Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fdb1e27-300d-3ac6-9597-6389c1a3882f.roa
File:                     1fdb1e27-300d-3ac6-9597-6389c1a3882f.roa (raw, json)
Hash identifier:          wLjBOqnd7iIOZB4lMW8nMX51juU6d8Kdf+EtO8Wq60M=
Subject key identifier:   88:42:11:40:41:6D:AC:5A:13:40:19:2C:5A:97:19:FC:26:45:25:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA6F58B979D0A01A3725C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fdb1e27-300d-3ac6-9597-6389c1a3882f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.67.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:6f:58:b9:79:d0:a0:1a:37:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=09189151-25fc-48b8-a802-fc10abdceca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:1f:d1:50:5d:20:15:38:80:a0:09:ec:8c:
                    35:c9:ed:dc:75:1f:1e:b3:fa:8c:73:bc:20:74:f2:
                    c4:50:68:b7:d9:c8:25:b6:0e:ac:6e:cb:c0:cb:a2:
                    68:93:9d:ef:a1:6e:7d:ab:7e:78:39:3c:8c:29:2b:
                    ab:18:f2:f3:e2:85:b7:e8:33:a7:f4:69:61:5f:7a:
                    c7:dd:f2:ca:50:be:90:c0:94:f4:5a:a5:65:fd:06:
                    c2:bf:1e:e5:0b:f6:36:9d:c0:df:43:17:73:66:7a:
                    aa:8e:45:80:3e:c6:2f:e7:2e:ab:fd:83:79:03:00:
                    5b:33:27:f5:ee:ae:a8:01:66:7c:f8:7d:73:a4:9a:
                    49:60:12:bd:4b:28:06:5a:18:03:4c:ba:c9:74:8a:
                    5a:c0:bb:db:19:f9:d6:42:2f:a5:b8:e8:17:cf:22:
                    90:ad:c7:87:c2:f9:ba:32:a3:98:4a:c9:a0:24:53:
                    24:07:a4:0e:4a:a3:0c:e1:90:77:df:d9:55:47:22:
                    5a:3a:51:05:67:5a:45:94:89:28:d9:b3:e3:09:9e:
                    14:f9:73:fc:55:cb:ff:15:d0:bb:db:e5:f7:a4:99:
                    21:f7:39:50:5c:c3:fd:32:fc:a4:81:a4:d3:66:fe:
                    2c:62:8e:3b:f6:fe:06:41:c6:10:03:99:dc:fe:c8:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:11:40:41:6D:AC:5A:13:40:19:2C:5A:97:19:FC:26:45:25:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fdb1e27-300d-3ac6-9597-6389c1a3882f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:1a:bd:57:48:bc:bb:04:8c:ff:16:81:a7:07:f0:ad:fe:
         08:e2:c4:a8:13:d3:dc:1b:39:67:94:6b:11:ca:46:25:09:07:
         2e:4f:87:19:7d:2d:3a:8a:ab:36:02:01:ff:cf:0a:a4:e5:bb:
         66:45:da:b7:04:09:a2:92:90:4d:6e:94:e1:4a:e5:b2:23:72:
         2d:e0:67:41:10:ba:cc:5d:0a:78:6d:f6:d3:72:92:ea:ce:7d:
         a9:47:e2:d1:dd:3c:d6:e9:ff:1d:26:5d:8a:cd:67:e1:41:88:
         89:b3:e1:9e:e5:99:d6:44:af:3b:ca:14:53:a1:56:95:10:29:
         f3:f9:80:8b:99:1a:ed:43:9d:26:9d:6a:0f:2a:a3:a6:8e:2a:
         af:f1:70:77:08:33:cb:8e:98:25:cd:a6:55:73:3b:26:1a:1c:
         99:6b:9b:3f:6d:66:be:e6:ad:98:73:78:a2:95:d5:62:83:c3:
         25:74:72:3c:bb:ea:97:77:c9:da:e9:e4:d8:ac:62:af:73:4c:
         bb:84:c7:78:09:37:46:e4:6c:cf:26:55:39:ac:30:0e:b3:63:
         fc:e1:78:f8:0a:59:3c:80:ca:62:65:96:4e:5e:a4:58:1c:09:
         b1:a7:6a:67:c1:c4:81:75:d2:9e:cf:bf:1b:e0:c8:00:f1:01:
         0f:e9:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:40 2026 by rpki-client