:4a:ec:f2:8f:a3:8d:
                    76:bb:c9:42:1f:6b:c8:10:16:4e:d4:8a:00:d4:7d:
                    ef:6c:b3:9a:01:4f:29:ac:3a:a0:df:28:59:ff:02:
                    47:0c:1d:f8:ec:cc:de:4b:6e:30:37:fd:89:c7:13:
                    cf:5e:38:b0:60:9d:9f:c5:1d:4f:cd:fa:e0:ce:34:
                    47:73:cf:60:36:b5:f6:b6:c5:bb:09:dc:01:ce:8f:
                    2d:ff:15:de:42:3d:14:94:39:b5:22:61:ed:41:3b:
                    cf:77:d0:0f:9a:d2:4c:08:cb:7d:a6:9b:83:6f:d5:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:57:70:26:79:70:C8:51:0D:E6:A9:5B:99:C5:D9:1F:3A:02:E2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eafe46f2-7745-3a32-b084-a82f96350968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:c0:2c:48:2c:03:ae:26:61:1f:c1:f6:4b:59:ff:b6:9e:
         f7:ce:b4:6c:f3:9c:48:94:39:40:7e:b6:47:23:7f:05:51:f3:
         3d:2c:8e:50:2b:5c:6c:69:27:75:d7:c7:12:f9:2a:6b:db:41:
         cb:05:6c:14:4c:7c:1c:80:49:aa:e9:04:94:1d:0e:5d:19:47:
         eb:c6:fa:a6:9f:80:a3:ad:2c:0d:85:a8:5a:d8:95:0e:a9:c0:
         c6:ed:db:b0:4e:59:dd:b3:d0:09:31:7e:bc:d0:4c:26:a5:86:
         41:e0:3e:2e:0b:f9:72:66:53:b6:06:48:35:5a:e8:18:60:75:
         dc:a7:49:b8:53:88:c6:e6:14:1a:aa:2a:1c:81:0c:a0:c8:d4:
         51:37:c8:b7:8d:ba:6b:8b:ec:c9:44:30:01:95:ca:18:c2:b1:
         aa:ab:90:42:e8:51:92:6f:f9:22:9d:fc:2f:60:69:19:e7:45:
         88:07:36:cc:97:40:30:55:93:5b:af:bf:b2:26:49:d6:c1:bb:
         de:88:32:32:59:d7:d9:59:1c:91:a6:18:f6:1c:c3:98:1a:ab:
         7f:7f:f8:6b:6e:cf:30:8e:d9:dc:f8:c9:36:d7:f4:59:33:f1:
         fd:32:3e:07:b1:df:42:52:92:ef:01:5c:ce:4a:eb:be:56:ce:
         4d:0d:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:41:58 2026 by rpki-client