Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ac62a-68e0-3916-b6b7-9f094560a8e9.roa
File:                     238ac62a-68e0-3916-b6b7-9f094560a8e9.roa (raw, json)
Hash identifier:          Aou5vDAjniGUJ0P+ziAZF9aK+3MpZgXQVVq9QAYcb7o=
Subject key identifier:   69:D3:06:22:F3:CC:5C:C2:D1:8E:79:D4:F7:A9:AD:87:87:39:1B:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAE3A098E86FF9A6FFAA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ac62a-68e0-3916-b6b7-9f094560a8e9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.89.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:e3:a0:98:e8:6f:f9:a6:ff:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=192f5324-4730-4910-aabf-e4ea8a0c73af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:43:28:a8:5a:4b:82:e8:e5:17:d3:dc:68:
                    f6:2d:1f:bd:a2:d0:17:df:73:34:92:6e:35:0d:b3:
                    89:d0:b1:aa:77:35:35:19:bb:21:82:8d:4f:32:1a:
                    b3:87:e2:45:e2:40:03:de:4f:8e:56:df:c3:4e:1a:
                    37:0d:87:b8:89:40:77:8e:50:4b:72:83:c4:92:b0:
                    2f:35:5f:8a:42:be:71:5b:f7:81:2a:40:91:75:72:
                    97:f6:38:26:ac:df:c7:de:9a:5f:d2:87:b1:fa:be:
                    72:b2:23:ea:ac:c9:50:e7:88:06:41:be:24:17:6e:
                    d9:34:8f:26:dc:30:a4:b2:27:11:4e:96:8d:fa:d6:
                    60:f5:64:bc:42:d2:9f:7a:33:52:c5:a9:9d:88:0b:
                    c1:fb:f9:0d:7e:cd:f2:d5:c1:19:e1:de:43:7e:6b:
                    b0:76:7f:22:75:3a:c1:25:12:15:e1:44:71:a2:36:
                    c3:5a:0b:17:16:ed:2f:ce:85:7f:25:c8:49:c4:bf:
                    b0:1f:b7:32:9d:b3:53:01:71:35:c7:cb:a2:ba:59:
                    8d:6a:62:19:80:66:ad:be:4e:06:4e:b9:7e:46:52:
                    1d:e5:30:dc:91:52:19:12:cb:95:ad:00:a0:7a:c5:
                    a6:98:7d:9b:76:70:b5:af:d9:03:4e:ee:65:ed:62:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:06:22:F3:CC:5C:C2:D1:8E:79:D4:F7:A9:AD:87:87:39:1B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ac62a-68e0-3916-b6b7-9f094560a8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.89.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:1e:de:3b:3d:fa:e4:ff:92:d8:27:0b:30:3d:b9:d3:56:
         30:23:c8:de:ad:bd:4c:8e:5c:58:f3:91:e6:ab:aa:1c:73:a5:
         bf:5c:87:13:66:ee:8e:5b:9f:a2:f2:a2:8e:5d:40:2a:35:81:
         fb:dd:c3:2e:21:1e:f6:ac:71:9c:67:8e:4f:43:b7:ae:bd:4f:
         18:e0:21:26:2e:c1:00:e7:94:d3:89:ae:2e:23:4a:59:12:1d:
         9f:f4:a2:9c:aa:4c:ef:cc:a8:23:27:32:f2:c9:79:77:c7:9a:
         8d:42:b2:bc:5a:19:e0:98:8a:ef:d9:57:b2:34:02:4b:9d:c1:
         0b:ac:d9:92:cb:f5:bc:d5:17:44:44:22:fa:ef:2d:a5:c8:c8:
         93:30:92:aa:61:98:63:ed:d9:70:44:af:1e:cc:92:67:cd:1d:
         e6:52:4c:dc:e0:89:1e:8a:ee:9d:b7:ac:ac:71:f6:e2:0c:7d:
         5a:dc:e3:18:ee:1c:71:af:7e:0b:c6:39:c0:b6:41:f6:68:8e:
         47:01:3e:01:db:b0:d0:7f:63:76:d1:54:09:14:c1:29:cb:1e:
         54:e6:e0:5d:63:d1:87:9b:8c:93:f5:95:25:81:4a:76:2e:e0:
         b1:fc:27:7c:cf:b7:03:76:b7:c9:67:88:18:87:b0:7b:8e:dd:
         25:3e:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:52 2026 by rpki-client