Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d1d046-bd59-35af-a522-74ea7f10379e.roa
File:                     02d1d046-bd59-35af-a522-74ea7f10379e.roa (raw, json)
Hash identifier:          HNziGVcJBHp8iNcdaI6ZoR/yoGzJiShmj44JJjOq4go=
Subject key identifier:   F3:A5:1D:A5:D4:F6:FA:57:AE:0C:2D:52:8C:AC:0F:63:2D:A1:AD:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE592F94AE156E4FC5DF6B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d1d046-bd59-35af-a522-74ea7f10379e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        73.131.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:2f:94:ae:15:6e:4f:c5:df:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cd43b922-20a8-4083-8e72-d1e66e24c22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:e9:15:a5:d7:71:43:9d:1b:67:67:cd:91:
                    d4:f8:e5:6b:bc:06:f1:24:0b:52:7b:2b:d0:aa:6b:
                    7b:78:6c:44:e0:97:1e:b0:0c:85:ae:a1:9f:9f:5a:
                    e2:9c:64:8c:12:a5:a1:48:7f:88:19:f5:fc:24:6b:
                    0e:3f:02:c1:8d:67:13:43:d4:4e:e3:5b:75:b8:3a:
                    af:0d:8f:9c:dc:1c:c2:fb:0b:05:0b:4e:64:ae:30:
                    44:0c:38:4b:78:11:36:c0:de:f4:e9:70:3f:b1:07:
                    8c:f7:24:49:d5:e4:2b:d0:53:ef:b3:ca:c8:2a:6a:
                    69:cf:9b:06:dd:90:9f:70:c9:05:00:0d:a3:9d:b6:
                    71:ba:d7:52:fc:7d:e8:fb:d1:3e:d2:73:6f:77:28:
                    29:6c:a3:cc:45:d5:a8:e6:82:77:65:27:cc:0d:c8:
                    9e:dc:31:35:56:d4:f2:fb:14:37:1b:0c:11:fc:69:
                    ca:3c:a2:af:87:c4:10:d2:cd:cf:3d:bb:0d:6e:ba:
                    2f:7d:3a:b3:08:74:19:06:6c:e9:77:9b:e9:2d:26:
                    20:2b:bc:3d:a9:be:46:8b:71:5d:6c:41:9a:e9:92:
                    6e:55:f0:fe:50:d4:84:63:a7:cc:8c:17:e8:3e:30:
                    d7:86:e3:6f:e4:a8:4e:01:b1:1a:56:1d:ef:b5:c9:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A5:1D:A5:D4:F6:FA:57:AE:0C:2D:52:8C:AC:0F:63:2D:A1:AD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d1d046-bd59-35af-a522-74ea7f10379e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.131.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fc:11:f1:79:62:af:d1:37:6b:fa:ba:09:07:67:90:a1:82:
         d5:16:a8:ce:db:19:3a:81:98:50:38:40:8b:f3:51:ce:d8:42:
         54:53:9e:53:0b:0b:eb:87:1e:6f:d4:40:53:cd:6a:fa:a1:7e:
         da:6c:c0:06:74:09:a9:f9:0d:86:61:34:b4:d6:f7:d9:21:be:
         25:6d:83:0e:ed:fc:14:4c:e9:74:e9:ab:31:fa:e3:89:64:b6:
         fe:cf:28:d0:71:24:8f:28:90:75:d2:ef:68:4c:ae:d5:84:fe:
         f2:98:2b:a0:30:fc:33:84:c0:cf:6d:4f:b6:f3:d6:f6:2d:98:
         e2:f6:07:25:cf:9c:15:ca:c3:95:6f:f0:33:46:3b:8a:97:a2:
         23:43:e0:06:0a:5f:6e:92:e2:bd:73:4b:5d:95:ac:5d:29:cc:
         79:ce:1f:64:30:74:e0:ee:35:ed:64:aa:44:51:77:59:56:70:
         3f:c0:26:a8:f5:f0:93:27:c1:01:f1:90:82:7f:b7:fc:3d:d6:
         f2:48:d0:e7:fa:3d:26:04:ad:8c:cf:27:21:21:c7:45:9d:4c:
         c3:b6:34:b8:3f:e3:99:7a:75:d3:1a:49:7c:f9:ba:0d:9f:9f:
         c9:70:c8:15:f5:b8:88:ae:a7:94:0d:de:83:dc:e9:7d:0f:d3:
         da:0b:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:24 2026 by rpki-client