Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a3ba30-9f2c-3421-b38f-11eceb472716.roa
File:                     31a3ba30-9f2c-3421-b38f-11eceb472716.roa (raw, json)
Hash identifier:          WlPEqj96JNKeSkko03ZG2kUAsiIOz1RW0L5uq78OTII=
Subject key identifier:   51:AB:E5:12:24:4E:C6:AE:EF:BD:61:9D:3F:BE:FC:E1:06:08:96:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100290C10BAD57E8BF15DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a3ba30-9f2c-3421-b38f-11eceb472716.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        73.43.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:29:0c:10:ba:d5:7e:8b:f1:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c424c568-b9c5-46a7-8330-5bcf87d7e720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:8b:4d:48:33:dc:88:55:85:7c:02:6b:4f:
                    56:5b:07:09:10:2f:de:7f:ec:d9:64:b4:21:65:06:
                    0f:86:7f:94:1f:63:18:ea:20:a8:3a:4c:cd:11:98:
                    a4:2b:cd:1c:bb:b4:8d:82:11:d6:8f:8d:98:28:2d:
                    df:89:7a:3a:76:4f:0f:a7:0d:7d:55:87:d9:d5:bb:
                    fb:bb:e0:cd:4c:4f:0e:f0:78:5c:8e:ac:81:61:94:
                    16:2d:3b:2b:bc:f2:6c:de:46:7e:3c:68:7b:eb:7f:
                    fc:12:46:f0:6a:24:8c:9b:22:52:52:48:aa:7b:47:
                    fd:a4:ba:5d:42:1a:03:2c:db:32:b4:a6:a3:93:99:
                    a4:7b:a2:b1:67:f1:5c:72:34:88:c7:71:28:b7:44:
                    0c:10:d0:ec:86:26:17:37:48:68:bb:0d:b0:13:50:
                    58:de:92:b0:34:46:f8:f2:5e:52:cd:8d:14:32:58:
                    8f:9d:a8:c7:b5:08:d4:d7:25:3d:8a:2f:e0:18:ca:
                    24:3b:69:48:b9:2f:5b:a3:6b:98:27:cd:eb:33:b2:
                    da:32:c8:a8:4d:3f:6b:1e:a5:c5:da:8f:0f:48:da:
                    99:a1:79:32:82:cc:59:6f:78:85:93:89:76:55:ce:
                    bd:34:5a:1b:fd:da:7f:82:64:d1:4e:0f:3a:a0:c3:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:E5:12:24:4E:C6:AE:EF:BD:61:9D:3F:BE:FC:E1:06:08:96:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a3ba30-9f2c-3421-b38f-11eceb472716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:23:fa:32:6c:e5:05:0b:3c:00:59:b6:f6:5f:fe:3c:70:9e:
         24:df:f6:9e:ae:8c:f1:07:6c:45:cc:d0:eb:6f:0e:1d:1b:f6:
         06:48:f6:7b:7b:ba:6e:22:7f:eb:c8:51:56:a8:a1:e8:1d:b9:
         6f:53:21:7d:c0:9a:6f:68:b9:c1:1b:7c:84:f3:76:4d:fd:cd:
         37:90:0e:99:06:47:3e:b1:a0:50:06:3c:d0:10:c9:d9:79:31:
         7e:a1:02:12:ce:20:4b:de:e2:80:5b:89:07:9c:1d:51:4b:64:
         6b:ce:64:60:26:59:ac:ee:55:a4:57:19:15:d8:1d:63:56:72:
         43:d6:c4:77:1e:ab:3c:95:98:cb:cc:63:55:b4:5c:c5:40:48:
         d3:8f:bb:be:85:f1:db:7b:0c:a7:74:b2:77:97:c8:6e:cf:ee:
         f0:d5:5e:c5:1c:ce:86:58:69:9c:2b:2b:53:2f:2a:5d:cd:00:
         7a:f3:84:00:8a:34:72:60:81:c3:03:38:9f:37:7a:07:45:1f:
         0c:90:54:6a:cb:6c:d5:64:10:d1:10:a4:78:6e:66:cc:f2:8e:
         6e:17:68:33:c2:cb:fd:7a:a6:f6:90:d4:22:8b:08:91:0a:19:
         ce:8f:1b:ca:7d:20:e3:4c:c7:e1:91:d8:dd:6c:50:ef:33:1e:
         85:04:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:19 2026 by rpki-client