Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c04f46c3-3661-3300-9309-c908a98082da.roa
File:                     c04f46c3-3661-3300-9309-c908a98082da.roa (raw, json)
Hash identifier:          EPP7gn0rfreXaPLglWsRfDIj4i8wd1baOybZql9I9Sg=
Subject key identifier:   36:CC:BD:12:2E:0F:F6:3D:F5:DC:28:63:F9:6B:A7:3A:AB:A2:C5:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE585458FC5720A765A8A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c04f46c3-3661-3300-9309-c908a98082da.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.22.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:54:58:fc:57:20:a7:65:a8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d0079067-66b0-4edc-9d46-8ac99be6564b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:ae:ea:67:b4:87:77:2a:a2:58:86:d1:fd:
                    df:29:e4:03:08:73:a6:d1:9b:aa:4f:3d:6e:da:3f:
                    fb:58:34:32:a2:c5:6f:ed:09:1b:80:71:36:7d:1d:
                    36:b2:ba:18:1c:fb:a0:c7:af:0e:62:58:43:0d:47:
                    a0:24:d9:24:af:a4:9d:e0:8a:9a:e6:66:3c:ef:a0:
                    da:d9:a0:ac:3d:c6:bf:af:09:0d:57:63:58:a9:a1:
                    86:40:b1:0b:7b:44:66:ae:a6:4a:0b:52:36:e7:0d:
                    44:38:18:13:c7:3b:22:59:10:ea:e3:e7:56:14:31:
                    f0:a9:94:03:f7:41:40:08:80:d7:05:cf:48:73:0b:
                    b2:4a:6a:b8:97:f8:2e:81:ef:75:07:46:68:7f:17:
                    bd:1d:62:dc:6c:76:70:e8:c5:ab:4c:76:06:90:2c:
                    f3:d0:12:d5:3d:a2:3b:f3:f1:62:90:07:22:28:e6:
                    0a:8c:8a:75:bf:da:2c:44:2b:96:2b:44:15:84:bf:
                    8b:0d:46:1b:69:82:ba:2f:e2:67:30:7a:ba:28:77:
                    94:aa:b7:0b:8b:ee:40:96:29:6f:15:a2:4b:7c:0e:
                    9c:2a:cb:72:36:09:2f:4d:db:49:11:63:c4:a8:b6:
                    93:a5:54:0a:86:df:df:2e:4a:b8:d6:2b:3e:64:71:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:BD:12:2E:0F:F6:3D:F5:DC:28:63:F9:6B:A7:3A:AB:A2:C5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c04f46c3-3661-3300-9309-c908a98082da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:b8:a9:ac:a3:4c:d3:a6:ff:62:28:32:35:39:7e:49:36:
         ee:b5:62:e1:89:c3:6d:ed:51:14:06:e2:7e:f2:20:77:37:97:
         35:95:4d:4d:7b:bf:bc:37:c5:4e:c8:58:66:9e:d0:b7:5b:a3:
         47:71:c5:42:68:88:d2:75:7f:3a:14:29:ef:69:7e:ff:c3:8b:
         f8:5d:36:b4:90:ce:ca:c8:52:e6:34:86:5e:b8:d7:e4:bd:9e:
         10:4e:a5:49:ec:db:da:83:45:bc:3b:ad:37:ca:82:40:54:2f:
         c8:b1:2d:a5:66:e5:bc:a8:a4:0e:39:b7:d4:8c:32:62:e2:f2:
         9b:e5:24:14:98:4a:c0:bd:a8:b9:5b:d4:e4:b9:96:ae:f4:1b:
         d4:83:1e:a3:21:1d:ba:61:c4:cc:3a:cd:90:af:16:9d:32:35:
         5c:df:97:f7:91:27:7c:60:23:51:b6:5c:45:43:bc:78:71:48:
         38:5c:8c:33:69:fe:28:3d:0b:78:97:34:cd:f9:62:92:e6:49:
         1d:12:f8:0a:9d:26:3c:f8:25:a1:37:8d:69:32:98:35:23:78:
         ea:c0:24:af:92:97:bc:76:e0:c2:ee:3b:2a:7e:5e:3f:b1:bc:
         49:0e:0c:ba:14:76:87:0c:ba:d1:8f:d9:d4:66:d3:c3:73:9b:
         c4:13:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:51 2026 by rpki-client