Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf4abca-f9d9-3e61-af8c-fe2377ce32be.roa
File:                     5bf4abca-f9d9-3e61-af8c-fe2377ce32be.roa (raw, json)
Hash identifier:          3Ve/e0HTvL9VJ2eZuNUEdznYOavsyfWzQ4aKv8lxNV4=
Subject key identifier:   3E:23:10:C8:F3:A9:13:A8:94:E1:92:F0:DB:75:28:1C:89:E7:32:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DD7BB22A8E6C188502340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf4abca-f9d9-3e61-af8c-fe2377ce32be.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.92.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:d7:bb:22:a8:e6:c1:88:50:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6ee611ea-3d83-4b8c-a081-85f71bcd5df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:54:c6:f0:00:81:68:91:1b:32:79:8f:b5:
                    6a:99:bb:aa:f4:0e:30:57:b2:63:e0:28:59:63:05:
                    93:6c:1b:21:06:a5:e1:1e:1c:54:18:9a:48:5f:08:
                    91:2d:ad:97:d7:8e:81:10:60:d6:58:7e:74:81:ad:
                    16:55:9f:a9:94:7d:11:49:f3:40:d2:d3:f2:33:f2:
                    31:9f:2f:f6:39:dd:a9:59:2a:a6:91:89:5c:ef:9c:
                    73:2a:20:3f:f2:8b:9d:5f:34:ca:d5:f3:cb:54:ff:
                    73:38:bd:5f:17:2c:9a:dd:66:23:b6:49:e6:ad:b9:
                    af:74:03:b7:86:79:b5:f9:f6:a7:1c:da:a2:f6:8f:
                    7e:4f:24:0c:aa:41:2e:34:f7:8b:9a:05:9a:4a:e1:
                    1c:14:73:40:e1:99:4b:d9:14:c8:62:04:b3:8d:31:
                    d1:48:b5:b6:5d:cb:3d:20:d6:29:00:f9:b3:71:6c:
                    92:0a:72:53:4a:8d:00:df:26:be:12:fc:d7:7d:4f:
                    de:ea:25:15:5e:88:24:c1:7a:fd:40:9c:93:7f:03:
                    ac:c8:c6:58:00:f3:d6:87:a0:9d:e0:8c:e2:09:9b:
                    09:46:9c:7a:1d:54:97:1e:b1:f7:e2:71:26:45:42:
                    b8:db:51:ae:6d:34:85:4e:c9:89:e4:43:19:df:64:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:10:C8:F3:A9:13:A8:94:E1:92:F0:DB:75:28:1C:89:E7:32:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf4abca-f9d9-3e61-af8c-fe2377ce32be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:df:ec:f0:5c:99:c1:a4:1f:2f:65:7e:02:53:d6:c9:c2:5a:
         75:1e:3b:a7:7c:eb:55:cd:02:85:6c:fa:05:0a:79:54:ed:87:
         ff:11:85:39:a2:21:c4:a4:5a:13:e6:01:f4:f3:6b:1a:e1:c2:
         31:2d:03:53:7b:c9:be:d0:a6:b0:2f:21:c4:56:79:ec:56:be:
         31:9d:fa:29:ab:bb:a8:0a:b7:a5:14:dd:9d:10:49:c3:a7:ca:
         35:b7:a3:96:dd:4e:3d:3d:ef:8e:c5:31:09:d6:ef:7b:3c:a3:
         ff:55:0e:ba:2f:5b:04:24:2f:65:6b:5f:7e:e5:d9:02:7c:56:
         83:db:0d:20:52:d9:92:e7:4a:ec:81:9c:77:43:d1:6b:ca:3d:
         88:4e:0d:e7:1b:ae:8c:5e:8a:c8:56:60:c0:57:7c:63:b7:91:
         42:ea:05:e3:a1:cb:a3:c2:bd:49:33:50:88:5c:68:e0:0a:15:
         78:31:a4:55:be:d6:dd:a0:07:c2:89:2a:94:3f:bc:e2:1e:b9:
         70:02:dd:79:ae:94:21:af:3d:7d:e4:7b:28:fa:da:c4:89:fb:
         94:89:be:1c:9e:88:c4:ca:88:cd:6f:d7:04:b2:0b:c3:b5:7a:
         02:66:e8:ce:c7:27:12:6a:cb:d4:97:c8:b3:9f:32:e4:47:50:
         b5:ac:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:54:20 2026 by rpki-client