Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2991cd55-517c-3b9f-b3a4-ccb933541c14.roa
File:                     2991cd55-517c-3b9f-b3a4-ccb933541c14.roa (raw, json)
Hash identifier:          NmaGgwCgyEptHf3mTCW0U2Lz3NFFDJgZin09A2BCj5s=
Subject key identifier:   11:61:20:B3:7D:37:37:2C:94:2B:71:27:CC:91:50:7D:46:B9:95:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D9300B2407C4C2A194F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2991cd55-517c-3b9f-b3a4-ccb933541c14.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.202.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:93:00:b2:40:7c:4c:2a:19:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=0fc2a7d0-c092-4e29-8cde-6ff5fea6a89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:36:87:10:a7:5b:d8:f4:7a:d6:c5:c7:4a:
                    5e:36:2e:61:bc:27:7c:5a:91:c5:45:ff:94:9a:87:
                    cc:2f:e7:76:48:58:44:7c:78:db:0d:08:55:99:f7:
                    0f:62:dd:7c:db:54:28:29:17:66:22:13:2a:c1:2d:
                    dd:f6:f8:3b:54:3c:35:99:f2:2a:9a:57:eb:d9:26:
                    3d:f3:3c:5a:36:13:71:b8:9f:83:39:a0:e1:c4:ea:
                    d2:a1:bf:8e:17:73:d7:04:e9:2d:81:fb:3b:74:85:
                    72:b6:c2:19:1b:f1:31:c5:87:a7:9d:ae:9f:26:d5:
                    bc:15:1f:5f:38:79:c8:eb:70:47:33:41:26:04:33:
                    ca:12:ee:ed:03:e7:ab:a9:cd:e9:0d:2e:14:96:73:
                    d6:50:3f:de:19:29:b8:8e:51:73:21:41:46:7b:6b:
                    5a:c2:80:82:4e:e1:af:9b:3a:cb:73:01:2f:54:0e:
                    4e:e2:de:d5:57:f0:13:fa:24:7a:69:f3:e7:90:34:
                    e7:d3:ec:26:26:cb:dd:78:44:ca:a5:b9:7c:9c:b2:
                    a2:f4:32:03:b7:e6:e0:b7:2c:32:6f:7c:87:b1:28:
                    28:a5:05:cc:e2:32:8a:dd:39:9e:20:8d:73:ea:af:
                    65:5a:5e:e0:0f:26:f4:78:c6:11:f1:90:3a:31:ce:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:20:B3:7D:37:37:2C:94:2B:71:27:CC:91:50:7D:46:B9:95:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2991cd55-517c-3b9f-b3a4-ccb933541c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:78:47:b9:09:78:21:11:ef:ea:e1:63:1b:a3:e0:d2:61:
         56:a9:cc:8c:fc:2f:5d:9a:fd:b8:1b:c6:ba:4e:e3:85:ef:c6:
         9d:eb:54:88:2d:c4:a2:42:fe:5a:b3:3c:33:89:d2:f0:63:54:
         f4:6d:dc:60:06:32:8c:d9:a1:37:f6:e3:9d:6f:d8:52:6c:db:
         3d:42:9e:c3:fe:72:48:d4:79:e9:a1:f4:6f:0d:49:1e:5e:19:
         16:b3:48:56:a4:70:7c:6b:5b:4c:7b:64:51:71:07:bd:91:d3:
         48:5a:f4:bf:69:3a:49:fb:78:9c:26:2a:7f:54:11:10:0f:f9:
         a8:df:bc:b0:bd:4f:a8:61:ca:17:7f:b4:b6:83:74:08:58:29:
         e8:bf:e2:e0:57:4d:b2:06:ba:af:20:db:cd:f2:46:2c:0a:ce:
         bc:0a:a0:e3:6a:60:5f:89:3b:c0:97:c6:a5:f0:9d:67:05:63:
         d9:77:d5:94:68:8d:8e:bf:ff:2f:ad:94:8b:de:db:5e:31:3b:
         18:84:39:31:34:e1:cb:72:01:af:df:39:03:c8:a1:ae:bb:6b:
         b4:7c:41:36:3e:d2:0e:f0:3f:f8:41:24:13:75:8b:e0:ef:8d:
         fa:22:bd:34:b5:26:56:ea:73:00:a7:00:2c:f3:c0:e9:08:51:
         08:1d:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:05 2026 by rpki-client