Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa
File:                     5eb63cf7-aea0-3314-9180-cad032fffe15.roa (raw, json)
Hash identifier:          Qv7kY7daqKqQrqNrdIpS5Lm+P8OmIwZz5j+onOspzSY=
Subject key identifier:   81:50:E0:80:04:78:AB:66:8C:A4:AE:E5:4A:D6:DB:12:36:CA:3D:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58F1067A5E6A853C4ED400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.70.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:f1:06:7a:5e:6a:85:3c:4e:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=312d512f-ccc3-4979-a3a6-0b9657ddb5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:ed:5b:ab:d3:9a:99:99:7d:77:37:06:02:
                    5c:5c:bb:ca:46:1e:60:4a:f0:cf:9a:71:b6:c7:7a:
                    88:28:2e:fc:68:8f:46:ab:40:10:c8:5c:7a:74:75:
                    e9:ac:f8:9e:14:23:3d:57:56:70:63:5e:1c:d2:40:
                    d5:02:30:c5:90:88:32:52:ad:4c:05:38:7e:2e:f4:
                    21:e2:f7:05:82:81:3c:5f:dd:cc:66:76:6d:b4:9c:
                    1b:03:03:d4:29:b2:f8:84:77:9d:a4:8f:00:99:49:
                    80:f5:ea:fa:ab:71:37:76:56:77:0e:1d:4d:46:c7:
                    12:48:d2:a6:73:d9:f8:d2:df:a4:3b:be:e3:09:46:
                    5d:a8:a5:85:77:d0:82:30:be:e1:6d:c9:aa:11:62:
                    28:6c:2e:23:7b:03:1d:3e:2a:85:11:0c:81:7e:9e:
                    46:a2:bf:bc:b2:c9:0a:92:81:0f:38:fe:ce:6e:6d:
                    1d:f6:30:6c:93:06:00:ae:da:09:f5:ce:12:ba:dd:
                    52:e3:a0:4f:7e:a0:bf:31:97:aa:f3:47:78:d6:aa:
                    6b:95:34:08:79:9d:83:16:78:7a:3d:ec:65:65:81:
                    b1:3e:85:1b:bd:94:dd:ec:57:f7:4a:50:37:98:90:
                    72:a8:22:b5:1d:2a:f4:36:e7:63:f9:b8:f6:fc:93:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:50:E0:80:04:78:AB:66:8C:A4:AE:E5:4A:D6:DB:12:36:CA:3D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:9d:a1:b3:04:e8:ba:ef:0d:2b:4b:61:d0:e1:c5:77:b0:41:
         80:76:7d:0c:5c:cd:83:a5:09:9e:84:73:86:37:72:ae:95:fb:
         2b:53:85:7d:41:d9:ae:91:62:de:b0:f3:be:d6:30:3e:8e:11:
         79:73:0e:64:63:54:6e:2b:92:98:7b:7e:34:e1:ee:3a:3c:10:
         88:66:7a:26:ae:51:04:da:6b:65:b4:84:f3:d6:f1:66:6d:d1:
         9f:56:ad:78:1a:ab:05:91:84:f7:a0:a4:be:58:69:0a:88:4c:
         92:26:d4:04:30:0f:83:79:01:e5:5b:f8:93:a3:db:79:3a:17:
         b6:f8:09:5d:9f:6e:c0:97:bc:44:39:47:b2:94:2a:54:76:9a:
         fe:5c:a3:39:d3:5a:cc:67:43:99:23:a5:50:f7:c8:68:ec:8b:
         d5:a1:0a:b1:24:b3:e2:00:63:bf:8b:5c:ac:f9:97:6e:67:24:
         37:7f:c0:25:6c:60:9e:62:4a:8c:77:84:7b:84:16:fc:41:1a:
         4c:b6:76:06:b9:12:32:c5:c6:65:a6:54:d0:fd:f2:e2:5f:c9:
         5e:85:8f:18:63:df:d2:cf:e1:d1:b0:d0:12:39:1b:65:9f:94:
         31:aa:e1:26:16:c7:98:2e:7f:31:89:bb:9c:d7:57:a5:81:35:
         62:00:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:16 2026 by rpki-client