Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86021be4-4db7-3364-92ab-b46acb7472ff.roa
File:                     86021be4-4db7-3364-92ab-b46acb7472ff.roa (raw, json)
Hash identifier:          GFsLdQltcyvBMo0J+5rWfrSGwo/ObPXxqBkXbu2NqxA=
Subject key identifier:   41:EB:7C:33:33:13:3F:2F:C2:BA:F5:95:17:0F:8F:21:ED:54:99:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D810025F5AEC4F9C0D17EB180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86021be4-4db7-3364-92ab-b46acb7472ff.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        73.207.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:25:f5:ae:c4:f9:c0:d1:7e:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=481dd45b-1674-4d77-91e8-56a2b78e4f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:bd:08:2a:70:0c:e8:99:ff:b0:9b:aa:ff:
                    04:34:bd:4c:82:d9:6e:fe:41:c9:6f:e9:3d:15:c4:
                    55:7e:4b:93:db:5b:bc:70:e6:d8:e8:b4:92:c9:c8:
                    ed:44:6d:06:1b:84:4d:b6:1f:5b:42:7a:e5:35:77:
                    62:30:ff:72:b4:c6:d9:36:6d:07:4d:5f:af:3e:91:
                    d5:24:bd:7e:a4:fa:4b:fe:16:93:15:5a:f5:b0:34:
                    9a:26:ab:84:6f:bc:8b:e2:b9:bc:42:da:72:58:8e:
                    2e:1f:4c:c0:52:5a:3d:9a:5c:7c:37:ab:1b:52:b4:
                    82:04:83:71:74:d7:1e:9b:bc:3b:96:d7:11:01:ac:
                    77:41:34:e3:bd:1f:0b:c5:14:3f:5b:ab:0d:c5:42:
                    a1:6f:eb:de:26:05:42:50:f6:3d:b7:97:ee:82:a1:
                    01:41:04:57:68:e6:83:c6:53:7f:e5:86:47:0d:bd:
                    57:1f:63:5a:2e:76:1e:a5:a4:ee:48:0c:c5:6d:f9:
                    68:27:a2:6e:c8:7e:94:63:b0:e5:f0:f8:3a:e9:09:
                    d6:11:fd:14:02:d0:66:63:09:76:65:19:6b:0e:88:
                    9d:cd:cc:2e:24:cc:d0:ab:4f:74:c1:1d:ed:f5:09:
                    1e:bf:5e:9a:70:12:1f:59:67:82:09:4f:46:37:be:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:7C:33:33:13:3F:2F:C2:BA:F5:95:17:0F:8F:21:ED:54:99:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86021be4-4db7-3364-92ab-b46acb7472ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:26:57:82:1b:ef:15:db:8c:2e:01:32:27:32:35:5a:f8:ae:
         94:79:2c:5e:fc:84:70:71:80:1d:93:b7:f6:fb:8e:bf:44:cd:
         ac:4d:5c:17:33:b1:91:81:de:5a:fc:42:9a:00:0b:a9:a9:b4:
         b1:43:04:74:20:18:49:ae:f6:89:17:67:f4:91:e7:f7:fd:80:
         43:23:42:fd:ec:04:84:08:e6:72:b0:5a:c0:67:1e:4e:39:13:
         30:1c:49:9e:1e:45:4e:7d:1e:6c:47:55:23:51:92:f0:8e:cc:
         98:ba:ce:11:8b:78:ae:c2:9d:a0:3b:c1:da:ee:d9:8d:37:49:
         38:1b:50:54:da:bf:22:bf:97:67:00:05:cc:e2:2c:58:a3:c5:
         e0:db:51:db:0f:15:ad:27:51:c1:e9:ae:f2:dc:5a:96:cd:a7:
         fc:66:bb:3b:a2:94:cf:63:b6:f9:f8:02:24:3b:4b:0b:33:37:
         2c:fc:d0:b6:34:e8:83:20:48:e0:68:4f:ab:07:b1:92:1c:a0:
         04:33:79:b7:31:5a:d8:0a:b0:82:41:8a:43:48:22:df:8a:94:
         a6:57:ff:14:b6:45:0b:69:5d:2b:24:87:32:ba:3a:bf:dd:81:
         43:e5:c9:0c:50:2a:dd:f9:32:a3:f5:62:3f:e3:bd:e8:e0:d3:
         fe:de:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:36 2026 by rpki-client