Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb8e8b2-99aa-313f-95e6-8d8c8d572800.roa
File:                     8bb8e8b2-99aa-313f-95e6-8d8c8d572800.roa (raw, json)
Hash identifier:          GUfMfkhg7sPDEeXj87c6/ek6Jp4asLvxga8QBKsRCYk=
Subject key identifier:   DD:A2:C6:9C:07:55:95:CD:9B:75:CF:39:45:E7:4E:3E:D8:88:B7:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58F7DE8E91AE58E8FA4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb8e8b2-99aa-313f-95e6-8d8c8d572800.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.92.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:f7:de:8e:91:ae:58:e8:fa:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=7ae97783-b9d1-495c-9c64-6ce442bef3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:e0:23:83:65:6e:55:a0:50:25:6e:53:a8:
                    34:a6:16:e4:63:c2:02:ab:d1:11:b0:05:25:a8:27:
                    0a:d8:01:06:65:28:b7:fc:2d:c9:0c:a8:96:99:52:
                    77:4a:31:e9:7b:78:8b:c2:86:5a:07:4d:51:00:db:
                    d6:43:2c:b7:a0:d3:d5:43:0f:55:77:38:3d:f7:1a:
                    b2:a3:46:8a:b7:0a:f1:be:fd:2d:74:2e:0b:3a:d2:
                    91:18:4b:a0:e6:c9:f5:63:66:29:4f:89:b2:da:54:
                    ce:30:96:27:3c:bd:1a:70:ab:66:8a:62:3e:8b:c0:
                    bc:05:6e:65:be:0b:9a:d2:0f:8e:d2:1f:2e:72:cb:
                    35:fd:4a:09:2d:4a:20:fd:a3:ec:ab:67:6f:9e:44:
                    59:71:02:c3:92:98:27:d4:d5:c0:48:46:b6:04:82:
                    d4:e1:30:b2:54:67:8b:d5:cd:89:6d:5e:b4:e5:f3:
                    4c:dd:f7:8c:ab:69:a6:f2:a0:dc:4b:b0:af:73:8d:
                    53:40:a5:c7:57:31:c2:f0:54:a3:8f:3b:15:87:36:
                    a6:96:ad:ac:c9:82:4c:08:93:78:14:03:71:47:2e:
                    7c:fa:49:f9:5a:93:59:9f:00:5b:6e:04:b5:8a:5a:
                    27:3f:2f:42:dd:98:93:93:8e:26:28:6a:60:c6:fe:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:C6:9C:07:55:95:CD:9B:75:CF:39:45:E7:4E:3E:D8:88:B7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bb8e8b2-99aa-313f-95e6-8d8c8d572800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:d7:e2:00:3a:20:96:d0:69:7b:cd:11:1a:cd:48:32:77:
         84:c1:8b:de:32:dc:08:34:53:f6:32:1e:ab:93:ed:29:c4:35:
         1b:41:a8:58:c8:c2:3b:5f:7f:9a:ec:7f:8f:fa:8f:71:7d:7f:
         44:29:92:81:0c:35:fc:90:5d:0c:6b:cd:95:21:34:e7:8c:52:
         79:ea:08:0b:5c:6e:d0:85:f7:0b:e9:b7:1d:68:a8:8a:00:e6:
         69:48:fd:1c:25:54:86:11:85:62:88:7a:35:49:ed:d4:e5:e4:
         c6:79:33:a4:ce:03:f0:70:57:a0:bb:a1:ee:ab:d5:b8:f2:98:
         32:33:0c:63:31:4f:16:08:bf:18:ba:96:9d:76:03:f7:9c:7e:
         82:96:60:d2:ac:cb:5f:4b:9d:2f:3b:e5:89:0c:2c:cd:1a:77:
         be:6a:8b:43:e4:b7:0a:2f:66:cd:a0:3c:15:a1:f7:5d:8a:a6:
         e9:42:a9:3f:67:58:99:2a:bd:2c:92:e8:98:fa:07:54:5d:39:
         33:58:cd:ad:7e:84:d7:3c:7d:d2:cc:ea:69:e9:69:65:ba:08:
         3f:17:f1:1a:e5:09:ad:cb:a5:1c:46:6c:80:8b:0f:37:6d:7a:
         18:25:df:51:bf:c3:25:72:1d:cb:46:47:77:e3:73:1f:8e:52:
         5c:20:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:56 2026 by rpki-client