Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51ef4a9-4bfe-312c-8dd8-1e5d7ab130ce.roa
File:                     a51ef4a9-4bfe-312c-8dd8-1e5d7ab130ce.roa (raw, json)
Hash identifier:          gaLZQqj2T1E+pMppijilI508624/jsp1r1+hysPWia0=
Subject key identifier:   6F:3C:BC:6D:80:F6:3D:09:29:28:EC:4D:4B:46:C9:0D:94:B1:88:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBD36CA4DB09B496F0AD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51ef4a9-4bfe-312c-8dd8-1e5d7ab130ce.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        71.233.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:d3:6c:a4:db:09:b4:96:f0:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=127d13c9-eb6b-4423-b86f-19a0ffc9ab36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:39:c4:d5:3e:d8:1e:99:00:c4:34:5c:c8:
                    c7:26:96:27:0f:61:9c:03:93:11:d9:19:32:94:2d:
                    7a:9a:df:21:da:f2:e5:42:74:13:1c:38:01:cb:90:
                    e3:c2:dc:b2:f5:03:91:54:72:c5:f8:5c:1c:f7:47:
                    02:b4:d2:d7:66:f3:77:75:10:77:22:c4:e2:90:24:
                    95:d7:a6:a1:47:58:22:ce:d9:ef:ef:66:89:31:75:
                    68:47:db:c0:36:f1:37:6b:c2:7a:8c:82:ab:8d:3d:
                    b7:26:9f:bf:62:95:b8:89:92:db:83:96:16:16:cf:
                    72:e7:8a:da:96:c1:4b:c9:2d:02:e3:e7:bb:7a:13:
                    6b:c1:3b:cb:16:39:ed:a0:70:35:dc:23:b5:a7:d1:
                    ad:16:e5:36:c7:c8:d4:91:b2:bd:70:f4:8c:76:db:
                    3d:71:b2:6f:c8:81:04:93:58:5b:43:75:93:1d:2c:
                    c9:a1:75:dd:9a:ec:a4:3e:20:7f:7a:d1:73:f9:a3:
                    f2:ef:18:1f:79:6d:b8:f9:29:94:86:3e:19:30:38:
                    60:60:14:e4:bf:f6:ad:22:ad:0b:0f:cb:0f:9e:3a:
                    ac:51:83:2a:14:04:7c:fe:b1:de:b7:f9:83:7b:cb:
                    26:1e:ba:7b:68:da:c5:69:74:3b:9f:98:eb:2a:af:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3C:BC:6D:80:F6:3D:09:29:28:EC:4D:4B:46:C9:0D:94:B1:88:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51ef4a9-4bfe-312c-8dd8-1e5d7ab130ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.233.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:af:29:14:d2:7a:dc:8e:3b:58:52:96:28:fc:4e:b0:56:b6:
         1d:87:7d:f6:67:f8:db:67:77:3c:a5:b6:35:35:d8:6b:8f:88:
         06:15:40:45:c9:89:00:79:b7:6e:94:30:2a:38:76:c5:ad:dd:
         da:26:e9:7d:cf:83:a4:83:a1:44:74:1c:d0:9f:44:75:05:ff:
         62:43:72:4c:6e:af:a2:08:f8:94:8b:c9:b9:d3:21:d1:d6:ee:
         6c:3f:b3:b3:33:34:7b:bf:7e:3a:6c:0a:e2:75:f5:b2:80:c1:
         83:f7:cb:5f:ca:66:3e:ee:b5:d4:6e:43:54:58:72:eb:d0:f4:
         f9:bf:b8:f9:b1:56:c6:71:dd:ce:3b:46:8a:6f:44:0c:b7:b9:
         ea:6d:4e:05:55:65:60:3c:1b:ba:93:48:80:1b:8f:36:b8:a4:
         38:12:d9:30:a7:1f:f2:3c:c5:f9:55:b7:d7:41:02:d1:06:f8:
         11:72:ce:0f:d2:f8:9f:c3:0c:84:d6:d3:fc:2e:a2:ae:26:c5:
         64:0e:6a:4d:38:51:59:4e:94:a0:d3:59:18:88:26:69:69:94:
         34:ca:b0:f5:5c:55:2a:20:8b:5c:05:0d:f1:d1:77:ab:40:aa:
         17:68:07:45:20:06:28:f5:b1:4c:40:74:b8:e2:e1:e3:69:80:
         41:87:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:11 2026 by rpki-client