Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0627473-2d8c-3158-b2c4-199c79764621.roa
File:                     c0627473-2d8c-3158-b2c4-199c79764621.roa (raw, json)
Hash identifier:          nB2z7SJDAccE0y4oigAvUMIFYwbDT6QA23j2sMuGDuk=
Subject key identifier:   C1:AA:02:AF:E3:7A:6E:A3:D9:A2:7F:FE:74:9E:E4:F7:09:DE:56:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C2F7930E6AE2DDF2E6100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0627473-2d8c-3158-b2c4-199c79764621.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.22.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:2f:79:30:e6:ae:2d:df:2e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=143eb23f-09b2-4824-8c04-b4076eec0fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:ea:a1:a6:02:e3:9f:ce:39:e8:c3:07:8c:
                    a7:96:94:03:ff:e1:37:f2:70:0f:c6:0d:ab:f0:ab:
                    5c:6b:78:50:37:4b:ac:ee:02:00:9e:54:a3:95:f3:
                    04:97:ee:9e:4f:d4:f2:1c:f4:89:dc:1b:a8:bf:82:
                    a1:df:9d:4e:b2:3d:55:33:77:31:18:42:ac:b5:9c:
                    1c:42:01:26:0d:55:f3:ce:1e:b5:7f:6d:1d:11:63:
                    39:8d:35:a5:15:2c:d6:f1:9b:7f:6a:e8:bc:92:e9:
                    2d:f4:8b:91:cb:c5:77:9a:5c:de:42:ba:70:cc:79:
                    2b:44:2f:7c:e2:f5:95:1f:39:03:46:87:b9:f6:bb:
                    d1:2c:c9:74:85:77:e3:36:69:75:96:72:97:55:0f:
                    2f:03:42:c3:3c:d4:d8:53:4e:78:03:4f:96:e6:98:
                    96:80:9d:ed:c1:99:a3:54:12:e8:bd:a6:39:4f:3e:
                    e1:7b:90:e2:e6:c8:71:04:13:f9:bb:85:11:5a:ef:
                    cb:4d:74:af:39:51:48:e0:70:50:a0:6d:eb:d1:24:
                    de:36:5b:af:64:d1:91:15:b1:25:27:52:21:fb:0e:
                    f9:1b:5c:5f:81:e8:b2:57:f4:2e:d1:08:f3:96:ba:
                    94:ef:e1:48:9e:7a:1b:d7:bd:be:23:6e:46:09:51:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:02:AF:E3:7A:6E:A3:D9:A2:7F:FE:74:9E:E4:F7:09:DE:56:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0627473-2d8c-3158-b2c4-199c79764621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:d3:8a:e9:55:45:97:35:df:65:b1:e8:ad:0c:89:29:29:
         0e:7b:f6:08:0f:a6:13:2e:09:1f:c4:09:63:44:48:da:ef:03:
         72:d4:44:ff:06:00:f7:2b:98:3f:b4:f7:62:cc:a4:09:8c:17:
         d8:d3:42:5c:ff:c4:f6:0d:2e:cc:4d:ca:49:72:49:cf:c4:b7:
         c6:df:d6:27:50:8a:da:0c:90:26:70:b6:24:9f:68:68:4d:69:
         80:0a:3a:e9:aa:e0:a7:63:84:2e:59:2e:86:81:45:17:0c:4a:
         b2:d0:31:c4:63:ec:3d:75:3a:f4:65:d7:d9:40:51:3c:8c:36:
         3b:3f:c2:73:d2:f5:4e:2b:a0:b5:3c:b4:b5:a5:c8:cb:20:9c:
         c1:46:0b:a3:0e:fd:be:22:34:cd:91:57:ec:c1:68:62:4f:ff:
         d5:9e:89:de:4a:89:92:13:21:ac:17:29:4f:41:7c:76:0c:7b:
         e5:6a:85:8c:35:fc:66:6d:7f:4f:79:57:ea:39:1b:8d:e7:11:
         87:eb:dc:e6:37:c3:6a:9a:2e:6b:44:2c:1d:b6:2f:12:50:fe:
         78:af:65:2a:cc:42:60:f9:04:3e:5c:d2:e7:c5:78:7c:b6:75:
         ae:53:48:4d:3a:39:88:01:3a:f9:22:cc:c5:4b:95:7d:8d:f5:
         eb:3b:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:53 2026 by rpki-client