Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b760da6-99e4-3413-97fb-309c11397502.roa
File:                     1b760da6-99e4-3413-97fb-309c11397502.roa (raw, json)
Hash identifier:          NAly1UHZTqlg7ibebEFHe9AD8TemdjrJ7SuD/HCyxFQ=
Subject key identifier:   64:17:CB:67:53:A6:66:F2:88:C5:11:4D:75:BA:8F:FC:E9:A2:8B:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB4DCD877C42C8379F1A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b760da6-99e4-3413-97fb-309c11397502.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        73.183.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:4d:cd:87:7c:42:c8:37:9f:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8eba7808-0b85-4906-af67-9d62b352183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:74:9b:fc:a0:2a:32:eb:de:87:d7:82:20:
                    80:2f:f7:1b:ad:e6:77:5d:12:42:6e:bb:c1:15:7e:
                    32:a9:36:96:1e:f9:49:ba:b4:fb:3f:fa:b7:b4:33:
                    8d:71:ca:4b:9f:60:91:37:21:7b:15:4a:04:48:05:
                    0e:85:a4:03:16:86:7f:fb:80:f0:e8:c0:af:f5:14:
                    92:fd:64:8e:31:2f:3e:fa:d8:45:c2:83:d5:d1:e2:
                    80:cb:62:c9:34:54:0e:78:30:b1:38:29:83:ce:dd:
                    75:48:c2:05:9c:e1:e3:c4:1b:a0:0c:26:3a:d2:ab:
                    03:fd:fe:b7:05:b0:b9:c4:57:42:64:73:30:d8:a7:
                    ae:fc:71:74:f2:ca:31:d3:0c:bb:b7:0a:a9:c4:9c:
                    1e:8d:10:7c:2c:2e:e7:9e:4b:3d:50:db:18:45:0f:
                    e2:de:7e:75:43:a4:ab:60:cf:8f:ce:b5:3e:a0:7e:
                    f2:a1:ec:2f:11:e1:b1:e7:85:fb:74:43:8a:d4:95:
                    74:af:31:0d:7c:b5:46:96:a3:dd:da:59:58:80:73:
                    01:4a:1e:e6:12:9c:e8:83:6f:f7:5d:e0:82:93:7a:
                    6d:07:59:cd:88:56:01:24:95:e8:65:38:a7:32:16:
                    13:83:8b:73:0a:d1:2a:42:bf:c2:57:56:9d:a2:a3:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:CB:67:53:A6:66:F2:88:C5:11:4D:75:BA:8F:FC:E9:A2:8B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b760da6-99e4-3413-97fb-309c11397502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.183.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:05:2c:c7:7f:c2:cc:2c:10:a5:ca:b2:c8:ce:f5:c1:43:97:
         0c:f1:9f:61:9b:12:ca:10:62:e6:55:c4:c6:ce:da:1a:58:5c:
         9a:ed:a1:b2:59:41:64:e9:d6:d1:aa:aa:6d:5d:ec:a2:72:cb:
         5d:9b:49:8c:be:13:e7:dd:d5:b5:42:0c:97:0a:9e:e8:2d:14:
         6c:5f:eb:6e:d8:aa:b1:82:70:80:69:f8:65:29:74:e6:c6:00:
         73:c4:c5:2d:15:1e:5c:ca:f0:23:90:71:87:ce:f1:1b:70:f2:
         d1:ff:c6:08:ba:39:0a:35:56:c2:cb:9c:28:0e:ce:19:98:81:
         6b:f1:8e:94:b2:fd:67:a2:c7:fa:cf:d2:9a:25:90:a2:63:43:
         23:db:57:91:bf:c6:e5:8e:9b:fc:b5:b0:ed:21:65:17:3e:09:
         97:24:5d:eb:d7:80:43:87:67:59:a0:50:fb:30:57:4f:be:65:
         02:93:5d:9b:0e:00:63:c8:45:1d:02:88:03:36:04:fb:f8:94:
         aa:6f:ab:5d:a4:c6:3b:93:1b:f9:cd:b9:17:3b:e5:de:01:02:
         45:29:d6:3d:b2:64:ad:31:61:2e:ee:b8:8c:97:93:05:e8:23:
         39:5d:f1:96:4b:b7:3d:c6:14:6c:53:f9:00:b0:e3:f9:6c:a1:
         cc:31:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:38 2026 by rpki-client