Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b5309c-21fa-3685-9b5f-496d52325538.roa
File:                     c1b5309c-21fa-3685-9b5f-496d52325538.roa (raw, json)
Hash identifier:          xRaTum7IREOtVnfPb1MDnwC4ETo7mR5O/kcqwm4JGcM=
Subject key identifier:   DA:2D:F5:99:C5:06:9D:BC:52:A0:F3:F5:E1:BA:BF:15:9C:30:E4:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100A32A858D6AEB9C6CF500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b5309c-21fa-3685-9b5f-496d52325538.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     33287
IP address blocks:        73.30.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a3:2a:85:8d:6a:eb:9c:6c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=3998da8c-c154-4b07-af53-912b5fb65e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:2a:94:f1:fd:ce:a9:80:32:f0:ac:f9:4c:
                    64:c7:0c:90:bf:13:cd:76:46:c6:57:0f:f1:b9:89:
                    35:ef:52:d8:50:92:b1:75:cb:81:a1:8b:4a:0a:8e:
                    84:5e:37:a2:cc:d9:75:c9:a3:db:b8:37:c9:46:b0:
                    8a:44:ef:ff:51:23:4a:91:5a:00:a6:42:cb:3e:a1:
                    26:40:04:49:36:16:11:cc:db:45:99:fd:80:e9:85:
                    cc:78:a8:5f:a8:28:49:85:76:dc:29:0f:94:f4:f0:
                    39:22:c5:85:c5:08:32:94:c4:27:16:78:5a:f3:6f:
                    2c:13:d9:f5:03:69:be:7a:ce:ba:0b:7e:f3:7e:e2:
                    e1:af:87:04:69:80:d8:29:79:1e:4c:a0:fe:c2:74:
                    df:df:95:ae:fa:82:05:19:b4:a7:99:dd:14:3f:ae:
                    dc:70:6b:6d:16:0f:d3:bd:d5:17:fe:8f:69:66:a3:
                    27:c1:24:cb:e6:84:79:ab:11:59:90:c8:3a:6f:c8:
                    a4:b3:9a:01:6d:e9:e0:a5:d5:84:76:2a:e6:86:7d:
                    39:8f:18:88:12:2e:da:5b:ee:6f:6e:d5:70:fa:4f:
                    7b:ff:03:cf:fd:c4:24:37:a1:07:62:19:09:84:53:
                    26:6a:6e:b3:78:ea:12:26:e8:b2:93:44:36:c7:3e:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2D:F5:99:C5:06:9D:BC:52:A0:F3:F5:E1:BA:BF:15:9C:30:E4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b5309c-21fa-3685-9b5f-496d52325538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.30.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:26:97:70:7c:60:eb:bc:f8:fd:84:7a:b7:e8:b7:3b:14:62:
         71:d4:bc:46:d6:bb:94:4a:e2:c2:7e:b2:cc:ba:f2:c8:5e:f8:
         7c:41:0c:91:99:d0:a8:4e:98:07:b7:de:7d:85:bc:ab:77:bb:
         62:ce:94:4e:84:71:46:49:c8:12:fb:f6:59:7e:e4:7a:34:2a:
         82:04:18:a3:a2:6e:64:48:61:11:50:ef:fc:d9:06:38:40:f0:
         4a:f8:4c:ab:41:b5:d8:59:f4:e9:67:31:15:4f:ad:47:a0:de:
         99:a7:ec:53:93:ef:88:ae:0d:51:4d:f0:b3:ee:6c:28:ab:3f:
         d4:d5:28:2c:05:ea:eb:14:c4:55:de:e8:2f:32:64:af:43:9e:
         2b:f7:ff:c9:3e:a2:0c:55:de:90:89:fe:99:e4:f3:47:d2:63:
         82:25:16:25:0f:e9:80:4d:51:7a:0e:f7:b9:72:22:8d:d7:a0:
         8b:5e:9d:87:4c:da:c5:d4:73:20:46:0a:bf:54:99:3f:9d:6e:
         5a:d7:90:5b:85:71:d4:7f:e6:fb:28:37:88:58:cc:96:1c:82:
         0b:be:36:93:c9:13:36:5f:b8:f4:25:ac:9e:6b:b2:6e:f0:16:
         f7:7a:5d:c1:d1:ea:a6:b4:81:db:f4:cf:8d:d7:ad:55:93:5f:
         9e:f3:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:01 2026 by rpki-client