Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b63c8-a335-3f16-a361-27f808e1e506.roa
File:                     8d9b63c8-a335-3f16-a361-27f808e1e506.roa (raw, json)
Hash identifier:          Ggt+KfwbKgOzsmpiVRP8E+Qff4iYICOxKJnl3KqhVTM=
Subject key identifier:   B8:4A:9E:E2:8E:71:9E:0D:3A:FD:83:1F:AA:1E:38:A0:AB:8A:54:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C9ECEAF1E4EECF5D3E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b63c8-a335-3f16-a361-27f808e1e506.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.9.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:9e:ce:af:1e:4e:ec:f5:d3:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d1164610-51dc-4a9c-a63b-0561420c8266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:8e:b5:56:ed:57:5f:de:f9:39:fc:90:17:
                    35:cf:99:52:d0:25:16:7b:34:65:24:8b:c4:8b:cb:
                    c4:b1:7a:02:a7:49:b8:bb:6f:4a:ae:5c:21:92:ac:
                    c3:78:f3:47:59:e7:84:ef:b1:fe:07:34:de:c1:88:
                    34:80:ce:0c:7d:26:b4:e7:88:16:8d:2a:6b:8b:e8:
                    8d:90:70:d6:61:36:ed:fa:2f:2f:42:c4:60:17:3e:
                    18:94:7a:b8:94:ba:87:d3:8a:6b:65:27:0b:59:d8:
                    c4:4a:be:99:ad:00:f6:b4:94:6c:15:7b:8c:85:9f:
                    f1:7f:c1:c5:e0:fc:c9:6a:ca:db:3b:3d:2d:62:3a:
                    70:28:be:94:c6:b7:38:e9:d1:37:16:0b:ba:63:8b:
                    60:83:6a:3f:3b:cf:f6:b7:0c:b5:90:b2:09:2a:bd:
                    2b:93:02:b5:84:e9:9e:7d:ff:8f:1a:e4:c9:e0:d5:
                    77:fe:bd:82:46:96:61:eb:43:83:14:8d:38:9f:1d:
                    de:9d:18:28:03:b4:b3:9c:48:bd:9b:75:be:c6:e5:
                    f8:6b:c0:2a:99:5f:98:3e:ce:6b:e8:f8:ff:5c:d5:
                    1c:95:25:c7:02:74:db:89:07:8c:c9:72:f3:04:b1:
                    3c:b0:06:5a:37:74:a7:ae:4d:db:7b:c0:88:c7:26:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4A:9E:E2:8E:71:9E:0D:3A:FD:83:1F:AA:1E:38:A0:AB:8A:54:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b63c8-a335-3f16-a361-27f808e1e506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.9.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7d:df:40:ab:55:a1:10:c0:3c:07:82:06:eb:e9:35:f7:46:
         18:cb:47:f1:9a:8c:89:d4:11:f4:f2:69:0e:9f:f5:2e:05:c9:
         0e:e8:3b:cb:1a:0e:81:e9:cb:9e:27:ec:68:0e:79:b7:fe:a8:
         41:54:e3:a5:e2:90:7e:02:3d:ea:91:e9:8d:d6:9d:bc:b9:06:
         68:18:c4:69:77:b1:92:bf:a1:29:14:97:85:ff:1c:17:a6:31:
         fd:b0:38:61:00:1c:1f:ef:97:09:5d:92:ef:54:a2:12:37:06:
         76:08:c1:2b:8e:46:4c:1d:95:cf:20:c9:88:56:50:b8:68:07:
         ff:1c:91:7e:fb:9b:5c:5e:6c:10:ff:40:f4:88:26:4f:81:b8:
         8f:21:e4:fb:53:39:9f:45:30:3c:8e:5f:18:fb:07:b5:08:c1:
         65:9a:72:f5:a6:b1:a6:8b:70:c7:87:29:18:25:a6:29:48:1f:
         e7:8e:af:b2:76:3b:f2:98:71:92:1f:64:70:6b:1a:9b:f3:a4:
         5d:ca:4f:b7:b5:0f:2e:1b:b9:68:f7:29:10:ce:7b:e0:5c:fb:
         87:ea:b6:8a:47:89:cc:37:42:a0:52:48:85:28:08:4a:f2:9a:
         07:56:db:cd:a0:a1:e7:07:bb:36:05:c0:b9:81:68:6e:c3:6e:
         c1:40:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:17 2026 by rpki-client