Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bec13ca-e631-3954-982a-cb9bd2400ecd.roa
File:                     0bec13ca-e631-3954-982a-cb9bd2400ecd.roa (raw, json)
Hash identifier:          9d7zlJzcaL/K873hxNeIk4FFeJpjPvHxG2G6mR2zu7w=
Subject key identifier:   AD:84:09:5F:3F:91:6B:33:38:40:DA:68:E8:8A:90:F5:94:11:0B:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB30BF5B01DA8DBC685300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bec13ca-e631-3954-982a-cb9bd2400ecd.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        73.191.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:30:bf:5b:01:da:8d:bc:68:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9e162596-45aa-4497-8f38-8c5d224b8e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:82:10:9b:9a:31:8a:50:ab:2c:ce:bd:d3:
                    65:15:ad:a9:9a:dc:4f:42:b5:65:7c:03:63:c9:e2:
                    45:f2:d1:11:c5:f8:d1:2b:55:38:b7:3e:7c:f4:89:
                    27:4f:e5:21:f2:42:9f:95:f0:6f:70:35:ab:26:94:
                    5f:e8:3f:fc:f9:aa:1c:a0:e1:1f:76:9b:87:2c:2b:
                    ad:b5:a4:8c:dc:18:c5:99:76:65:58:c3:58:48:dc:
                    6b:63:e9:5e:70:b6:4f:67:21:08:cc:58:60:e7:f6:
                    6c:08:7d:23:58:ef:c1:d1:7a:86:2f:c5:ca:85:ea:
                    0e:b3:58:59:08:f5:00:d7:97:33:ab:0c:d2:0f:19:
                    a8:ba:86:0e:c4:75:08:89:c8:ce:17:b2:cd:44:41:
                    2f:70:9a:90:bb:d6:fd:3c:73:5e:d8:2b:01:05:18:
                    07:07:e3:3a:a4:26:c0:9f:4d:c8:cd:2f:1a:4f:67:
                    8b:fa:49:01:a9:e1:f2:bf:65:29:1a:98:a8:6d:91:
                    ae:c3:8b:e8:c1:78:2a:3a:32:ae:23:45:52:5e:9a:
                    86:9c:64:10:57:f4:2e:9f:98:50:e9:06:95:6e:6b:
                    a1:5f:95:e4:16:73:a0:e2:01:5a:59:c6:f6:21:7a:
                    90:51:51:19:85:bf:e4:81:a1:65:2a:03:ed:8b:4f:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:09:5F:3F:91:6B:33:38:40:DA:68:E8:8A:90:F5:94:11:0B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bec13ca-e631-3954-982a-cb9bd2400ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:b8:1e:ac:18:be:0e:95:ed:3a:70:0e:1b:c4:da:3a:98:
         76:22:4e:ef:84:d8:f1:9f:12:11:81:be:b2:70:db:56:c8:8d:
         ce:f6:9e:58:45:88:f2:96:d2:28:39:24:d8:5f:69:4a:f6:4b:
         5c:22:a2:9c:44:82:69:fa:69:95:a9:50:d7:43:56:8c:27:6d:
         b0:92:61:a0:27:25:3b:15:8a:bc:5e:f5:de:25:4e:53:11:ff:
         e4:44:82:62:e3:70:3b:b8:9b:80:0c:62:40:1d:d3:06:a9:2b:
         5a:07:78:9c:bc:96:8f:bb:c4:5e:9b:fb:9e:be:89:d9:12:2c:
         45:14:7c:1d:f1:da:c0:57:1e:d8:05:64:a1:2a:11:1a:23:a2:
         4a:45:d4:46:1d:c6:27:4a:c8:37:b2:50:7d:84:9c:db:1f:ea:
         7c:58:f1:f5:c2:a2:c9:9e:75:81:77:44:db:63:8c:c9:1b:c3:
         1b:61:4d:25:da:ec:99:a5:2f:fa:16:95:c4:b7:b6:45:7b:51:
         64:1a:13:58:0f:55:70:01:39:cc:ba:0f:b4:18:fb:f9:d8:1e:
         03:33:ae:77:bc:41:cf:be:a0:ad:78:cd:17:19:f6:a7:dd:65:
         34:a8:63:ee:5d:ff:42:dd:11:63:70:f4:7f:f6:8d:d3:92:b7:
         f9:e3:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:32 2026 by rpki-client