Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2dd013f-b918-3ca1-b7c5-59564fa328a3.roa
File:                     f2dd013f-b918-3ca1-b7c5-59564fa328a3.roa (raw, json)
Hash identifier:          cbPDq5jxgxx4Dj4nY7nSDzKBWxST7zmNPG1Ckb/tpGc=
Subject key identifier:   73:43:AE:F9:E9:40:AC:DB:1E:37:C6:1E:21:EE:D4:FB:DB:E1:BC:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862D1A2FA24665D1320C180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2dd013f-b918-3ca1-b7c5-59564fa328a3.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        73.191.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:d1:a2:fa:24:66:5d:13:20:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=94750ac3-bd2b-44d1-9192-60dab01b519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:4b:ad:e6:e4:1c:0b:3a:5f:37:f5:47:34:
                    dc:17:cf:c5:ec:c2:de:b6:18:7b:d1:22:54:ef:fc:
                    91:40:f6:af:92:35:a6:2b:33:68:1a:ea:70:d9:bd:
                    7f:30:06:67:98:7f:0c:43:04:5b:a3:2d:39:d0:de:
                    58:d6:1e:ee:3d:4b:28:1a:0c:51:10:19:17:c1:eb:
                    64:60:c3:8b:c1:39:70:58:9b:ae:1a:ae:6e:8a:bb:
                    ef:4f:ea:82:7a:fb:e7:8f:d4:f0:a0:7b:96:15:a1:
                    1f:51:d0:16:d1:fc:3b:d2:d1:bc:fe:c2:a1:68:5f:
                    22:ce:f5:5b:1d:e9:7a:a9:05:01:1f:0b:b9:a1:78:
                    38:a9:e2:02:f8:25:e1:b4:ec:94:df:cf:e4:1e:1c:
                    f3:7a:2b:ce:ef:e7:9e:de:a0:81:2d:ce:d3:34:68:
                    fc:32:ce:f0:5a:d2:56:b7:56:64:cf:c0:f6:9f:ed:
                    de:fc:28:92:38:23:70:91:dd:20:91:fe:a7:24:a3:
                    4f:43:77:fd:85:e3:ae:9c:39:44:63:d7:78:69:64:
                    fb:03:39:a7:5c:41:a4:f5:6d:8c:36:c5:31:9f:ce:
                    86:21:69:d2:d7:28:46:8a:2c:6f:47:48:c6:01:1b:
                    87:5d:71:3a:3e:8a:28:a9:29:bb:f2:cb:45:58:80:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:AE:F9:E9:40:AC:DB:1E:37:C6:1E:21:EE:D4:FB:DB:E1:BC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2dd013f-b918-3ca1-b7c5-59564fa328a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:8d:60:26:8b:24:7b:39:6d:eb:fb:df:25:f8:38:fd:76:
         18:36:d4:e6:5e:25:bd:db:f0:17:b3:12:91:cb:aa:65:b8:31:
         42:aa:50:b0:74:bc:60:05:5a:d9:e9:ea:6b:b4:78:e8:fd:d9:
         72:0c:78:69:3b:f4:ae:19:20:52:04:9b:05:70:42:57:e5:2d:
         5a:86:74:68:77:b5:48:28:7a:da:56:0e:2a:db:7c:6f:24:96:
         8d:f8:41:75:7c:91:9e:e8:02:b2:2d:51:11:2a:07:72:cf:8b:
         84:bf:24:9b:a6:a1:d7:0d:94:5f:47:78:10:1c:11:c0:11:41:
         19:5c:b2:f0:cf:30:c5:6a:a5:bc:50:82:d4:f5:f4:f0:c2:8f:
         00:ba:36:a5:d6:d0:fc:15:c0:24:c2:94:71:39:68:49:72:be:
         bc:b3:68:0b:e9:e1:95:d2:70:a3:ba:87:c8:1b:7f:c2:12:65:
         eb:a3:fc:65:b1:3d:d5:10:12:3e:6a:d3:10:82:76:39:cd:d9:
         9d:e0:1e:c8:56:60:f7:c9:4b:6e:24:b7:dc:a1:de:d0:27:4c:
         7e:2c:9d:b2:25:a0:7f:28:a5:d6:86:7b:59:da:67:75:fd:f2:
         4b:31:25:55:e6:e9:13:c1:c6:22:db:fa:d7:ac:51:83:f3:d3:
         c2:b7:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:05:21 2026 by rpki-client