Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f727d4-22a8-3167-b2a1-1e247cd85d60.roa
File:                     65f727d4-22a8-3167-b2a1-1e247cd85d60.roa (raw, json)
Hash identifier:          DaFL0PVPEikiREsTLj4+Nxplelc3beBN/yi3v5D9SoI=
Subject key identifier:   B5:6F:E1:E3:81:AA:EA:09:A0:11:CB:10:E9:91:02:71:C9:54:61:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5AEB2DAEA87B65F396B780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f727d4-22a8-3167-b2a1-1e247cd85d60.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        73.30.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:eb:2d:ae:a8:7b:65:f3:96:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=22b9aae9-7557-4fb8-b8f4-5f1a44e3b9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:e4:88:87:89:53:2a:df:81:68:71:8b:0b:
                    31:51:6b:bb:7e:9d:a5:5d:b9:ab:f0:ad:0d:b3:29:
                    cc:3c:95:bd:10:12:9f:6b:0d:7f:dc:e5:c1:03:27:
                    bb:29:e1:22:6b:da:15:ef:6a:e2:f5:a5:10:d5:65:
                    24:6b:ad:95:15:a4:ed:6a:ea:df:71:8a:5a:37:05:
                    45:7b:e6:69:d5:28:5d:0f:ef:02:8a:b5:59:0e:52:
                    ac:d9:d8:eb:b9:e3:05:6f:d9:4f:82:4c:a2:f3:e0:
                    0b:e9:54:61:38:51:ed:e4:97:58:3c:bf:2e:9b:1b:
                    1a:97:95:a3:23:c2:32:06:b8:69:51:1a:6c:04:ad:
                    e6:5a:80:fa:d3:6c:1e:33:1d:ea:11:cc:11:43:be:
                    cc:0f:c7:2b:4a:82:17:41:f5:a3:3a:33:8c:eb:fe:
                    bc:a7:96:4b:64:31:5d:78:f6:dd:21:77:68:b1:9e:
                    44:59:81:ef:e0:ca:f1:fb:98:22:2b:42:d9:0f:61:
                    26:ae:5a:1f:96:a5:92:a6:0f:f1:12:af:71:ff:51:
                    85:e6:d4:d7:97:f6:9c:5c:5d:0b:af:82:ed:c6:8c:
                    8f:e7:88:e8:9a:30:4e:35:9b:60:6f:e3:3c:ae:75:
                    4c:7f:1e:00:ab:85:7e:9e:a4:0c:49:b0:64:a1:5f:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6F:E1:E3:81:AA:EA:09:A0:11:CB:10:E9:91:02:71:C9:54:61:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f727d4-22a8-3167-b2a1-1e247cd85d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.30.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f2:99:40:c8:d2:a1:4d:7b:4a:c4:ce:fc:65:41:23:31:98:
         e3:f5:0d:e7:11:9a:fa:ee:38:80:c7:e4:6d:81:f6:0a:6d:b7:
         9e:4e:6c:50:ce:b9:7c:0a:41:ba:52:3c:82:8c:94:72:05:f5:
         94:f3:e1:96:c4:0a:86:82:c9:14:28:18:51:03:9b:e9:2e:f9:
         05:30:f7:bc:28:bc:70:1c:6c:ed:d8:b0:11:1a:4c:77:5f:3c:
         fa:ef:90:ae:bf:1e:b1:06:33:92:8d:3c:e6:fc:73:33:b3:38:
         17:c7:c6:84:0d:f0:55:af:78:99:27:99:86:15:84:f5:65:70:
         d8:fe:a9:9c:23:45:43:02:1e:f7:e4:27:10:fa:b6:5c:e4:13:
         9b:cd:41:9d:76:79:04:9f:a5:ee:da:b0:9f:3b:45:ad:0d:09:
         80:bf:98:2b:77:f0:48:44:ba:7c:78:76:63:02:e1:a6:fa:0b:
         36:8c:31:2b:e5:87:6d:29:c3:ab:c3:4f:c7:8c:7d:c0:38:09:
         d1:3c:be:5e:b4:21:4b:5a:24:59:03:be:ac:01:0f:46:61:cd:
         3a:4f:81:cc:71:1f:77:2d:45:26:c9:c0:be:d7:3f:6b:ad:e0:
         25:9f:9c:50:16:27:94:a1:64:b3:75:f1:b3:7e:5c:c4:2b:16:
         8a:65:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:39 2026 by rpki-client