Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e547486-159f-3c63-9308-08983dc3c4dd.roa
File:                     4e547486-159f-3c63-9308-08983dc3c4dd.roa (raw, json)
Hash identifier:          LF0hAFWjjvkoiUHred/Dmh8R+E8cxdLYfuCRvZ9kiyU=
Subject key identifier:   EE:68:0A:72:58:58:93:EC:90:BF:C0:A6:94:D6:F8:09:6A:BD:41:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C337AD853ED0740725980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e547486-159f-3c63-9308-08983dc3c4dd.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.22.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:33:7a:d8:53:ed:07:40:72:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ec971e3f-2a6e-4d4c-be2b-3df88db5b880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:39:ef:a3:29:d5:7e:da:55:67:02:a3:e8:
                    16:df:ed:5d:c8:4d:2c:d2:7b:4d:f5:ad:23:0a:91:
                    ee:33:74:cb:2b:8c:5d:35:f8:2d:77:f8:be:d0:6d:
                    30:0b:8a:b2:1e:9e:d4:ed:30:2a:6b:f1:da:07:e4:
                    b8:26:d7:ed:cb:cc:45:7e:f3:06:46:8a:b6:0d:6e:
                    1e:ee:ca:e3:e4:cc:3b:f1:2a:b4:4b:2a:67:34:37:
                    0b:ab:e6:1e:4f:39:81:59:ca:e7:03:1a:48:2a:0e:
                    09:35:8a:77:ef:25:07:e8:8f:a7:69:1c:47:42:e7:
                    0e:20:54:fe:ce:97:37:6e:90:09:4e:79:5d:ee:30:
                    66:4a:ba:b1:aa:49:6d:ed:47:99:4e:dc:12:2e:6a:
                    fd:e9:34:bd:c8:27:77:44:87:0c:57:c8:2a:e8:aa:
                    af:20:86:ec:15:4f:73:aa:53:39:26:c2:72:d4:99:
                    04:cf:11:12:a8:eb:4a:1d:b7:db:89:3d:ce:73:79:
                    dd:2d:9d:69:7e:b7:99:14:34:63:87:db:d0:66:0c:
                    f8:01:a6:ef:46:35:e4:68:62:ee:58:aa:93:a3:3d:
                    e9:ee:52:38:3d:d2:50:01:fb:8b:17:c2:17:0e:c5:
                    75:1c:1a:b6:bf:1c:a2:48:b9:10:ae:ac:74:ec:d7:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:0A:72:58:58:93:EC:90:BF:C0:A6:94:D6:F8:09:6A:BD:41:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e547486-159f-3c63-9308-08983dc3c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:6c:b2:98:00:88:11:1c:77:f5:56:e3:6b:7e:63:e3:0c:
         76:2a:44:33:79:6e:fb:0a:a5:ba:fa:ce:33:84:3d:b5:42:2b:
         a7:7c:ff:32:b3:cd:4b:b6:09:bf:cc:4c:5b:f8:20:3a:80:14:
         5d:c9:8e:ce:45:71:94:f9:0b:60:52:93:de:90:98:50:d1:b3:
         ce:74:d0:88:13:b2:75:90:a5:f7:27:1b:e4:c2:65:2e:99:1e:
         7e:5d:17:eb:c1:dd:b3:bd:51:05:6e:7c:a8:13:07:73:4a:50:
         a1:18:ff:28:33:bb:4c:86:d1:22:f2:68:9a:9c:9a:a6:78:9f:
         93:36:5f:dc:3c:3b:6b:60:39:bf:3d:64:b5:ad:29:ea:e1:4e:
         06:ce:b9:55:1a:07:af:88:61:82:65:96:19:63:30:71:9d:7b:
         8c:71:8d:49:42:36:cc:a4:35:bf:0f:73:4e:88:33:ef:c0:dc:
         96:00:2f:c5:2c:ec:c3:d9:29:72:eb:32:fc:d8:b5:a5:04:10:
         dd:26:a5:14:f2:3c:b6:da:28:59:7c:d1:0f:ac:c0:81:9d:21:
         d5:6e:63:bb:2d:1b:70:45:b6:bc:a8:46:c7:a9:bc:75:ab:69:
         50:fa:da:62:4e:09:fa:f9:9d:f6:85:26:73:2a:1f:28:05:a0:
         b9:32:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:05 2026 by rpki-client