Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa
File:                     28410caa-a0ae-3e98-aacd-ad696443c014.roa (raw, json)
Hash identifier:          t6ySwE5P/5VeTqV2cfJ4rpU8wMxUhffJw7BtEWXa0c0=
Subject key identifier:   16:7C:48:FB:FD:CC:4F:35:D6:C2:09:59:1B:49:50:B2:A2:57:27:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBA30E897416ADE4AFB100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.240.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:a3:0e:89:74:16:ad:e4:af:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7777691e-86df-4db9-81ac-c8e2a6d6f251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:f0:4f:71:78:81:d1:b1:ab:6f:00:02:fc:
                    0f:1f:c1:3d:56:25:57:09:be:fb:58:aa:a5:f7:74:
                    68:3c:a7:ac:8b:0f:b3:12:ae:6f:45:ac:9b:c2:0b:
                    db:83:24:97:5e:f0:c9:0c:1a:c3:95:84:44:19:62:
                    4a:98:a7:5b:c2:bd:f5:47:8e:4d:80:5b:85:32:bd:
                    e2:6c:67:41:fc:7a:75:da:85:a4:6e:8a:a4:4f:69:
                    b9:42:27:15:ca:bf:4a:22:61:12:f0:38:12:a2:ec:
                    af:74:7e:fc:89:84:90:4b:fb:b0:1b:58:82:c9:69:
                    85:54:9d:e9:d4:8f:8f:33:8c:1a:57:ac:e9:9b:61:
                    60:fd:11:b5:47:29:50:d6:1e:31:fe:65:6a:2f:ef:
                    9e:8f:ca:6f:5c:62:ae:d4:ad:cf:ff:e1:37:5a:75:
                    b4:d4:7c:c5:ff:ad:ee:5c:5f:13:f1:c9:70:18:33:
                    15:ea:d8:a8:e8:dc:32:a5:0c:88:b9:44:59:d8:ce:
                    4d:7a:ba:ad:49:cf:58:1a:d4:49:64:be:ff:54:12:
                    9e:87:92:39:f0:b7:72:20:70:55:93:5e:a2:f5:c7:
                    0b:6e:43:e7:3e:ca:11:90:ac:9f:c3:59:cd:8f:90:
                    ff:80:55:96:2b:b0:99:0d:ef:9a:3e:66:8f:c0:08:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:48:FB:FD:CC:4F:35:D6:C2:09:59:1B:49:50:B2:A2:57:27:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:21:e9:b5:86:fa:a7:bd:57:77:18:42:1c:38:93:df:92:
         99:c0:89:32:e0:5e:93:42:dd:a4:20:64:22:4f:99:e0:38:08:
         9b:e6:be:69:b4:d9:e9:28:df:53:2c:fc:f9:19:d5:7b:cc:a1:
         35:77:b0:0f:87:0b:dc:5a:d8:9e:03:69:0a:f8:d4:55:ad:2b:
         a8:03:0b:db:a3:13:cf:6d:12:9f:14:30:c3:ee:55:69:d0:ff:
         ae:ec:82:e2:20:0f:ab:b2:b9:73:f7:a2:8d:66:02:bb:10:eb:
         b2:3d:9f:c5:da:43:70:f9:e1:70:2f:71:b8:a7:93:71:40:55:
         79:15:ed:8f:96:c1:fd:f8:d3:f5:5a:ab:b0:0e:db:c2:ee:a7:
         3e:9e:55:8a:95:90:84:2b:b6:dc:8c:5c:ad:af:a7:a3:7b:51:
         b0:2f:1a:11:7b:fc:e4:d2:01:d1:f9:95:fc:a6:a8:5f:4d:17:
         d7:f1:de:2c:dd:00:18:51:9c:af:4b:ca:62:cb:6e:b5:67:92:
         b9:82:a2:68:62:12:15:a7:95:5d:f4:97:ad:0e:91:fd:09:ca:
         f9:40:e4:d1:2a:51:9e:7f:ff:e8:19:d4:ce:8e:69:48:5a:24:
         3f:51:7b:c8:3c:3d:c4:9d:01:6b:d8:76:20:94:8b:21:d4:45:
         f5:b5:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:06 2026 by rpki-client