Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cedafc5-f200-3e33-ae9a-3dc1ebe9a824.roa
File:                     9cedafc5-f200-3e33-ae9a-3dc1ebe9a824.roa (raw, json)
Hash identifier:          aY6CDKDchS1esw6hA1P9U80v1+r/LYK0bnCO6MZQtgo=
Subject key identifier:   C1:11:7B:AE:39:1F:C8:F0:50:63:C0:7B:FC:40:51:DB:99:75:33:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAB686EFBFDAFE708E1880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cedafc5-f200-3e33-ae9a-3dc1ebe9a824.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.159.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:b6:86:ef:bf:da:fe:70:8e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=919b3f8a-10a1-4d07-84f5-d1113aaacfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:01:7b:f7:21:2e:be:20:7e:5b:71:08:c4:
                    ab:b5:3e:c2:a1:20:4c:1e:90:06:23:06:c2:1b:4e:
                    1e:19:c3:be:ed:a0:37:1d:35:36:4a:f1:ba:8b:fd:
                    42:2a:8f:98:64:fa:cd:60:aa:fe:a8:f9:2b:36:26:
                    45:95:ec:68:b8:ac:24:46:9f:50:09:e5:e4:a6:aa:
                    99:16:2e:54:87:9a:f7:90:b1:98:e6:2b:aa:14:8c:
                    10:bd:a2:9c:58:f0:39:5c:8a:c4:e9:58:2e:d4:b9:
                    b1:ab:f0:e4:ef:cb:2f:9c:40:f3:e4:61:fb:de:ad:
                    3c:0e:0d:ae:18:16:b5:f1:89:49:f9:4c:fe:b7:37:
                    f5:17:d4:09:5e:6b:4b:5e:20:95:c9:8b:3c:b7:e0:
                    9f:61:b5:ed:a8:46:b3:33:a9:02:f9:d3:9e:79:cf:
                    de:25:42:d0:4e:11:75:36:ac:65:58:97:9c:6e:f8:
                    db:68:13:a3:e5:59:6b:e1:d4:ca:d3:cb:be:c9:15:
                    12:9a:ab:7a:e8:0e:78:cc:62:74:f2:2b:83:fa:4b:
                    c1:ca:69:76:3a:ea:1e:48:78:36:1a:fc:26:93:7b:
                    c2:96:ec:db:db:a9:cc:89:58:b3:ae:f3:82:ae:81:
                    4e:d9:5b:f0:fb:aa:7f:24:0c:24:3a:86:fb:3f:a5:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:7B:AE:39:1F:C8:F0:50:63:C0:7B:FC:40:51:DB:99:75:33:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cedafc5-f200-3e33-ae9a-3dc1ebe9a824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.159.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:5b:e9:31:ee:ec:c1:0c:8e:a4:0a:5a:c8:55:fb:6a:54:
         6b:72:46:08:5d:72:fd:d4:12:44:34:cb:fb:b0:f9:46:02:93:
         ef:35:c5:ad:66:0b:88:f3:44:db:6f:64:50:0b:13:90:42:5e:
         1d:66:21:d5:fd:59:ec:04:82:78:64:f7:0f:78:dc:f2:41:1c:
         fb:00:4e:0f:b1:72:e1:2d:47:e5:b0:05:4b:35:c4:99:0b:4e:
         c0:ae:8c:5a:84:4b:06:b4:0b:56:e4:eb:be:b2:c4:31:d7:80:
         7c:b8:a2:98:89:03:4a:9a:52:80:35:05:05:81:9f:56:53:7b:
         8a:82:be:3e:c0:1a:4c:88:1d:54:0e:88:68:30:b7:42:4e:38:
         3d:73:ea:c0:1d:8d:59:f4:ec:ed:92:99:b6:42:9e:40:dc:73:
         cf:fc:9f:86:24:fe:2e:5b:ee:05:bc:b6:ed:f8:26:a2:c7:dd:
         e5:26:67:7e:4b:dd:40:83:6f:37:7d:fb:65:9c:91:8c:a5:14:
         2d:47:8d:3b:d5:fb:a6:bd:f3:a1:1f:8b:25:df:bd:ac:36:14:
         da:d8:5f:18:80:7d:e2:82:f4:a3:8f:de:02:ca:04:b7:0f:ce:
         ce:4d:8c:32:c7:b8:18:6c:5e:1f:2c:0e:9f:d3:88:5a:15:ff:
         ab:c4:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:55 2026 by rpki-client