Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8d0dbb-e81b-3ec9-b186-1e12dcefe563.roa
File:                     3d8d0dbb-e81b-3ec9-b186-1e12dcefe563.roa (raw, json)
Hash identifier:          dCfeK1n0gPCIrS7wf5u4bOZgZhe1vqqGe+Ti2OpFrss=
Subject key identifier:   D3:93:B6:23:B9:70:27:A6:D3:4A:E1:73:62:1D:D5:C3:AE:CE:29:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D921E1D0FADDF18018980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8d0dbb-e81b-3ec9-b186-1e12dcefe563.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.202.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:92:1e:1d:0f:ad:df:18:01:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1443ab5f-ecb8-45af-8343-bea3813724e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:d7:6a:c9:7a:b5:ee:b6:62:d6:24:16:cc:
                    3b:fa:b4:9f:45:c9:40:7f:a9:b5:af:d7:f0:b2:67:
                    b7:eb:20:4f:79:45:71:43:3b:a0:ee:2f:09:e3:49:
                    97:00:ec:97:9a:32:a6:05:5b:03:c1:24:92:40:ac:
                    d8:44:a6:36:e2:1a:20:ad:71:00:70:ff:1c:e1:b0:
                    3b:96:42:29:6a:c7:0c:99:9b:0c:d6:2d:78:80:75:
                    b0:67:e2:28:2d:92:f6:4b:d8:43:37:75:4a:0f:8a:
                    ca:d7:56:2b:9e:67:59:85:6c:1f:cb:ba:99:32:11:
                    9c:1c:e9:1e:fd:0a:74:3a:71:09:05:6c:66:39:fe:
                    8f:1c:6b:ac:a0:f7:bd:ca:1b:45:ee:90:c7:48:41:
                    72:6c:bd:88:e0:ea:3b:7b:1b:b1:54:b0:cf:73:54:
                    46:58:0d:40:0d:b2:7f:78:c4:a9:86:c6:c9:37:c1:
                    af:d0:f0:eb:23:8b:e0:ea:28:cf:b3:68:a3:ea:28:
                    31:c4:61:22:8b:a1:a2:db:bf:87:3c:c6:e9:8f:ad:
                    3e:0f:bd:70:db:78:70:19:19:3c:c1:54:a5:6e:b5:
                    bd:a5:5c:09:80:2d:62:16:48:26:51:26:b0:b6:86:
                    05:f7:72:50:f0:ab:62:f1:ac:26:f0:27:b9:de:b9:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:B6:23:B9:70:27:A6:D3:4A:E1:73:62:1D:D5:C3:AE:CE:29:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8d0dbb-e81b-3ec9-b186-1e12dcefe563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d1:a0:71:2d:de:d2:59:50:f6:1a:f9:25:a1:7b:8e:a8:8b:
         89:5b:c7:02:67:6b:47:20:ea:cb:ac:58:6f:6a:fe:1d:2c:72:
         1b:0b:03:8b:be:f8:d4:68:3c:63:05:f8:1a:b3:f3:4b:6c:ee:
         56:5c:1e:0d:22:b5:2e:e5:1d:70:95:60:20:2c:31:f4:df:66:
         59:89:d3:7b:0a:ae:23:d8:e0:9d:e3:ba:0e:88:70:69:11:24:
         97:e0:a3:76:49:63:e3:d6:c3:44:82:78:4f:09:22:00:14:e6:
         b2:68:65:55:a8:a2:25:27:49:31:01:67:3a:8b:a0:66:f6:52:
         5a:7e:9d:02:3d:f2:1b:33:78:2e:3a:8b:2c:3f:e9:b0:26:c5:
         fd:08:56:c8:ed:49:c8:25:9e:ae:12:2c:c0:67:d4:ac:73:47:
         ff:b1:de:13:ca:38:d5:3e:3d:68:d1:a1:fd:ec:1b:03:5c:f5:
         36:99:c0:cd:14:46:e4:80:0a:9f:04:61:f7:43:24:0a:da:ad:
         bb:06:f1:2f:8c:96:f5:62:e0:c5:a6:0d:6c:6e:8b:72:6b:cc:
         04:ee:82:68:48:a4:f7:5f:55:79:90:5e:fe:b9:c6:f7:9b:e7:
         bc:23:51:33:a1:08:1e:4d:cd:8a:70:77:6d:3c:be:b0:32:98:
         8a:25:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:41 2026 by rpki-client