Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c6bdb1-c37d-313a-9f2a-e4bf328ddd1e.roa
File:                     52c6bdb1-c37d-313a-9f2a-e4bf328ddd1e.roa (raw, json)
Hash identifier:          rGb8jON8gbSWlUCvRGcjVYRED9ih/La17+MfClMyNNU=
Subject key identifier:   09:FB:6E:D0:62:DD:56:BD:E0:39:2A:95:B3:11:96:27:B6:42:1D:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C859CCB1E1601C6708600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c6bdb1-c37d-313a-9f2a-e4bf328ddd1e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.74.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:85:9c:cb:1e:16:01:c6:70:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=825daa52-94d7-4712-ae89-10283c5b6808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c4:02:80:e1:39:3c:45:b6:62:db:7a:f6:e2:
                    c1:63:e2:fa:62:06:12:66:53:cb:c9:10:05:a0:de:
                    a8:fa:68:2f:6c:1b:d1:cc:41:8c:08:fb:39:03:e6:
                    a5:a8:b2:70:07:1c:46:f8:bf:98:6f:0d:a2:68:20:
                    ae:a4:7a:45:67:c4:d7:1c:08:9b:c5:af:77:b4:6c:
                    83:b2:f9:ec:cf:ee:c4:77:be:9d:d4:9d:12:bc:03:
                    a9:53:cb:95:ef:79:97:3d:34:c2:cf:e1:b5:7e:3c:
                    86:56:20:de:a8:c3:b0:8e:75:33:7b:8a:6b:01:27:
                    90:8d:20:30:b6:b6:c6:bd:c9:65:3a:28:3d:7a:c6:
                    b4:73:52:23:3b:a7:a8:74:53:90:03:c7:7d:82:09:
                    85:96:a5:39:51:5e:2c:01:9e:9d:a7:cd:c7:44:f5:
                    9c:70:14:63:06:da:7e:c7:75:05:8d:08:5d:f6:e9:
                    6b:58:c8:1f:d8:75:7a:5b:7e:e0:01:2b:a9:4b:33:
                    6e:08:89:61:34:9e:3e:f4:f3:6f:e5:4a:ff:ea:a8:
                    db:97:47:f2:39:40:d1:27:1b:5f:1f:95:22:a4:34:
                    e5:d5:4b:25:88:1d:b7:3d:31:7f:9b:34:2d:22:ec:
                    13:8d:c2:4e:5b:36:03:37:27:29:65:e9:12:11:60:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:6E:D0:62:DD:56:BD:E0:39:2A:95:B3:11:96:27:B6:42:1D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52c6bdb1-c37d-313a-9f2a-e4bf328ddd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:a6:1c:47:0f:2f:66:ab:68:2c:07:16:06:44:66:a7:f9:
         2d:e1:da:dd:b6:a0:7f:1e:d2:3c:f7:7f:3e:a1:e5:0e:58:d9:
         74:64:3e:14:f8:4d:7d:68:3c:7b:22:b9:eb:f9:40:83:9d:9e:
         f1:aa:24:ce:c2:1b:01:ed:48:b2:70:8a:a6:ff:14:e5:27:bf:
         5e:6e:da:c0:27:93:15:9e:a4:b6:ad:7b:bb:3b:12:be:1f:bd:
         b1:d3:66:66:12:e6:ff:d9:f5:d3:e0:b5:7c:87:ac:76:29:d9:
         6f:8d:da:67:75:e3:34:73:e3:5f:95:f1:b5:fb:d4:ee:a4:25:
         13:e3:36:a2:4e:b4:1d:33:9d:9e:ce:ce:f4:32:23:85:20:21:
         68:e7:49:6a:0b:55:b6:fd:02:12:57:46:f3:2a:44:d4:55:c6:
         04:e7:8f:91:92:d4:c2:3f:42:e5:24:89:8b:35:bd:0d:87:b6:
         e3:1a:68:ca:bc:5e:bf:38:22:96:72:95:ab:52:f4:91:bc:8f:
         73:dd:22:61:3e:92:75:8c:4f:b1:35:12:44:99:c0:f2:f2:3a:
         8a:be:6c:b4:d8:e0:c2:1f:c7:06:0c:be:fb:cf:c5:75:11:7f:
         9f:2f:e8:5e:7b:5a:a7:8a:3a:79:4c:3c:5a:35:a3:65:22:7a:
         57:1a:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:46 2026 by rpki-client