Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd48702-b375-3bcf-af7c-052902a5e0d8.roa
File:                     efd48702-b375-3bcf-af7c-052902a5e0d8.roa (raw, json)
Hash identifier:          y+n8Bmtc2Fh6blQySQkEJp/8r/p6tay/sG0flWG5UaM=
Subject key identifier:   62:25:AF:3E:13:71:EA:FE:68:AB:B6:78:97:CB:90:CD:58:18:A9:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E8214433DA68F0A1DA300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd48702-b375-3bcf-af7c-052902a5e0d8.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33660
IP address blocks:        73.3.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:82:14:43:3d:a6:8f:0a:1d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=def84121-d7db-4bb6-9d24-1035e247941b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7a:b5:ac:6f:78:1b:51:c1:ae:26:c3:c1:34:
                    b7:61:7a:21:1b:7b:9a:83:6c:00:24:d9:36:88:a3:
                    3f:48:f1:9d:1b:2a:9e:c7:86:26:0d:ef:ba:3f:1f:
                    ac:31:50:69:56:5e:85:64:f4:a4:7a:47:79:97:c6:
                    70:53:c3:e0:84:85:1b:30:3d:97:1f:ff:be:5b:4b:
                    75:88:aa:a7:c7:92:48:a2:9f:86:53:00:bf:89:75:
                    b5:54:22:13:7d:d6:54:a9:8e:92:ab:77:c5:a1:ad:
                    25:a7:6f:30:46:85:93:b5:c3:3f:82:62:52:c2:85:
                    13:4c:f9:0e:d1:9d:88:22:a3:5a:e1:e9:77:48:23:
                    2e:4b:2b:b5:e2:57:56:61:31:17:72:04:59:d8:f5:
                    63:49:f5:61:bb:35:01:97:02:94:1f:13:9c:1b:4b:
                    4b:b3:c8:dd:7d:6d:4b:d0:a8:30:dc:0d:a6:03:60:
                    de:10:c0:6b:48:11:ab:26:60:bf:19:1d:63:04:c3:
                    aa:83:05:28:96:b1:ea:c1:ac:fe:6b:29:43:4a:6d:
                    19:48:3f:44:a2:bc:62:29:dc:71:13:c1:85:60:0a:
                    37:ae:2d:34:15:e3:2b:0f:52:03:51:8c:f8:be:e7:
                    d2:45:52:4f:2a:3b:2f:ce:33:12:5e:b7:7a:d5:d6:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:AF:3E:13:71:EA:FE:68:AB:B6:78:97:CB:90:CD:58:18:A9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd48702-b375-3bcf-af7c-052902a5e0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.3.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:a3:b2:14:79:5c:43:54:ec:61:24:63:84:74:1b:86:7e:
         39:a9:6e:c3:dc:99:22:b7:61:62:2a:47:c9:2f:dc:32:13:6f:
         8a:cb:af:3b:b4:63:52:1d:11:f0:d2:4c:84:08:e6:e6:c1:c4:
         9b:85:a1:73:40:86:88:c8:11:75:ce:b3:bc:26:49:2c:43:e7:
         a9:b9:0d:b0:ff:f3:2d:08:86:c6:5d:21:e2:c4:a4:dd:23:d5:
         5d:81:93:c8:15:f0:55:5e:cf:a3:55:07:af:0d:e7:4a:2b:08:
         01:98:74:82:5d:ea:e2:bb:32:b8:95:f4:de:78:34:89:c0:4a:
         d0:bd:03:05:32:65:40:eb:dd:88:0a:d0:41:89:3e:14:99:a4:
         1b:67:6d:d4:3c:04:da:24:d4:07:8b:8f:70:6e:bf:3a:98:bb:
         9f:59:1e:37:73:af:3c:42:70:f4:2d:57:b9:4c:d7:bc:ff:e8:
         a8:a2:cc:86:8d:c7:a9:b2:2f:c8:5f:8d:d8:e8:05:64:0c:2c:
         f7:e9:5f:56:6b:35:d5:1a:93:0b:7f:6e:c9:f4:8e:2f:a2:82:
         d5:63:fa:3e:95:c1:e7:c4:3a:d8:da:e3:97:38:bd:a5:27:bf:
         e6:10:6d:b3:7a:55:52:76:dd:69:1e:d5:64:c8:cd:40:88:9c:
         07:1e:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:58:37 2026 by rpki-client