Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82ff0-4fe3-3760-a569-d645ac79a14d.roa
File:                     8ff82ff0-4fe3-3760-a569-d645ac79a14d.roa (raw, json)
Hash identifier:          iS/RFH4eDPx/WLVf5HRQaJzLS6sorEVCByDXl6kvJm4=
Subject key identifier:   4E:46:5F:BF:47:E7:B2:5A:9A:F9:B7:3B:ED:FB:AC:F4:2D:D8:9A:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57857DD4F4745592AF2A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82ff0-4fe3-3760-a569-d645ac79a14d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.193.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:85:7d:d4:f4:74:55:92:af:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ba35bb82-c5cb-4d43-9bde-3243af7cf3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:dc:45:20:da:a0:48:ce:a0:7a:fd:ff:0c:
                    e4:ca:26:3d:5d:9c:f9:41:d6:5a:59:eb:cf:62:f0:
                    81:36:44:17:78:aa:dd:97:67:2a:14:e8:ff:4b:04:
                    76:45:a6:e9:e6:d8:c7:9c:00:91:42:81:0b:c2:70:
                    12:2d:6d:21:20:67:ec:e4:e7:17:6c:67:cd:86:2c:
                    35:d8:d2:cd:01:15:e2:0a:41:a9:12:6b:a1:8b:74:
                    db:4a:1d:9f:1b:03:bb:35:70:b4:dc:73:1f:ec:17:
                    89:50:da:4e:0e:68:e5:9e:46:38:ad:d7:5a:27:70:
                    53:66:e0:f5:b7:33:74:a1:e0:8e:c1:7a:e8:0b:d7:
                    cd:82:b4:5c:35:84:d3:26:9f:2d:cc:d3:e0:44:14:
                    22:c2:82:fd:5a:7c:5f:5f:f7:36:54:c4:09:36:43:
                    1a:b9:98:21:6c:b6:7e:3d:fa:bd:cb:30:a9:64:9b:
                    d8:0a:0e:cb:7c:c1:c3:63:d5:96:01:e3:3a:d1:a3:
                    37:7f:51:b2:bf:f3:b4:73:71:7f:53:a9:81:96:8b:
                    15:d6:bf:ca:eb:84:f9:bf:9b:b3:14:da:30:00:22:
                    57:b8:cc:e2:f7:e8:50:57:0c:f1:69:1a:f3:48:0a:
                    55:62:fb:0d:35:16:3d:f9:02:e4:ef:ef:b7:86:7f:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:5F:BF:47:E7:B2:5A:9A:F9:B7:3B:ED:FB:AC:F4:2D:D8:9A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82ff0-4fe3-3760-a569-d645ac79a14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.193.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:62:a4:7b:43:05:8e:18:bd:11:73:b1:d3:68:da:60:9b:
         8c:68:d4:d9:d5:a3:a7:06:14:74:07:c7:7b:af:a3:f5:89:09:
         00:d2:57:e3:54:82:a0:9a:3b:9a:9d:40:93:41:47:c8:3d:2e:
         45:40:54:3a:95:26:77:a4:1b:38:2d:eb:c0:14:aa:09:ef:e9:
         08:93:d9:67:e0:03:eb:14:cd:f8:b1:a5:fc:bd:e6:5f:e9:82:
         9f:16:19:d4:58:06:5b:c9:85:f9:a0:46:da:b3:26:5a:3c:95:
         b9:f6:bb:f4:bb:ee:68:78:51:78:8b:a3:b5:50:8e:29:b0:13:
         0a:fe:18:20:dd:4e:6c:85:f5:cc:b9:a5:d8:94:8c:63:12:07:
         86:03:e8:e0:fc:f6:4c:d5:9d:50:c7:41:f0:db:84:ff:88:e1:
         8d:23:e3:9b:2b:6b:70:d2:5e:2a:5d:96:92:44:eb:ff:92:2e:
         5c:73:3f:d8:d9:2d:1d:ad:00:e7:2d:ea:df:48:7c:48:e3:5d:
         b5:61:8e:77:99:bb:b2:7d:27:db:79:c4:d4:bb:a6:5a:f4:b1:
         9c:d0:f8:07:63:0f:96:bf:ae:fd:9b:98:53:7b:fb:44:38:fe:
         b8:7c:66:f7:13:e4:09:af:92:3b:50:49:15:01:4f:5c:37:f5:
         65:3a:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:22 2026 by rpki-client