Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19dd5c2-eafe-32ec-9cd2-44d444f7120f.roa
File:                     a19dd5c2-eafe-32ec-9cd2-44d444f7120f.roa (raw, json)
Hash identifier:          awkb3uzZ7A36mOnfCJCyErWF7XTAnF4GB+0uUq01EF8=
Subject key identifier:   BE:FB:E1:19:74:6C:52:2E:21:36:35:EC:8E:4F:C1:8A:47:27:7D:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA71E0860C87F0192F0880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19dd5c2-eafe-32ec-9cd2-44d444f7120f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.96.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:71:e0:86:0c:87:f0:19:2f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=a6164d4e-e928-4f8b-b8b8-88b2cf62ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:5b:de:d8:5a:c9:a1:6d:18:c5:1d:91:e6:
                    8a:3d:02:41:71:35:23:3e:78:95:3c:1f:4f:1b:66:
                    ca:3b:21:15:7c:c2:69:1c:55:84:d7:2a:0b:3c:f0:
                    fb:5a:1e:8c:21:a4:c1:a6:1a:98:47:d0:75:6a:7f:
                    4c:9c:c2:7f:fe:48:fc:8e:57:1b:15:4c:03:64:c0:
                    6c:d0:e3:b6:c5:8c:ce:29:d1:8a:13:27:c7:d6:ad:
                    3f:c9:c4:6f:5d:d4:6d:ba:67:12:5e:6a:49:1f:41:
                    e1:79:1c:d0:4f:a7:3c:a5:a9:ca:fa:89:b7:9a:8a:
                    5f:b5:77:78:8e:72:3b:ba:8a:a9:a6:99:9e:28:bd:
                    a8:05:24:d9:31:91:8a:2f:f3:56:40:a6:be:18:28:
                    ae:a5:df:e0:ad:92:86:45:b8:54:f5:ed:88:b4:f7:
                    5d:e0:b9:39:73:e5:7d:97:a8:95:90:96:e2:2e:4b:
                    94:e9:c9:e0:00:53:4e:a2:2f:ce:5d:a0:30:09:28:
                    4e:d5:0e:c9:8f:8d:fa:07:eb:ab:87:43:c3:88:09:
                    ba:aa:e5:44:ac:38:9d:d0:19:61:1b:9c:63:3d:f1:
                    21:05:28:37:e0:2d:6d:e9:99:6b:95:a2:01:2e:ee:
                    d3:54:40:7a:d4:e9:79:1b:04:b4:a4:fd:29:5d:40:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:E1:19:74:6C:52:2E:21:36:35:EC:8E:4F:C1:8A:47:27:7D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19dd5c2-eafe-32ec-9cd2-44d444f7120f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:a2:5c:26:f6:7c:6e:8e:83:b7:22:5f:74:d5:1d:a2:5f:
         b8:99:94:48:f6:c4:8e:e1:30:9e:77:4c:74:bb:19:67:bd:1c:
         95:65:b8:28:b1:af:5f:fe:88:5a:f3:7e:5e:46:2e:fc:73:76:
         3b:b3:81:b7:08:de:7e:8e:a2:cb:af:43:fd:7f:53:b8:60:35:
         c6:63:f2:b9:3a:b7:d2:03:7f:78:09:d4:f7:b5:d3:c3:9a:cd:
         38:f9:d6:f2:f8:cf:c0:3a:85:29:de:46:db:c4:60:a7:1f:35:
         cc:ef:16:d1:ad:74:7f:00:6b:a4:f2:4b:c0:0e:9e:af:fe:02:
         74:b5:71:16:37:c8:d9:c3:3c:a4:d0:b9:40:1b:43:0c:79:80:
         38:3d:da:ba:21:57:63:e2:fd:0b:a0:97:90:e8:20:95:9a:ad:
         0b:79:6d:c9:e1:0d:4e:0c:a3:4e:85:15:59:4e:83:06:c9:2a:
         eb:cf:fb:9c:cf:1f:9c:d6:4a:5c:ae:f4:98:f1:19:c2:cb:12:
         43:17:7f:5b:53:b5:e8:57:47:46:41:0c:82:bc:10:e0:00:ad:
         36:22:60:41:9e:f6:0d:47:92:16:b6:03:55:f5:f9:33:e3:d1:
         e4:e8:96:a0:48:de:77:ec:4a:fb:2d:1e:40:b3:de:13:24:21:
         26:6a:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:02 2026 by rpki-client