Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd59f88-da76-353d-8ffe-eb5ce92ccd49.roa
File:                     4fd59f88-da76-353d-8ffe-eb5ce92ccd49.roa (raw, json)
Hash identifier:          CQosMm2R+UojmiZcFORcQk2/9uRYyhga0XRVgedEYlU=
Subject key identifier:   5F:63:25:56:47:53:5F:62:DE:84:26:8E:85:B9:64:A1:DE:92:BC:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C4922ECF8E1CA9A288E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd59f88-da76-353d-8ffe-eb5ce92ccd49.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.36.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:49:22:ec:f8:e1:ca:9a:28:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=bf959505-8439-4eee-9bba-4b6256d8e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:f3:eb:cf:1c:c1:18:1d:d8:ce:96:ae:6c:
                    92:49:d2:ba:c4:9f:0a:10:10:27:b3:97:43:25:6a:
                    56:e8:ac:77:9b:2b:0f:18:9b:1e:f3:5e:09:05:df:
                    7f:71:64:9f:51:6b:3f:a6:39:d5:bf:73:c0:96:eb:
                    04:8f:ac:17:0d:8c:16:fe:a2:b7:f7:81:11:87:d1:
                    64:32:55:d6:ff:c6:96:8b:f6:05:6f:81:ae:fe:a0:
                    98:9d:81:38:ca:95:07:be:0e:3e:80:e9:7b:25:da:
                    2d:05:7c:6d:c4:7b:91:2b:b3:9c:97:8e:49:f2:d1:
                    00:52:75:16:2d:34:26:44:43:07:c7:e9:2b:17:3b:
                    23:22:fd:9a:c4:f4:84:94:b4:3a:fd:43:f6:b4:31:
                    89:56:fd:2b:96:2f:38:66:e9:c3:c5:b6:49:20:77:
                    81:aa:8a:3e:7c:0a:0e:97:d6:3c:af:66:11:fd:3c:
                    bb:96:30:81:d8:8c:d6:75:5d:15:ef:8d:86:34:89:
                    97:3d:9a:e3:45:b6:e9:7f:55:c9:c4:46:1c:b5:88:
                    6c:2c:4a:d1:fc:96:e9:6f:0b:91:51:74:0a:d7:60:
                    36:48:61:98:ee:67:53:91:b3:d5:6d:12:cd:c0:97:
                    06:af:ad:9d:c4:a0:b1:4f:9c:94:cc:b9:11:02:0a:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:63:25:56:47:53:5F:62:DE:84:26:8E:85:B9:64:A1:DE:92:BC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd59f88-da76-353d-8ffe-eb5ce92ccd49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:37:35:96:23:59:98:dc:31:21:30:1f:05:7c:32:88:31:
         cc:95:5f:99:3b:0b:1b:85:ac:99:95:b6:9f:6e:2f:8a:2a:2d:
         34:4d:3f:d7:95:0f:f7:9c:9e:11:bd:cc:ba:6c:f2:dc:97:1b:
         4a:59:09:11:ca:73:ef:4b:ce:5b:4a:c9:ca:52:b4:b6:80:d8:
         53:97:bd:07:f7:99:10:53:c0:6a:d2:c6:29:92:88:c6:c5:0b:
         5c:7a:17:50:ff:f6:fc:23:33:80:a9:db:1a:3d:f7:f5:c7:6c:
         17:10:f0:20:1c:55:df:cd:84:4b:71:f7:39:de:3b:6f:c7:05:
         77:3e:70:f6:cf:f6:ee:52:08:eb:b9:6b:00:c9:9e:c9:1f:99:
         6c:39:db:e3:69:83:c7:c1:e3:79:1c:f1:82:74:92:da:f6:f5:
         de:81:cb:ca:38:c1:52:25:e8:72:ac:68:83:eb:ab:a4:13:7e:
         5b:f0:24:3f:27:58:5e:30:98:24:5c:98:74:a6:e8:09:3f:35:
         8b:28:80:9d:b0:a1:e0:9d:aa:8a:82:21:c0:ca:1a:01:93:cf:
         fb:1e:ef:84:37:80:84:b7:6d:3f:6e:4c:44:ab:94:24:a6:e8:
         5d:9b:ef:20:36:8d:56:77:3d:7b:90:c7:6c:76:c9:fd:74:64:
         26:89:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:50 2026 by rpki-client