Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c41bdcef-2d94-34a6-9e08-edd9c9d3e7a9.roa
File:                     c41bdcef-2d94-34a6-9e08-edd9c9d3e7a9.roa (raw, json)
Hash identifier:          6PLb4WlHe2nVNO4iIne/NY2rNYj+Y9kJekFKkNs6BKw=
Subject key identifier:   63:6E:B5:C1:E5:47:BB:55:30:FB:5D:77:BF:5B:39:00:2C:0B:35:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C6A07E13E661C69D04B65
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c41bdcef-2d94-34a6-9e08-edd9c9d3e7a9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.51.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:6a:07:e1:3e:66:1c:69:d0:4b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c124c332-1802-427d-9db4-3331139c994b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:64:8b:35:45:e9:f0:21:fd:cd:80:d1:68:
                    58:3f:e9:66:9c:d7:a6:8a:dc:92:ca:60:af:67:8c:
                    6d:09:f4:7e:8c:26:0d:34:a9:3d:25:b0:36:79:40:
                    c4:19:4a:fc:18:57:f5:e6:fd:da:f7:7b:f7:51:34:
                    23:37:0d:49:cb:2d:65:43:e0:46:54:49:ce:16:6b:
                    fd:93:fc:10:7c:87:6e:36:25:ed:a8:1c:c6:96:dd:
                    b1:e4:3c:74:51:70:3d:fa:5b:83:a9:13:65:fb:49:
                    b5:0a:11:09:cd:e9:a2:f2:28:5a:0d:1c:d9:1b:6e:
                    e8:c3:47:fb:78:49:2e:d5:17:5e:ce:a1:2d:29:b4:
                    56:12:15:34:88:28:cd:d2:41:1a:8e:ac:36:ed:71:
                    e3:15:be:d9:a6:04:ab:ae:17:78:26:94:b3:a9:f5:
                    f3:f0:11:62:4c:53:d2:b8:40:83:48:42:83:69:e8:
                    b3:f6:75:79:bf:41:ec:53:4c:a2:ae:ae:e9:e4:20:
                    09:e7:d3:2a:53:79:50:d9:3f:bd:da:be:86:fb:3d:
                    01:26:aa:b0:64:5c:08:5a:9c:a6:c8:80:a1:90:27:
                    91:a2:da:f6:02:cf:36:f1:71:fc:93:97:0e:9c:47:
                    db:48:10:9b:dd:09:9a:c7:b2:36:6f:ce:2f:29:a7:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6E:B5:C1:E5:47:BB:55:30:FB:5D:77:BF:5B:39:00:2C:0B:35:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c41bdcef-2d94-34a6-9e08-edd9c9d3e7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:c1:41:ba:4d:4e:10:5e:4f:c1:16:c9:32:58:31:58:10:
         e6:d5:07:37:a7:a6:03:c9:5d:f7:15:1d:24:18:94:c8:df:67:
         6e:e3:5c:32:96:c7:7c:78:cf:21:ed:de:31:f6:94:e8:f7:0d:
         d4:8a:fe:5d:76:3d:a3:67:bb:a0:4b:15:d7:31:b0:26:a2:ad:
         98:8d:af:1b:b9:26:bc:2c:6f:3d:cf:7f:61:11:09:48:67:72:
         a2:0b:4a:56:2e:83:e4:ec:20:5c:4f:81:f4:2d:46:71:e7:47:
         d5:51:83:62:86:25:13:4c:77:f1:51:7b:31:06:96:cf:99:00:
         a5:12:94:d5:a4:d7:e7:16:cd:18:4e:5e:d2:98:45:ad:98:7e:
         18:16:15:db:6d:16:af:20:48:de:4e:ee:0f:d2:26:e2:97:7e:
         5e:a4:33:9b:15:6a:a5:f4:24:17:ba:3a:15:d8:5c:02:15:3a:
         e7:53:23:e1:dc:d5:6f:6b:d0:b3:45:86:c9:69:34:3a:45:4c:
         a0:a4:82:54:2a:f5:df:e6:50:34:c5:1e:fd:d2:b6:33:e0:80:
         21:8e:4d:bd:26:30:5c:0c:c4:33:2e:48:e8:1c:e6:20:06:0d:
         98:da:23:6c:56:3b:fe:d2:e8:93:97:94:7e:0e:cd:77:40:37:
         e8:48:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:54 2026 by rpki-client