Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5f91a-9b1f-3a7f-9770-e7d25feced56.roa
File:                     97c5f91a-9b1f-3a7f-9770-e7d25feced56.roa (raw, json)
Hash identifier:          TltO89m1KYCkjSE8R10qWSYESFwoXYa23VzPO0FtFpk=
Subject key identifier:   C2:7B:60:B0:A2:31:81:2C:A8:8D:35:2A:E6:4B:0E:A3:4C:74:41:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB2EF0699B5A3569623F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5f91a-9b1f-3a7f-9770-e7d25feced56.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        73.18.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:2e:f0:69:9b:5a:35:69:62:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=39088f10-32bc-4a8f-8fc4-262c5c018e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:5a:75:94:b4:d6:bc:24:7e:74:b0:6b:cb:
                    76:2d:62:b0:b5:1a:ca:c1:6b:1e:54:97:8d:c8:88:
                    fa:c2:96:2e:4e:39:92:01:e3:39:6d:33:c4:1d:ce:
                    e1:57:9e:1e:bb:ec:a4:3d:32:b2:33:8d:57:32:22:
                    9f:70:8d:89:aa:11:82:c2:d0:06:31:1a:26:aa:82:
                    5a:74:85:0b:8b:a0:c8:11:99:15:d0:8b:37:dd:dd:
                    88:13:34:b8:a0:40:83:4e:93:29:51:8b:86:db:5c:
                    1e:5f:06:58:2f:0c:e7:61:10:5a:ff:90:2b:99:a1:
                    7d:7d:9b:68:9d:3d:1e:f1:93:40:1b:1f:11:69:ef:
                    c6:14:c8:2f:96:c0:f5:31:7a:c6:49:c0:1a:8a:8c:
                    53:89:97:f0:61:8e:a2:95:63:21:44:ca:3b:f7:74:
                    98:01:65:d4:6a:52:c0:00:6a:32:49:d2:1e:fc:29:
                    e0:45:a7:0b:60:7a:2b:ce:59:3f:7e:b9:47:db:d3:
                    05:da:b0:77:05:52:ff:73:bc:b3:ae:72:68:16:e8:
                    ab:67:5f:5d:c2:e9:dc:ad:d1:10:e9:b0:4d:77:f6:
                    55:a7:35:91:b4:10:11:81:e3:4a:04:68:5b:a2:60:
                    ee:46:8b:e0:af:3f:59:37:52:bd:93:f2:10:ca:36:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7B:60:B0:A2:31:81:2C:A8:8D:35:2A:E6:4B:0E:A3:4C:74:41:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5f91a-9b1f-3a7f-9770-e7d25feced56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.18.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:d9:5b:3b:3d:82:c7:cd:12:11:cc:1a:31:3f:fb:fe:11:
         df:09:02:f3:68:97:2d:0f:5f:0a:95:5f:42:90:c2:25:62:24:
         50:be:b3:04:d7:9a:5d:15:10:b8:6a:fc:b9:85:28:38:59:e9:
         a3:87:d0:78:ba:08:49:03:d6:d4:f3:18:a1:dd:16:2a:c9:a7:
         f4:71:86:b4:4b:4f:79:3e:81:09:05:ad:bf:a2:43:53:34:06:
         22:d6:de:f0:22:a3:8c:30:91:0f:e3:e6:13:1a:05:d0:c1:7c:
         e9:bf:87:ef:8a:a7:c9:e1:95:21:17:db:5a:ed:4b:d3:71:6f:
         83:ca:22:b3:45:e8:a4:0e:c6:87:01:f1:dd:e3:d1:79:e7:90:
         60:49:b1:06:f9:b8:52:eb:f4:50:19:c0:26:3b:02:f4:42:5c:
         e0:33:24:c9:35:27:d7:5f:90:d0:d1:93:f4:76:05:b0:52:71:
         51:f0:a7:a3:8e:f5:31:ad:12:3b:2d:21:0f:8d:1a:97:be:d6:
         ec:26:22:68:1b:77:c8:44:93:45:a1:6e:9d:84:48:74:3e:42:
         15:10:d8:43:75:41:c5:08:ad:12:c3:d2:cf:f0:ed:c6:53:98:
         81:88:56:84:ca:e5:1f:12:e1:e5:47:8a:c0:03:d2:11:da:52:
         42:c3:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:19:42 2026 by rpki-client