Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f993fda-69fd-34af-accf-031f8c056488.roa
File:                     9f993fda-69fd-34af-accf-031f8c056488.roa (raw, json)
Hash identifier:          +xTulANH9ua08UhJnMMmg7Sj4hDTY+qUAMvDK7zKTqQ=
Subject key identifier:   8D:78:6C:CF:83:96:53:84:53:9F:EA:33:0C:78:E2:AE:71:FF:4E:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BABBF936B77ACC52090280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f993fda-69fd-34af-accf-031f8c056488.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.167.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:bb:f9:36:b7:7a:cc:52:09:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=a325dfb5-dab8-4fef-8038-ba60689f17a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:59:48:6c:56:6f:a5:56:4c:e2:46:0e:96:
                    21:fb:b5:b1:9f:82:9a:b1:74:a0:26:9a:10:d2:15:
                    97:20:22:17:4c:b0:64:6a:dd:ed:19:e1:7e:b3:a2:
                    7b:bd:7f:99:ff:8a:68:c9:c2:7d:8a:54:8a:ed:84:
                    ce:0f:e1:51:c0:b8:94:98:68:8c:17:f2:6c:74:5e:
                    79:eb:a0:e9:dc:f0:21:d5:1d:aa:ce:4b:00:9f:ea:
                    e8:fa:d1:f3:08:5e:dd:a0:60:8a:9b:24:25:f1:96:
                    43:46:0c:4c:be:91:98:ae:77:53:c5:65:9c:cf:da:
                    d0:45:48:56:51:ae:d2:bc:a3:30:1a:f0:38:54:6c:
                    1c:66:5b:dd:1d:c1:24:24:cc:34:2d:2d:9d:a1:b8:
                    fc:70:ac:f6:4b:53:ce:03:f4:6a:1b:67:16:54:bc:
                    be:e3:01:27:fb:f9:46:a7:ea:65:8f:0d:fe:95:e4:
                    83:28:22:c9:25:03:7f:dd:68:11:e7:1f:77:69:e7:
                    f4:37:56:51:de:1f:69:aa:d0:65:be:89:85:16:6f:
                    25:e8:7a:a8:8f:bb:f5:76:06:03:a2:7a:fd:34:d8:
                    04:c6:ff:f5:2c:2e:49:29:a0:b8:66:ad:88:a1:0a:
                    27:e3:06:12:79:46:6f:d5:69:be:d4:03:bc:d7:81:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:78:6C:CF:83:96:53:84:53:9F:EA:33:0C:78:E2:AE:71:FF:4E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f993fda-69fd-34af-accf-031f8c056488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:58:5e:f4:95:e0:d6:78:88:78:bb:03:73:7b:a6:b5:81:37:
         93:38:5d:27:e7:6b:79:92:75:ee:fc:2c:fd:43:24:fb:4d:10:
         79:db:02:42:89:3c:f1:2b:c9:cc:75:e6:7e:e7:94:dd:1b:a2:
         0d:cd:63:a2:b7:8c:d5:58:87:c0:b9:fa:3e:1a:e4:0d:a7:d4:
         be:4b:86:f3:0a:03:70:74:53:8f:07:0a:97:45:63:03:f9:10:
         d8:1d:ee:9c:dc:47:a0:7d:6a:9a:e4:7f:49:dd:f6:7e:90:5d:
         d2:fc:f3:67:71:1c:e0:ba:e6:54:51:12:21:36:82:f3:23:14:
         ec:f9:89:15:f9:4e:e1:42:26:1c:0a:06:a7:6c:94:d4:7f:29:
         fb:34:47:c1:5d:48:d1:74:20:01:23:2c:97:59:00:8c:78:62:
         44:56:6f:80:ec:27:2b:67:dc:7c:ca:2c:75:9d:ad:13:ba:46:
         ed:5e:de:be:44:d6:3a:fa:88:3b:d2:d5:b3:08:d1:43:41:9e:
         37:bf:5b:72:2b:0f:73:06:ae:ec:2b:72:94:06:4b:93:ac:71:
         93:9e:8f:7c:a9:27:ad:df:5d:60:79:ec:fb:00:df:82:9a:3c:
         a0:e7:17:e6:b6:9c:f1:53:45:13:d7:a9:ff:bd:b7:5c:26:90:
         71:3b:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:43 2026 by rpki-client