Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
File:                     4875549a-5914-3f98-a0e4-4caa4e08b221.roa (raw, json)
Hash identifier:          5pkuIbIwes3PN9/DctigJq/lDZFJCPA7dhdNbuVdRYU=
Subject key identifier:   3D:1C:CD:1E:90:5B:04:92:BB:65:D2:B2:7F:CC:25:48:87:0F:81:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB489B31E3A7E01F027788
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        73.136.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:48:9b:31:e3:a7:e0:1f:02:77:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9f4bf943-7d21-4da6-96dc-0768a1e7427f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:4d:1b:39:60:2f:d7:1e:bd:d5:a9:64:5e:
                    cd:d1:4b:2d:fb:00:9f:ed:fc:ce:8e:58:40:83:4c:
                    dd:e1:7d:6b:9c:1c:11:53:d5:b5:3b:0d:7e:39:90:
                    e8:a7:4d:30:f8:97:f2:0d:0d:b0:df:b7:17:12:94:
                    cc:36:8d:db:69:6d:f2:ee:21:e4:d3:96:44:10:f4:
                    15:07:4e:e1:d4:1f:77:26:87:5f:66:91:7d:78:79:
                    46:83:6e:d9:57:80:0a:d1:db:c8:22:a2:05:6f:a1:
                    bb:58:f6:3c:c2:33:28:9a:e0:81:d1:25:4e:ca:b4:
                    79:82:fb:98:7e:6a:44:be:f1:37:2d:8c:b8:89:26:
                    fc:28:57:95:e7:96:2f:eb:40:c8:00:25:1a:73:1c:
                    09:82:41:c2:c5:1f:fa:46:34:4d:c8:cf:a8:02:93:
                    8d:b2:31:3a:1d:7e:b8:7a:a2:4c:6c:9d:bd:ac:7d:
                    ee:ab:2d:66:f5:f6:eb:35:4b:4a:69:08:3b:8a:fb:
                    e3:7f:c7:29:b1:35:50:58:cd:75:6a:49:81:9e:2b:
                    94:68:03:83:8c:c2:69:86:dd:a7:9b:bb:f7:db:21:
                    ea:80:8f:44:17:08:85:b7:c7:0e:54:4e:58:69:9e:
                    9e:20:11:1a:df:3d:c4:7d:78:d9:49:3d:69:d3:d8:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:CD:1E:90:5B:04:92:BB:65:D2:B2:7F:CC:25:48:87:0F:81:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.136.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:3b:9b:e6:bb:3e:6e:88:53:9b:9e:19:24:52:37:16:47:6a:
         41:44:0a:b7:cd:50:b8:43:d1:8d:b8:f0:13:57:c6:43:f6:9d:
         35:c6:06:ed:08:4a:53:a7:3b:90:a4:cc:3e:7b:22:f1:37:0d:
         44:c8:97:1c:fb:8c:f2:75:06:20:e1:83:dd:a1:6a:30:62:b7:
         43:06:f0:4e:89:83:c9:90:0a:7c:01:87:b5:a7:c4:58:65:1d:
         e2:ca:a1:8f:1f:2a:a6:8a:3d:1f:2e:4b:a0:98:3f:80:2f:01:
         5a:61:15:f4:a5:f8:ba:4d:e6:65:80:33:f4:ae:47:a0:78:fa:
         4b:2e:e5:18:30:be:e0:04:f2:72:ac:4e:46:83:54:bc:1c:b5:
         80:12:bd:58:a7:f2:51:91:82:bc:cb:f0:aa:20:8a:dd:1d:b6:
         8d:5b:28:62:46:65:d1:08:b2:cb:13:8a:c3:14:03:8b:6c:b2:
         5b:9c:7a:51:a2:c9:bd:63:36:88:5f:7c:bf:0e:74:0a:6e:4e:
         32:1a:e8:40:09:f9:0f:01:ae:99:8c:76:8f:55:b1:81:9a:2a:
         86:85:85:d4:71:ee:34:e2:7c:37:5b:75:66:f7:fd:a4:d6:46:
         1d:87:ba:f8:bb:7e:5e:07:3c:2d:0c:3e:d7:19:e9:fc:68:c7:
         12:55:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:33:34 2026 by rpki-client