Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afda43ac-1b55-3e41-81b0-2ffde7fe9f45.roa
File:                     afda43ac-1b55-3e41-81b0-2ffde7fe9f45.roa (raw, json)
Hash identifier:          xjgsttoRqtXfd9VZ5v+XuY2liBU6HsSsN+hQOiXcx3E=
Subject key identifier:   03:31:53:4F:DB:FF:68:58:AB:57:0D:7E:02:70:3C:CE:65:3D:EC:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81002C519D94B98005D62E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afda43ac-1b55-3e41-81b0-2ffde7fe9f45.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        73.54.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:2c:51:9d:94:b9:80:05:d6:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=5c164267-7668-4219-9455-62acea5dbd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:80:07:45:08:1d:91:df:18:02:d9:0e:c6:
                    9c:d9:d6:48:58:bc:2e:c0:f8:83:cc:38:f4:d3:05:
                    c0:65:66:42:6d:ee:66:20:85:e3:d8:10:38:bf:81:
                    1a:21:12:1b:c3:de:43:d2:d0:3a:60:b1:d6:69:26:
                    33:c4:f7:f6:0f:5e:40:bb:88:de:ba:f7:4c:78:c6:
                    64:7b:47:bb:c0:cc:ff:39:de:53:17:f9:e3:28:f1:
                    38:a9:51:e9:cf:26:78:c8:a6:89:3a:0c:d7:2b:e6:
                    c3:04:45:b7:b4:40:8a:0a:9a:fd:de:6b:0e:b2:d1:
                    32:97:78:53:0a:8a:23:d8:b9:12:ef:16:8d:1c:52:
                    98:59:4b:7c:d3:1e:56:1a:4b:7e:c6:b0:05:0f:8d:
                    2b:ff:93:cf:1c:55:49:71:36:2c:30:e5:e5:64:a3:
                    0a:2c:85:bc:2e:db:44:84:69:fd:56:c2:ed:66:23:
                    9b:6a:e2:e0:c3:ae:89:fd:f5:fb:fb:fa:97:91:82:
                    8c:3a:fd:38:66:17:a0:7c:28:f6:b1:ce:20:4a:bb:
                    9a:97:04:50:1d:fb:1d:0d:e5:ca:f8:65:ab:d5:68:
                    49:a6:c2:22:5a:68:26:de:68:b5:3c:7d:15:a8:c5:
                    8d:fc:f8:c4:8c:60:d0:49:c2:4b:21:38:1b:a4:82:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:31:53:4F:DB:FF:68:58:AB:57:0D:7E:02:70:3C:CE:65:3D:EC:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afda43ac-1b55-3e41-81b0-2ffde7fe9f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.54.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:18:a9:8e:cd:cb:ee:ac:98:27:97:e9:7e:97:d1:2c:1c:bc:
         22:ec:7f:0e:93:7c:27:fc:f5:18:09:0c:08:ca:d6:89:3b:d9:
         d7:22:ba:5c:26:f8:83:e9:08:04:02:a4:83:9d:ec:2c:ad:c5:
         93:7c:0d:cf:6f:32:ba:db:87:55:f8:46:03:92:80:d9:c1:8c:
         54:57:fb:f1:94:fa:f6:d9:cd:57:c6:a3:dd:3f:4c:41:41:99:
         d1:c3:7a:03:bf:fb:41:c1:12:18:2e:34:74:dc:67:8b:fa:1f:
         38:36:18:f2:8e:39:da:c9:af:a7:df:48:9c:1d:14:0f:1e:19:
         df:1e:4f:da:93:02:06:16:a8:33:60:65:ea:7a:8e:c2:b6:28:
         e8:2d:e8:5f:d2:2c:85:64:56:e9:16:90:b9:bb:91:b0:13:70:
         a4:1f:22:b8:10:e5:96:d7:e0:90:31:24:8a:b3:85:8b:3a:74:
         5d:0c:a8:8a:cc:8a:81:e3:a3:8f:35:c4:80:21:bc:6e:91:d0:
         b6:cb:fa:41:ad:54:d5:96:4d:6b:a5:ab:4b:6a:33:a7:a5:a7:
         f7:79:49:9d:20:a5:1c:14:be:06:3e:f8:ab:ff:6f:e7:c1:1c:
         f4:0a:4b:17:7c:58:c8:73:88:4b:68:12:2c:79:e8:93:82:11:
         87:53:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:45 2026 by rpki-client