Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03720b1-31a7-357c-8774-580e446483d0.roa
File:                     a03720b1-31a7-357c-8774-580e446483d0.roa (raw, json)
Hash identifier:          4d3iZgO9BOlzwlMScX+x0AWsq00T2d0q8tP5vlni5Ho=
Subject key identifier:   FD:03:3C:9C:53:33:79:5D:8A:00:89:A1:37:CF:6F:54:C5:E6:78:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5784D88085113714782180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03720b1-31a7-357c-8774-580e446483d0.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.178.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:84:d8:80:85:11:37:14:78:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=510056c1-b350-4e5f-a64a-f70047da054a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:20:f2:a7:67:2b:d7:11:fd:db:74:af:ad:
                    2a:3e:af:06:99:06:c1:51:0a:89:4d:6b:b0:01:4f:
                    17:84:f5:76:79:6f:2e:c8:ab:c4:33:47:f2:a0:b9:
                    a3:89:eb:60:01:09:72:9e:ac:0c:d6:09:89:45:bb:
                    bc:5b:ad:5b:79:46:a8:ca:fb:4a:ad:57:5c:cb:bb:
                    64:cf:48:31:c2:01:a5:f8:92:b3:d1:8b:7c:91:0f:
                    36:81:6d:50:95:89:14:a6:e0:cc:bf:28:fe:e6:2a:
                    a8:92:22:45:dd:a1:eb:a1:fd:01:71:53:85:60:7b:
                    14:fb:08:00:90:8b:ef:46:2a:b3:dc:b8:bd:e6:06:
                    e2:99:82:ae:43:cf:bf:0a:30:95:11:ef:10:bd:83:
                    b5:49:46:05:15:f7:f0:80:41:41:92:95:9d:ec:19:
                    25:8d:7b:25:06:f0:da:c9:e3:ef:cb:a7:32:a4:58:
                    1a:cd:f6:d8:b3:bf:b6:15:a4:38:06:77:a8:6d:e9:
                    05:92:fc:67:1c:91:fe:8b:53:a7:8f:52:00:c1:40:
                    a9:fe:ff:3b:b8:f7:fa:d8:d2:e6:35:64:07:62:58:
                    13:63:52:e0:34:da:b4:40:c8:af:55:5e:9e:4c:6b:
                    c1:ea:60:53:56:c3:6d:d8:50:c7:88:f2:e9:aa:3f:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:3C:9C:53:33:79:5D:8A:00:89:A1:37:CF:6F:54:C5:E6:78:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a03720b1-31a7-357c-8774-580e446483d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.178.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:49:a8:e6:bc:11:32:64:5a:2e:76:ab:47:ef:f8:77:f5:
         b6:83:7d:30:84:21:48:b6:2e:42:1c:6a:86:bc:88:32:53:64:
         cb:9b:06:29:f0:cc:27:7c:31:29:f5:f1:cd:42:47:1e:f0:c8:
         e9:d7:39:15:f5:6c:e7:81:b0:5e:30:71:65:38:f0:18:6f:91:
         13:44:cd:cd:12:df:7b:93:be:27:1f:67:67:d2:87:02:40:31:
         3d:d2:c8:29:5c:33:d9:dd:4b:8c:fd:54:f5:09:ea:e5:c6:c5:
         06:40:ea:3d:06:cb:63:84:b8:32:14:29:0d:b4:48:31:2e:97:
         eb:ec:70:58:0a:14:ba:a2:b6:98:02:71:c2:40:8b:76:e6:4a:
         db:b4:14:6a:97:66:ad:a1:80:b6:fa:96:5f:98:c8:38:82:b5:
         01:e3:49:95:28:3e:be:c0:bb:f0:96:0a:24:01:eb:63:22:bf:
         d6:78:b8:56:12:e7:62:de:b5:f6:e2:1a:69:84:cc:51:62:b5:
         23:fe:d8:04:28:5b:1f:cb:23:a1:b3:6b:bc:20:aa:5d:a8:72:
         ce:cc:f0:c6:ac:a2:2c:aa:61:b2:bd:3e:09:26:b3:6a:b9:56:
         45:a9:10:25:9c:a3:a3:ff:00:66:75:84:3b:c7:6a:05:8d:ed:
         46:b5:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:02 2026 by rpki-client