Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb6f086-fe1c-353e-ae63-748b02ce329a.roa
File:                     adb6f086-fe1c-353e-ae63-748b02ce329a.roa (raw, json)
Hash identifier:          jXIWAGUfa0EBIP0fUWZQ8hHnTnMELP01D5l0VKTBTWI=
Subject key identifier:   48:79:C9:63:34:CC:F1:B1:5F:0B:7F:7F:99:34:73:76:0D:DA:E8:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5843F85892220AB8A56A20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb6f086-fe1c-353e-ae63-748b02ce329a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.208.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:43:f8:58:92:22:0a:b8:a5:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=8096ba05-bf2d-4ced-a5f9-c3170140af98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:88:a8:2e:80:c7:be:45:13:7f:73:28:33:
                    70:7e:73:46:0d:c9:8d:c6:14:c0:96:c7:aa:cc:6c:
                    5b:6e:8a:fd:5a:c1:9c:bd:f2:e8:8b:40:da:bb:75:
                    b4:16:97:2a:ae:d4:f4:56:a4:e6:e5:0d:e0:1f:fc:
                    bd:45:fc:b7:98:be:f0:97:7e:a0:c0:1a:6d:ea:07:
                    a1:69:b6:97:c5:d7:e3:a7:47:3d:4e:38:27:99:fa:
                    11:45:b1:e5:58:06:3f:5a:61:15:7f:c1:ab:c5:20:
                    be:31:50:f4:37:01:25:f2:10:5e:8a:a2:35:3c:f2:
                    46:0b:37:80:81:95:23:13:ac:3e:8d:6e:43:50:3a:
                    f4:2b:10:19:1c:4c:22:fa:1e:ee:53:78:64:b2:11:
                    48:7a:a1:d5:46:86:e8:0a:3c:34:71:1a:a8:93:cf:
                    ba:a5:c3:5c:51:89:a5:cb:71:75:7d:ff:f4:b1:fd:
                    98:4a:b0:f3:df:c7:1f:1a:0f:59:93:e8:b2:ed:f0:
                    62:e7:68:ec:b9:7d:2f:c9:82:c1:0d:44:38:ff:6f:
                    1d:4d:49:8a:b2:31:fe:f7:d3:e7:34:40:ea:59:aa:
                    da:50:58:a9:91:a0:78:ef:65:d5:a0:c8:39:12:3b:
                    a7:c8:0c:4e:87:b8:29:5f:95:64:57:24:08:86:97:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:C9:63:34:CC:F1:B1:5F:0B:7F:7F:99:34:73:76:0D:DA:E8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/adb6f086-fe1c-353e-ae63-748b02ce329a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.208.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:56:c2:73:b8:ec:78:6c:4c:06:67:46:6f:cf:88:10:72:
         18:f7:b5:41:41:9b:66:60:4e:5f:eb:79:c7:f9:ec:19:d0:21:
         5f:9e:eb:ff:73:b8:80:f0:37:4a:e4:a1:d4:cf:39:14:6c:d3:
         47:73:4e:5c:82:c4:e0:ee:c7:37:73:ef:8c:05:39:7a:b7:64:
         27:af:95:51:bb:c7:f6:ba:53:4c:61:ee:10:66:02:5d:3c:f2:
         24:21:b5:35:dc:d2:79:70:d5:d3:f4:d6:90:16:7e:cb:f0:b1:
         1f:e2:ae:e0:29:9d:b9:d8:5d:ea:74:d1:4c:ed:6c:45:92:85:
         de:54:0e:54:b9:db:db:ac:ea:5a:35:57:f8:58:fa:8a:33:3b:
         7c:a9:42:7c:fd:43:f2:96:4c:d9:de:8e:21:32:88:a5:16:70:
         fb:32:6e:21:89:b1:c3:4f:67:b8:2c:e8:af:5d:24:a8:6e:74:
         56:0e:cb:f5:46:09:7e:ef:1f:28:41:3c:d3:d2:2a:18:cf:b3:
         b2:96:f4:46:5b:63:27:83:72:27:22:70:6f:be:b3:a3:99:ff:
         4e:97:c9:7c:62:96:39:ec:57:24:81:18:70:b3:a6:7f:e4:c2:
         f0:95:62:cd:dc:8b:f7:49:49:7b:b2:8c:02:c0:fb:70:d9:1a:
         0b:16:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:15 2026 by rpki-client