Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/335b9b47-1ea0-3914-81fb-5dfcdf38415f.roa
File:                     335b9b47-1ea0-3914-81fb-5dfcdf38415f.roa (raw, json)
Hash identifier:          W2+RGbViHP0AnpLMpMy4RkBB3SxRQ1f+nr9ROXoi0PQ=
Subject key identifier:   8E:2F:DD:46:69:86:04:E6:AA:2A:8B:D1:29:06:28:7E:56:66:C4:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8AE1B537B53CBD03E8740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/335b9b47-1ea0-3914-81fb-5dfcdf38415f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        73.242.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:ae:1b:53:7b:53:cb:d0:3e:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d14b0fd9-7814-4e53-b6da-2988081b6474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:ea:0e:43:aa:e9:57:dc:6a:4d:6d:7d:84:
                    6a:27:7f:ad:c0:29:ce:ad:f1:df:21:d6:99:da:48:
                    97:14:d7:af:a9:04:ca:98:f7:50:7d:ba:0b:e0:4e:
                    a3:cb:54:c2:c7:4b:28:1a:0c:c3:8a:69:5b:67:72:
                    b1:4e:bc:41:b3:c6:82:b1:d9:e4:06:31:45:3b:0c:
                    f9:77:00:3c:84:6b:83:3a:21:6b:c5:3b:f7:95:85:
                    70:28:5e:00:80:21:b0:c4:a8:a2:95:a9:53:82:c8:
                    69:89:f0:50:f0:38:37:55:84:16:84:56:92:05:a8:
                    61:7e:42:ae:d2:d7:80:37:94:f2:30:02:77:fd:e9:
                    6a:38:94:ae:fb:fa:94:51:f1:33:6f:52:ec:2a:58:
                    2a:f1:7f:da:d7:d2:af:ab:67:52:0d:f5:3c:ca:44:
                    b0:50:3a:d3:65:af:03:06:9c:50:48:1e:02:a8:3e:
                    1a:3d:e5:59:e7:fa:7d:60:58:d7:e3:58:9b:6d:c0:
                    5e:a3:70:76:f2:19:82:ed:14:9a:67:97:d1:68:c3:
                    cc:1c:ec:c6:96:55:16:17:1e:72:39:eb:ef:76:54:
                    77:39:f0:47:d2:a7:7b:7d:3e:21:cc:0e:e3:3a:21:
                    76:6b:19:6f:5d:b8:70:02:84:36:05:c5:55:8f:0e:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2F:DD:46:69:86:04:E6:AA:2A:8B:D1:29:06:28:7E:56:66:C4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/335b9b47-1ea0-3914-81fb-5dfcdf38415f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.242.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:91:7b:4e:c7:99:dd:a8:fa:14:a8:1b:5c:bb:e4:a2:be:8d:
         f5:9f:ea:9f:d2:d5:5f:16:74:db:19:96:e5:40:89:bb:fb:52:
         b6:cc:d1:b5:67:12:e2:dc:eb:bb:9e:20:54:39:49:20:fd:8f:
         34:d7:d0:d5:9c:28:66:18:45:af:ed:9c:79:1e:d8:1d:3a:55:
         91:e1:28:61:b8:3a:05:91:5d:48:5a:75:6c:c5:09:ad:55:a9:
         38:0a:b5:20:1a:cf:ec:5f:29:e7:34:a0:ca:22:e1:e2:08:54:
         d3:ba:a7:f2:03:2c:d0:a3:48:c5:35:3d:1b:6b:63:23:61:ca:
         fa:bf:dd:99:47:75:d6:79:6b:62:02:15:bd:a7:10:9e:1c:24:
         9d:39:94:15:73:52:59:a4:dc:7e:81:d7:0f:14:69:40:ce:33:
         0f:7f:5b:d9:58:1f:7b:c4:02:b8:27:b0:60:94:20:c5:42:ac:
         c5:72:1a:1c:89:f5:f1:83:db:e0:46:0f:2d:bf:a9:7e:9d:60:
         0c:d5:30:de:aa:06:81:cc:6e:21:91:7f:29:a7:a7:55:f7:f9:
         c5:36:22:5f:bb:b9:02:2e:95:17:18:d4:00:72:49:90:cc:4b:
         02:99:8a:1f:9a:95:01:d7:aa:ec:ba:88:c3:ab:ee:4e:65:de:
         01:36:d2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:44:06 2026 by rpki-client