Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c919c405-c1b6-3b21-b4d6-ab08429e2b3d.roa
File:                     c919c405-c1b6-3b21-b4d6-ab08429e2b3d.roa (raw, json)
Hash identifier:          Jxk+OGb92eyZV5iP+F7nPX5swBW8FVFWmU/LRt0LVqE=
Subject key identifier:   C7:3D:DB:1B:0F:BA:E1:27:3D:ED:11:E2:52:A4:61:9B:4E:EE:D7:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBF96FE5C504D8161A7AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c919c405-c1b6-3b21-b4d6-ab08429e2b3d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.219.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:f9:6f:e5:c5:04:d8:16:1a:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=6ec5c3a6-ca15-406b-8b2e-8e3be6fde900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:d5:2e:b9:a3:81:db:4e:1e:95:3d:23:41:
                    d6:c8:9a:2b:17:c0:79:c0:79:5e:cb:e5:ca:e8:c8:
                    f5:39:a2:b1:79:69:0e:2b:82:b3:21:3d:41:7a:d9:
                    12:3b:95:d5:69:3a:08:d7:34:3a:a0:af:2a:c6:8f:
                    0c:75:3a:db:2b:1b:57:11:86:c0:66:a4:bf:73:a6:
                    e4:c8:59:4f:25:f6:82:e8:78:2e:8f:49:ec:45:ff:
                    bd:9f:27:7f:20:77:ca:18:be:36:22:ec:84:47:49:
                    db:d2:29:2f:c8:4f:8a:87:e3:2d:47:0d:e5:8d:01:
                    79:7c:7e:1a:a8:51:79:99:ba:6d:6c:b8:ef:fd:23:
                    2c:04:bf:eb:70:9d:17:d5:1e:2d:ca:8a:92:61:27:
                    98:ce:f1:94:8f:be:a5:d3:00:20:85:27:e0:c7:28:
                    fe:77:e4:2d:8f:48:3f:60:1a:60:ea:20:d5:56:cd:
                    f7:79:67:2c:e2:ef:c3:ad:35:da:15:03:9c:42:8a:
                    d8:a6:70:c1:b5:09:0c:30:6c:5e:2c:62:fb:fa:6c:
                    29:2e:7f:8c:43:c6:d1:41:45:46:ea:e8:e3:01:0c:
                    62:64:26:2f:ef:bd:48:d7:73:fa:df:6c:30:55:01:
                    26:95:10:df:90:dd:0c:7c:22:b7:5c:7d:97:64:ab:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3D:DB:1B:0F:BA:E1:27:3D:ED:11:E2:52:A4:61:9B:4E:EE:D7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c919c405-c1b6-3b21-b4d6-ab08429e2b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:f6:ed:45:93:ab:ce:cc:e4:a6:02:56:91:a9:4d:b8:32:
         9d:a7:4a:91:31:ac:3b:b2:fc:a6:44:4b:0b:7d:4b:62:5a:24:
         cf:6d:f9:2e:59:61:4d:46:d5:97:20:7a:b7:75:23:5c:7e:7d:
         69:a9:12:3b:11:de:5f:65:ca:b3:5c:e1:59:c8:b7:77:fd:c2:
         f2:85:00:a8:81:e8:03:e1:84:38:b7:16:ff:2c:19:f5:1f:a5:
         06:7e:6d:22:d7:35:04:0f:11:5d:7b:6b:97:6d:ff:eb:9b:ba:
         92:78:e4:28:c2:c9:2c:40:f3:ef:32:d9:96:59:2e:ff:49:3a:
         23:44:cd:11:bb:6d:9e:07:e3:5d:e2:25:1c:48:c1:fd:d2:72:
         b3:99:66:7b:f0:35:0d:23:a0:5b:b6:aa:08:4b:fb:d1:c5:b4:
         21:4e:fa:da:fb:2e:38:81:39:84:97:ef:3d:12:76:bd:22:31:
         74:40:25:81:a4:4d:94:1a:69:b9:03:4a:4e:7d:5a:8b:e6:de:
         4c:1e:ac:16:cc:2d:96:43:95:90:f9:87:06:31:73:46:56:94:
         ea:89:8c:5c:94:a9:4d:e8:4d:48:42:f4:9b:44:87:25:18:ce:
         74:40:69:eb:0d:89:ef:f2:00:7f:8f:f1:6f:fb:33:cc:38:73:
         1f:13:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:41 2026 by rpki-client