Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa
File:                     13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa (raw, json)
Hash identifier:          ob9R1fk3QtmW4VbWhMgcYJRderOOi8EzFnlGaraVLZQ=
Subject key identifier:   FA:4F:B0:69:90:6C:F9:62:B2:E8:70:EC:CB:09:C8:70:20:3B:50:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A480F161832956F30D900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.215.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:48:0f:16:18:32:95:6f:30:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4b66038a-62ed-4004-b437-4019d509f62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:8b:c9:2f:c5:4f:0e:de:04:46:1c:a0:ed:
                    b6:5a:a3:8c:4f:62:00:80:d9:05:fa:72:c2:91:14:
                    ae:72:8a:1d:35:06:60:01:21:87:fa:16:19:bc:7c:
                    c1:41:03:27:4c:45:58:1a:b1:04:96:85:8d:43:48:
                    e0:29:f5:e1:2d:09:20:6b:d5:fc:0e:e2:c1:c0:e9:
                    a5:24:bb:83:c3:f9:0d:e6:b6:3c:2b:02:80:0f:f1:
                    a2:37:19:6c:14:5d:6e:cf:2c:63:45:2f:a0:34:11:
                    cc:04:34:cb:39:27:1f:3a:75:73:7d:e5:b9:d5:77:
                    71:92:5c:64:20:04:bd:1d:6c:e0:03:63:72:77:d9:
                    e6:61:31:33:33:9b:4b:13:eb:a7:44:b2:19:f4:0b:
                    78:5e:ab:1a:46:0d:e6:36:af:be:ee:25:f0:e2:a2:
                    4e:aa:ed:45:71:3a:d9:92:5f:4e:23:c8:c3:9b:76:
                    80:08:ab:a0:6a:2c:7c:2c:77:94:44:29:bc:c2:2a:
                    dc:e4:a1:72:16:c5:18:de:4a:64:0d:9c:a9:03:64:
                    d6:b4:93:64:68:5d:12:a9:19:cc:45:a3:c1:a8:b3:
                    85:80:96:7a:55:55:5e:82:64:c6:d4:8f:be:5c:29:
                    55:b5:64:c5:e1:4b:dc:af:d4:d5:a6:6a:45:ee:00:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:B0:69:90:6C:F9:62:B2:E8:70:EC:CB:09:C8:70:20:3B:50:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b25120-ee3f-3f77-a5ec-3d4ef10eb1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.215.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:00:2b:d1:d7:53:1e:14:42:26:07:ca:13:3e:5f:91:c5:87:
         16:42:e3:ab:08:63:b2:ab:10:17:7f:9e:b7:48:e2:c0:a9:52:
         b7:8a:e2:65:8b:1b:84:93:5b:c2:03:b1:09:aa:0c:86:af:d1:
         0b:3f:cf:9a:04:10:4b:c7:e0:22:6e:75:e5:e5:da:c2:03:63:
         d8:85:23:47:78:65:da:ce:16:95:17:c5:2e:b5:88:f1:3a:bb:
         be:40:45:5e:1c:5e:60:cd:6d:f9:19:f4:72:fd:5f:a0:6a:de:
         79:70:2c:c6:9f:16:51:ac:f0:39:b8:be:2f:e5:51:53:5c:50:
         60:16:ac:16:53:60:cf:52:f5:05:83:e4:c4:58:44:38:e2:08:
         4c:b8:43:68:fc:43:1b:1f:51:ee:e5:9d:d3:44:f9:5f:71:75:
         65:e5:4c:e1:d8:08:cd:9f:dc:d6:85:03:22:39:26:25:30:98:
         5d:b8:44:db:eb:85:64:40:70:76:f8:63:be:5d:72:56:03:87:
         67:be:30:3d:43:30:df:ce:b6:73:96:7b:d2:ad:aa:aa:87:ca:
         6f:45:70:61:de:52:42:dd:02:04:ae:36:c2:09:b0:35:1a:8c:
         60:57:78:da:49:a7:38:19:b9:90:f8:c5:85:f9:85:e4:93:aa:
         93:49:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:22 2026 by rpki-client