Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9799e2af-0fd9-364f-a590-fedbc038a61c.roa
File:                     9799e2af-0fd9-364f-a590-fedbc038a61c.roa (raw, json)
Hash identifier:          wZNq7iawSDTpohsyxdUnGjtBhLOXUDaQoV59FXczF0g=
Subject key identifier:   79:5F:37:9F:61:97:F2:8C:B2:D1:A2:5D:51:33:C7:5F:6A:A0:B3:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58CBFE33067367916DD0D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9799e2af-0fd9-364f-a590-fedbc038a61c.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.15.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:cb:fe:33:06:73:67:91:6d:d0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2f5be144-6c57-4667-80e5-47e0b0162776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:d7:00:fa:0a:56:0c:9f:43:ef:a7:98:84:
                    f7:36:a4:a3:ca:65:d0:d1:7f:88:15:87:66:db:d7:
                    24:68:79:f6:4a:18:f8:7e:cf:74:99:7d:95:4a:a2:
                    9b:15:45:59:f7:93:6b:cc:87:f9:36:7b:c2:0b:c5:
                    78:fa:44:71:15:85:89:31:a0:57:3d:f8:34:6f:ea:
                    d5:0a:d0:26:68:f8:f7:a2:da:a2:90:c2:59:28:12:
                    50:a2:dd:2f:ba:9a:63:c8:7e:9d:0d:09:02:5e:7e:
                    f4:82:f6:91:8c:39:39:45:53:ae:fe:ca:6d:b3:d2:
                    bb:ac:59:d2:69:af:17:4c:d8:0f:bb:cb:49:fe:e4:
                    e6:ea:14:c1:66:5a:f8:48:45:62:f2:6f:24:32:66:
                    96:1b:30:4c:39:b6:67:cd:15:b2:ac:84:3e:b0:a6:
                    34:c8:b5:0f:fc:b3:4b:f0:66:74:7d:cd:75:59:1f:
                    df:6a:04:47:dd:b4:3f:4b:6b:43:10:ad:07:94:d9:
                    19:e1:79:18:67:49:5f:d3:82:18:e6:f6:d1:ad:d5:
                    cb:93:7e:2a:48:27:b5:35:78:ce:5d:0c:55:9c:7e:
                    87:e9:e5:84:a7:68:53:b8:40:88:5b:13:c3:b6:7e:
                    e9:67:f8:6e:1a:a6:19:7b:d8:e9:69:13:55:c9:3d:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:37:9F:61:97:F2:8C:B2:D1:A2:5D:51:33:C7:5F:6A:A0:B3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9799e2af-0fd9-364f-a590-fedbc038a61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:63:09:92:d7:fa:53:dc:c1:19:5e:04:45:7c:8b:e2:21:e8:
         74:49:5b:58:3d:b8:95:4e:13:26:17:8d:ec:fc:2a:4c:6a:9a:
         f5:f0:1e:07:8a:21:f9:9a:59:c1:31:a5:e8:ad:61:68:02:18:
         22:86:3f:d1:2e:4e:74:4d:39:df:ac:a0:06:77:6b:79:23:b9:
         72:58:b0:64:2f:bf:f0:ed:d5:df:63:93:52:04:33:e2:b4:b3:
         ce:6e:40:b1:1b:67:83:21:61:c6:50:39:92:34:10:31:09:d4:
         23:1a:3f:07:53:83:61:4f:0c:74:40:bd:1d:4f:3f:ee:d5:2b:
         26:e2:5d:e2:15:4a:c2:2b:8d:70:f9:ed:6e:90:e7:f9:9c:4b:
         d3:af:6d:46:1c:1a:0a:f9:11:9c:a2:d0:18:50:3a:38:11:f9:
         8d:8e:88:a4:d0:d1:78:25:fa:d5:55:1e:a9:fa:58:44:d8:3c:
         1c:00:c9:ef:f1:11:90:41:f8:12:3e:01:4d:8e:2c:ef:54:dd:
         b9:d3:fe:f6:5a:a0:f3:1e:0f:75:86:a9:85:b5:50:40:7d:4d:
         ca:1a:40:70:10:c4:5c:88:8d:3c:c4:c5:7f:80:7d:c0:d4:07:
         0d:42:c1:14:f4:b6:2e:f4:d0:c3:8c:02:9a:ec:71:5e:02:b0:
         c1:28:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:28 2026 by rpki-client