Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1822454-9ed9-369d-8655-38bc54921ae5.roa
File:                     b1822454-9ed9-369d-8655-38bc54921ae5.roa (raw, json)
Hash identifier:          crVRqydjJR9udUHuqRELWtOBgT+/hTo4+IdcylWB4uQ=
Subject key identifier:   2B:75:DC:17:28:57:01:F2:3F:45:C6:A1:68:FE:E6:0C:71:88:16:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C956CA6245FD3575E8500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1822454-9ed9-369d-8655-38bc54921ae5.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.8.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:95:6c:a6:24:5f:d3:57:5e:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=011f171b-c3e5-4fe4-a9d2-2afba081850b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:22:20:b9:c0:6d:5a:06:4b:fd:58:07:d5:
                    b6:67:f6:d5:13:05:b5:40:1f:34:38:4e:c9:c0:06:
                    e3:ed:1c:c7:72:00:60:50:94:73:b4:ca:38:64:e2:
                    d5:fb:25:23:d4:49:a2:21:6a:0e:c7:6f:08:98:55:
                    cf:32:a6:01:fc:cc:20:56:24:20:5f:cf:74:80:17:
                    2a:30:e7:f8:b2:01:4b:08:f1:a3:11:6a:98:22:4e:
                    43:e7:fd:40:c2:c0:85:f8:7d:25:df:f6:62:77:ad:
                    a7:54:69:a0:88:79:81:34:6f:7a:d4:68:35:9b:81:
                    fa:9d:a6:cc:ca:9d:a1:a5:14:43:a3:a1:50:c2:42:
                    86:e7:2b:a3:57:21:b9:67:dd:99:4e:a9:89:18:8a:
                    70:82:dc:2a:35:24:b4:a5:13:20:6a:d0:7a:08:25:
                    23:ad:6d:73:ad:bd:d7:f5:ce:fe:08:30:51:8f:de:
                    b4:b0:25:bb:6c:d7:02:11:51:ee:5c:62:23:57:4f:
                    fb:86:87:5a:a0:f6:af:4f:b9:bb:c0:10:e9:e6:04:
                    6c:14:e8:76:f4:93:28:aa:30:c7:c4:4d:50:be:05:
                    74:64:85:aa:7a:b3:c6:1c:ed:37:ae:b0:d6:a4:02:
                    7a:42:0d:b3:5c:67:67:2c:39:6e:a8:1f:c8:bd:a1:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:75:DC:17:28:57:01:F2:3F:45:C6:A1:68:FE:E6:0C:71:88:16:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1822454-9ed9-369d-8655-38bc54921ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:0a:4d:cd:1a:57:4f:84:ad:be:76:af:65:cc:d7:1a:5d:62:
         73:36:b0:bd:a7:1e:9a:0c:f2:d0:30:bd:7f:29:45:47:b8:76:
         f3:0a:1a:9d:59:56:76:37:13:40:4c:16:c9:81:14:eb:3a:a5:
         ff:b4:5c:99:82:6e:fb:2d:99:28:9b:eb:5e:94:6a:b0:2c:4f:
         e4:ff:b4:28:34:2a:12:bb:af:3a:b0:93:78:50:98:16:69:08:
         ff:36:dd:02:7d:09:bb:47:fe:09:b0:7b:6e:5d:05:96:a6:77:
         30:ac:f9:84:98:63:ff:54:d5:9c:4c:25:3a:f1:53:9f:e3:50:
         6c:1e:71:9b:dd:0e:8c:4d:39:33:1a:b6:5d:19:93:f8:18:1d:
         cc:05:b5:13:f2:d7:b5:0d:65:ae:8c:b3:0c:c1:de:ec:56:63:
         90:4a:b0:59:be:61:1e:f9:f3:d9:b3:da:4d:32:73:5f:2a:c7:
         6e:4f:9a:60:09:82:66:e5:a9:54:93:d8:cc:1c:2b:68:48:3e:
         a9:7e:05:c2:06:9e:d9:43:e7:7d:31:27:21:35:f9:c7:ad:d2:
         46:b6:21:e7:62:81:c7:bd:35:49:9d:e2:15:cd:75:7e:53:99:
         92:c3:f3:6c:d7:21:1e:ae:eb:f9:51:cf:d6:a3:91:9d:dd:87:
         3c:72:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:42 2026 by rpki-client