Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa
File:                     47e1314f-da30-3ccd-8424-26420e56bfad.roa (raw, json)
Hash identifier:          Dlak/ce9378Y4OvJCSh4CSnBW5TAC6FjloRpNx/FbP8=
Subject key identifier:   82:4D:E7:44:AD:1C:AA:20:F9:A0:D9:BE:F9:D5:2A:50:67:D0:8F:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE577B87C42A536763C87A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.150.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:7b:87:c4:2a:53:67:63:c8:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=37dba877-c67a-4e43-ac91-f2cdd8964067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:8e:2a:0b:91:1d:ae:26:7a:8d:0e:b1:c6:
                    d8:3b:a1:d7:25:58:cc:4b:31:5a:e4:1e:e5:03:99:
                    d5:de:04:c6:7d:f7:ca:df:5f:48:ad:05:2b:f6:00:
                    73:15:3a:88:e7:55:71:1a:9d:0e:b4:e4:9d:63:dc:
                    8a:97:c9:d4:cc:c7:69:56:35:20:dd:d4:3f:e5:a3:
                    38:0e:6c:db:ce:ff:7c:c1:ad:b0:f0:8f:26:a4:8c:
                    ec:8c:bc:b7:ba:53:62:27:34:3b:e9:34:3d:1f:4b:
                    cb:54:69:b7:d0:d4:d4:63:44:2c:06:df:8d:05:2e:
                    5b:a5:71:c1:8d:93:f2:fe:7c:02:d4:c1:b8:fd:2c:
                    3d:cc:9a:a1:2a:d1:9e:85:47:4d:20:53:f7:69:62:
                    0f:37:37:c2:7c:55:5c:65:5d:fc:cb:32:e7:3e:ea:
                    2c:3d:1f:3a:d2:05:da:7a:88:92:54:58:88:35:72:
                    05:83:f9:9d:b9:7f:b4:48:56:d6:dc:3e:c7:ab:c1:
                    52:1a:d4:d3:60:ac:27:09:0b:03:17:1b:48:9a:3e:
                    29:32:0c:8e:77:eb:2a:99:09:8a:97:79:92:fa:7f:
                    1c:0d:b7:91:da:5d:c4:50:7c:92:7f:e6:c6:d7:d3:
                    8a:be:33:df:16:6c:45:ab:be:62:72:2f:36:79:f1:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:E7:44:AD:1C:AA:20:F9:A0:D9:BE:F9:D5:2A:50:67:D0:8F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:55:02:5c:59:a5:af:1a:62:2d:55:9d:28:75:68:b6:dc:
         66:11:b9:e1:61:91:ef:94:ea:81:b1:77:5e:3c:1a:fb:53:75:
         92:1d:4c:a5:c1:25:6a:d7:81:26:b8:eb:a3:80:82:3b:14:97:
         54:ae:e0:b4:2c:2a:11:6d:64:69:11:a0:22:77:37:87:d2:20:
         ea:4f:c8:e5:2e:77:8f:23:82:e7:4d:74:7e:04:eb:52:26:de:
         ff:09:d2:6e:b9:6e:8e:16:e1:7f:e2:28:29:6d:90:b5:eb:57:
         a2:95:45:96:51:31:2f:64:f8:17:8a:95:78:15:4e:a8:cb:87:
         fd:a6:a0:5c:3f:93:46:13:ec:74:25:a1:26:f3:5a:d7:be:c2:
         7c:0f:db:b6:3a:23:08:f1:b3:33:a5:02:98:a2:3d:2e:65:8b:
         bc:12:6f:14:6f:6b:df:d7:70:65:66:7e:fb:ad:37:5f:14:80:
         01:ff:e9:72:ab:8b:d8:16:4f:8e:cb:67:1c:56:69:ca:34:b9:
         ee:c6:d6:1b:8e:8e:b7:fe:41:de:d5:f5:d7:67:a1:9b:e2:5a:
         2f:58:2d:c4:91:8e:ca:77:f7:dc:29:15:d1:ac:dc:00:dd:32:
         3e:84:5a:c4:b1:a6:b7:38:4a:87:b7:aa:f1:6a:2c:aa:97:0f:
         93:03:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:39 2026 by rpki-client