Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/391c5fd7-8921-3d37-b1bf-d58295f30dd5.roa
File:                     391c5fd7-8921-3d37-b1bf-d58295f30dd5.roa (raw, json)
Hash identifier:          yERopU8z6r1Bkw4d5nS1lJQYLpQg0V6QWRQTlY/TF9I=
Subject key identifier:   23:9F:93:F2:A7:FE:07:52:F1:9E:FF:4D:8C:B2:B4:57:04:1A:E0:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243A456EB40801AC9EEA640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/391c5fd7-8921-3d37-b1bf-d58295f30dd5.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        73.252.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:a4:56:eb:40:80:1a:c9:ee:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=2bc2fe4b-9314-446b-a990-0e1da55a8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:ab:cd:9a:1a:1c:54:02:e3:93:7d:06:98:
                    06:52:2a:88:66:be:b2:1d:b2:67:44:f0:19:b9:69:
                    96:f1:64:bd:27:f3:1c:d6:d0:c9:60:d1:a0:d6:2c:
                    38:84:ab:84:25:c4:b1:d2:09:99:f6:36:f5:97:eb:
                    8f:4f:db:ff:2a:95:1e:67:52:8f:5c:77:11:b8:31:
                    68:e4:5f:b2:c8:8b:a3:c2:8b:ee:e1:30:a1:ea:8e:
                    f6:98:34:c5:1d:ca:40:d9:73:9f:96:54:48:0f:58:
                    33:e3:5d:0d:14:d8:b1:98:83:f1:08:3e:fc:82:d1:
                    3a:6e:9e:0d:f3:20:aa:cf:80:85:15:05:68:ce:5f:
                    11:68:c2:ac:5b:18:46:36:d1:f3:e5:44:d1:c8:d8:
                    63:df:02:fa:93:a9:ef:45:aa:a2:f5:f1:bd:d2:18:
                    d4:af:ed:25:82:b2:bc:e9:12:1a:c5:2c:3e:9b:ec:
                    ee:d3:55:f1:23:79:ea:bd:12:fc:f9:3e:cd:ea:bc:
                    c3:d1:61:06:22:30:a6:7c:50:16:89:17:de:b5:2a:
                    95:db:66:a6:7d:01:62:f9:b3:b3:37:46:cc:fd:a5:
                    13:63:60:61:d1:58:66:bd:26:b4:cb:9e:d6:a2:89:
                    52:34:3d:61:7a:e6:fe:b3:b0:26:74:dc:b1:97:36:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9F:93:F2:A7:FE:07:52:F1:9E:FF:4D:8C:B2:B4:57:04:1A:E0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/391c5fd7-8921-3d37-b1bf-d58295f30dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:bc:f5:ca:95:9b:27:e4:8b:8e:e1:02:57:36:d9:2f:cb:
         7e:d7:66:3a:06:2b:40:b0:9b:67:63:f2:e5:07:dd:95:1d:78:
         1a:9a:f9:4d:1f:b4:b6:d7:24:f3:9c:46:90:44:49:1a:13:b4:
         b8:9d:d1:58:c3:95:8c:83:6a:ae:38:cb:eb:be:a8:a6:ca:34:
         05:39:53:94:e0:b8:92:32:58:96:f5:ae:b7:74:62:af:72:fd:
         a8:1d:67:30:39:30:da:27:05:d5:91:35:4f:7e:02:46:dc:bb:
         4f:ba:37:48:a3:87:19:83:03:41:cf:6e:4b:34:5f:69:8f:0c:
         3b:5d:fd:2b:52:f2:9a:33:90:f1:18:6f:29:16:81:cc:fb:27:
         0a:0c:a7:0f:48:54:23:e2:0f:46:56:40:3a:3c:5c:6b:ff:14:
         82:ae:4a:4b:8b:83:11:37:2a:fd:a1:79:0d:83:43:79:65:91:
         b2:53:f1:9d:2a:4a:21:59:39:bf:c6:c3:75:08:12:e9:34:39:
         44:b5:91:b0:67:b6:2b:40:cf:21:9f:29:77:b7:eb:5b:5d:51:
         4b:f5:19:33:3d:b7:d7:d6:21:2e:df:e4:d9:f6:15:ff:d5:7c:
         db:98:54:3f:23:e1:1f:78:59:26:67:84:a7:ab:1a:4b:dd:f7:
         a4:fb:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:49 2026 by rpki-client