Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b766888f-5b4e-318a-8bb7-e38a73d6b709.roa
File:                     b766888f-5b4e-318a-8bb7-e38a73d6b709.roa (raw, json)
Hash identifier:          6P5AlSGvHpAAoOc0a9tiRgv2nH6lUbauSBLDEERZbNI=
Subject key identifier:   E9:6B:62:C7:9E:18:A3:D5:BF:24:B1:85:60:0E:9C:78:DD:65:01:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE587C1F3E10760EB7E763A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b766888f-5b4e-318a-8bb7-e38a73d6b709.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.9.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:7c:1f:3e:10:76:0e:b7:e7:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=823fb814-4e55-429c-9471-71661c3e23d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:df:8d:14:f1:a9:12:65:f4:23:0d:48:c8:
                    13:f5:f9:de:20:36:3d:5a:0c:19:d6:75:85:0d:33:
                    d0:95:10:04:bd:ac:96:22:4f:1f:b0:ba:70:be:6c:
                    7a:89:10:21:11:78:b5:83:0e:9a:c7:23:51:92:79:
                    d6:a5:1c:92:b1:70:57:97:69:ce:48:ac:87:92:ee:
                    ce:61:2d:48:69:29:84:9a:28:f2:40:1f:2f:05:23:
                    8f:c3:b5:44:63:70:df:ed:ba:19:3b:a9:05:2c:2f:
                    12:e0:0a:57:44:fd:de:86:dd:6d:70:0c:ef:0f:6c:
                    99:1d:5a:0d:65:90:7a:28:4b:40:6c:3a:9a:22:fa:
                    61:b3:5a:0c:1a:3b:53:46:a3:59:8e:6e:81:13:2a:
                    60:ba:d9:94:1c:db:57:d7:d6:0a:4c:b0:f6:80:b4:
                    94:2f:ee:70:f0:1b:93:c0:06:3f:99:51:82:fb:b4:
                    7c:b4:7c:7a:03:19:14:fa:d6:36:8a:f4:93:ef:67:
                    30:4c:d4:ab:61:3a:1d:84:78:fc:57:95:3f:f7:83:
                    0d:0f:7f:7a:0f:c6:7e:ca:a2:06:b6:0f:d6:4a:12:
                    b3:cd:c5:a3:ee:90:f2:02:ab:24:19:ea:df:9e:08:
                    04:03:3f:ba:b6:9f:aa:4d:d6:14:d3:72:46:b9:15:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:62:C7:9E:18:A3:D5:BF:24:B1:85:60:0E:9C:78:DD:65:01:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b766888f-5b4e-318a-8bb7-e38a73d6b709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.9.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:46:ab:9d:44:6e:b2:16:f7:36:80:ec:e3:8d:95:92:40:
         bf:c0:11:69:56:72:89:00:15:33:7f:63:01:2f:e9:fe:18:1d:
         30:1b:af:b1:fd:50:c6:ec:fd:70:b2:34:a1:09:21:a0:e3:7c:
         33:a9:ed:9d:93:22:e7:fd:49:46:bb:e8:5a:49:48:f1:9d:f9:
         3c:f2:5d:87:2a:0d:d2:12:33:8a:b7:b9:90:7a:93:06:15:77:
         c0:65:5a:89:6c:dd:73:26:ae:be:0e:48:f5:a3:d4:fb:7d:8f:
         90:f7:06:35:b0:0d:95:5f:30:f8:69:36:44:13:32:fb:62:10:
         11:2c:74:a6:db:2e:80:b6:71:1a:65:93:0b:77:c7:4e:c4:b9:
         68:28:90:e0:81:ac:8f:06:63:78:21:b3:1c:6a:5a:d2:b9:2b:
         70:8d:ab:a2:2e:01:5d:d9:f4:40:08:2b:3c:54:f6:47:37:a1:
         4b:5a:39:11:7a:30:f8:89:e5:ea:75:2a:06:08:44:eb:6b:a9:
         1c:21:b7:44:70:93:7c:d3:15:38:86:9d:14:88:e8:c2:08:1f:
         98:3c:de:94:da:49:b7:65:37:65:e8:48:1d:64:12:04:79:73:
         67:da:a8:af:16:8a:06:3a:c3:9f:b8:97:60:0f:67:96:92:48:
         be:78:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:31 2026 by rpki-client