Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58b2019a-03fa-326c-a778-bd9185649264.roa
File:                     58b2019a-03fa-326c-a778-bd9185649264.roa (raw, json)
Hash identifier:          KJG1EfrmzaCcJxayvF7xNIGUf1ut2d5zzScdV0JrokY=
Subject key identifier:   7A:F6:78:C9:5A:79:C9:81:6F:93:A4:40:3B:58:FF:2E:99:A8:13:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE577A146F5851E62B1A4AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58b2019a-03fa-326c-a778-bd9185649264.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.112.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:7a:14:6f:58:51:e6:2b:1a:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b397dfc4-94b2-4a3d-aa5b-5a9057b7b30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:8d:e3:9a:35:2a:54:36:c7:a4:ba:30:4d:
                    41:78:93:8a:6f:04:74:06:dd:cd:b4:e0:e9:80:2f:
                    a6:3a:3f:81:a9:a4:4d:c4:92:9b:bd:a4:38:26:f8:
                    6b:db:5f:5d:dc:84:c6:c9:ba:01:f5:90:ae:cf:1a:
                    4a:c8:3d:f1:7f:f4:56:31:4e:ac:db:95:b9:13:c1:
                    78:aa:32:cd:0e:91:af:91:db:f9:8b:c0:bc:ff:03:
                    00:aa:cc:c2:1a:a1:05:75:7c:e1:22:2c:44:5b:65:
                    de:84:1e:d1:aa:94:32:03:36:c6:a2:c8:d7:fb:eb:
                    26:f5:36:1f:4b:dd:cd:0b:1f:95:c7:ae:07:39:b9:
                    0a:13:7c:8a:14:7f:c7:91:36:12:55:19:9f:a2:52:
                    49:43:58:58:fc:0f:01:85:cc:4c:26:f0:61:ff:33:
                    09:08:74:b3:d0:3a:42:f2:6f:2e:f9:6e:3c:60:f0:
                    76:88:61:92:bf:80:49:9c:4b:bf:b3:bd:54:13:7f:
                    15:8c:37:cd:48:50:3a:88:d9:3f:6f:b6:dd:b7:bc:
                    34:2b:ff:75:fc:9a:51:eb:fa:58:bc:03:71:b2:f9:
                    c7:e1:85:be:7a:72:ba:b4:33:1f:aa:43:cb:d7:7d:
                    fd:a8:67:c9:b2:1b:a1:71:73:21:e2:12:09:62:28:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:78:C9:5A:79:C9:81:6F:93:A4:40:3B:58:FF:2E:99:A8:13:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58b2019a-03fa-326c-a778-bd9185649264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:56:56:fa:b4:4e:8a:17:58:f1:70:76:46:83:41:39:52:
         c8:23:7e:ea:1b:26:07:05:73:02:aa:e0:23:5f:91:4f:e9:15:
         d1:07:bf:31:3e:30:75:60:db:53:82:f5:0b:52:4a:c6:5d:45:
         64:ad:d9:6e:d9:ce:aa:b4:dc:10:54:df:be:09:bf:12:1f:6e:
         7d:e1:f3:43:4c:7a:73:c7:df:54:cc:e5:78:70:d1:d9:0b:d2:
         d5:60:c8:80:fb:d1:db:0d:f7:64:07:4f:54:e8:58:5a:68:b3:
         7c:09:75:fd:85:83:1d:e9:eb:5f:9d:14:98:c8:91:31:b4:c0:
         52:bb:0a:90:c1:b5:d9:80:c8:40:30:b5:db:15:36:e9:a2:f8:
         73:f4:08:a2:95:00:5c:a3:3e:4d:78:88:3e:55:c9:3a:33:da:
         31:eb:de:b0:2e:39:f1:c1:8f:c6:fb:9a:b2:b6:79:e9:82:c2:
         7d:5e:3d:cd:3b:20:3b:fb:88:c9:18:46:5a:b8:c4:08:b6:5f:
         71:7a:3e:1f:b5:29:45:61:ba:df:6f:7f:75:f3:86:35:c7:72:
         41:db:8b:75:92:78:89:22:65:1d:97:23:8a:8f:cb:59:ad:ae:
         52:d0:86:10:84:e9:77:6b:f4:94:4b:98:82:dd:16:f6:b2:6a:
         94:2d:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:50 2026 by rpki-client