Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed8598c-2c68-3a93-a3d9-563df028121d.roa
File:                     7ed8598c-2c68-3a93-a3d9-563df028121d.roa (raw, json)
Hash identifier:          966BnzopJIvBmRN+tps9fMPo0Q0qpDdfywO+uz1ySeg=
Subject key identifier:   AF:7D:BA:3A:76:ED:46:10:2F:F1:E8:05:B2:16:50:80:F8:56:A5:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C7A3A6B3CEAC34C0DEB20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed8598c-2c68-3a93-a3d9-563df028121d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.73.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:7a:3a:6b:3c:ea:c3:4c:0d:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=200f13ef-6449-4141-8514-79daf3258e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:73:4c:06:c1:fe:8d:90:69:52:63:ef:85:
                    f2:f4:3b:ab:90:d8:8d:f2:d9:ce:7c:45:91:67:1c:
                    e8:88:7a:20:0a:be:45:e7:bd:68:08:56:f2:c9:be:
                    0c:bd:e8:69:dd:85:f6:d4:1b:de:8c:aa:e5:f6:2d:
                    d7:3c:4f:b6:28:21:5f:0c:a7:4c:af:c0:31:41:c6:
                    42:53:47:d9:42:d6:a1:36:06:ae:44:d2:d0:b4:57:
                    fa:b2:04:30:85:92:7d:5c:00:31:04:7d:57:4a:5c:
                    d0:0b:5e:5f:cb:12:2c:66:b3:c4:4d:b8:d9:ff:01:
                    cc:f9:e8:25:6c:25:48:15:e2:b3:c0:54:c7:bc:33:
                    78:4d:7c:cd:47:25:56:41:69:65:89:30:79:38:10:
                    df:ea:e3:f2:a7:7a:96:2e:8c:a9:97:2b:cc:d0:a1:
                    5e:f3:a5:4d:5e:26:a8:d1:65:76:12:9b:46:9e:e8:
                    00:09:b9:f5:45:9f:9d:8e:99:3f:79:49:e4:bc:32:
                    e6:80:3f:4e:71:de:c8:59:b6:ad:2a:04:d9:df:c1:
                    e2:fa:da:f7:02:81:eb:54:4a:3f:2d:be:fd:6d:a9:
                    8f:1d:fa:9e:60:a1:cc:32:b0:b9:e7:58:6e:70:6d:
                    98:6b:81:90:d3:0e:a4:f1:34:9b:74:dd:75:e6:4d:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:BA:3A:76:ED:46:10:2F:F1:E8:05:B2:16:50:80:F8:56:A5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ed8598c-2c68-3a93-a3d9-563df028121d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:44:b3:10:14:e9:19:63:c9:b0:a3:a6:71:7e:da:72:77:
         67:23:02:36:3e:ed:08:56:f1:35:2a:85:75:94:44:2e:ce:e8:
         b5:36:1e:5e:77:e7:aa:d6:b9:d4:10:f7:4c:98:7e:eb:9a:32:
         1e:fb:c4:ec:84:34:b6:f6:7f:f3:d5:66:02:84:bd:c7:cb:3c:
         ad:a8:e7:24:d2:67:f0:2c:4b:8e:ee:b6:58:33:2a:d0:73:b6:
         8f:2a:46:ad:a7:70:07:58:c6:62:38:a3:9a:b6:3a:e7:ef:0b:
         25:bb:12:6e:bf:9a:3f:11:b7:eb:f4:f9:2d:c3:a6:18:86:77:
         77:6d:10:34:19:d6:dd:66:da:59:87:6e:67:92:d1:d9:88:be:
         df:5d:8c:dc:c7:d0:70:6c:bf:42:4a:9b:e6:7e:43:2b:41:1f:
         af:12:df:09:42:76:d8:1b:26:18:c7:4a:ca:a9:bc:07:d7:b5:
         ca:c7:70:60:39:bf:97:75:fc:01:c2:eb:70:77:01:f2:25:f6:
         58:7f:0b:0d:64:99:f6:f0:67:8f:12:43:0b:2b:8f:99:2d:a1:
         37:3c:f6:75:72:4b:be:ae:78:2b:cb:95:61:28:8d:c5:08:d9:
         ec:a1:86:70:70:b4:28:0c:de:68:7e:f6:e0:05:ce:46:42:04:
         e8:90:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:28 2026 by rpki-client