Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6e8e6c1-6b64-38c7-89ab-3cb49b3c13cc.roa
File:                     b6e8e6c1-6b64-38c7-89ab-3cb49b3c13cc.roa (raw, json)
Hash identifier:          eoQLcMVW16JYOyJ/VVRibSdhNX1T78cvH7d5zA1FLQc=
Subject key identifier:   F2:E9:B3:90:D1:DA:33:17:07:52:71:83:04:E9:EF:3E:7A:69:EF:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBE6F72E8A5F2B26FDF300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6e8e6c1-6b64-38c7-89ab-3cb49b3c13cc.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.159.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:e6:f7:2e:8a:5f:2b:26:fd:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=f9e69462-cb92-4375-9c84-039c7ac09340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:d1:fb:0a:76:77:4b:e3:e7:b2:50:56:b2:
                    08:be:52:98:1e:f3:04:94:8c:08:ac:a1:d0:03:c7:
                    39:16:55:0f:04:df:ed:7f:23:3f:b1:ad:35:20:83:
                    ae:17:9b:63:3c:a8:54:ac:9b:5a:29:b9:0d:eb:c3:
                    85:4a:57:86:05:ad:98:1c:b0:83:7a:74:0e:53:6b:
                    d7:84:de:4d:10:0d:d4:b5:b4:00:94:32:73:40:b6:
                    c7:62:0f:99:0d:ae:78:a7:42:fa:61:19:f7:29:32:
                    64:a1:bd:6d:d6:4f:f9:0c:56:0f:67:94:a9:62:1b:
                    40:3f:be:2e:2e:f0:b1:a0:ec:ad:1a:8f:89:fa:e7:
                    62:87:6b:ff:17:93:5b:57:99:79:eb:a6:d3:83:ca:
                    de:c5:45:a9:70:b3:fe:72:3e:89:17:82:76:c4:4e:
                    db:1a:27:d8:44:c2:d9:4b:6c:15:53:e9:92:88:a2:
                    34:64:f1:e8:24:61:63:75:fc:fa:80:1d:5e:e4:18:
                    64:94:d4:53:77:cb:89:3f:4f:aa:3e:46:fa:4e:0e:
                    a7:a5:db:db:ba:64:98:62:a2:16:fb:a7:dd:5a:59:
                    25:ca:e3:51:99:6b:0e:75:68:80:af:89:1a:95:ee:
                    6f:88:e4:9c:a2:c3:78:d3:80:85:6e:5e:dd:6e:7b:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:B3:90:D1:DA:33:17:07:52:71:83:04:E9:EF:3E:7A:69:EF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6e8e6c1-6b64-38c7-89ab-3cb49b3c13cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.159.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:df:7c:69:77:c4:9b:74:b3:f4:f3:e7:a2:21:7d:66:b9:ad:
         8c:32:12:61:ca:e9:25:6f:bf:e6:00:ff:bd:87:42:aa:d6:70:
         57:7b:3c:1f:7a:97:33:0f:07:6f:41:5d:a1:a0:30:e9:47:b6:
         eb:fa:3c:e2:ed:be:0e:7f:c5:82:c5:1c:d5:bf:73:89:39:1a:
         67:a9:85:16:c8:92:80:38:7c:0b:18:7c:9d:56:83:c3:7e:5e:
         9b:84:e1:7b:d1:02:83:d9:85:a5:b9:bf:71:9b:ba:ec:08:9f:
         87:6b:77:db:55:33:e7:1f:2b:3b:b3:52:77:45:9f:ac:00:e6:
         3d:e7:26:c1:a2:9a:f2:e6:c7:6a:8f:73:10:f7:12:e0:2d:29:
         cb:7f:94:f7:8d:1a:2f:ed:4c:69:28:45:d1:16:e9:11:76:83:
         56:b8:d0:e9:2a:f0:23:f1:c1:7a:68:ee:50:42:b4:48:3c:ba:
         ef:80:2c:cb:e9:f3:21:9e:84:af:28:cb:2f:3c:3c:ec:a1:38:
         19:94:1d:ac:3f:2c:80:c1:d7:01:37:1e:8b:42:99:c2:af:c3:
         57:06:44:90:fe:c5:cd:e2:7b:9b:c1:0d:a8:f7:54:25:88:ea:
         9e:83:17:fc:44:64:dc:b7:c9:11:42:36:26:eb:67:72:40:7b:
         b3:4e:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:21 2026 by rpki-client