Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd574fbc-e4bf-3d37-811d-4674adf7ab28.roa
File:                     cd574fbc-e4bf-3d37-811d-4674adf7ab28.roa (raw, json)
Hash identifier:          LsKiwdN3OkuIut+4S+BEyVmIgE5mR0bH5aMDOu/Wz58=
Subject key identifier:   E9:E9:EC:9F:5A:FC:2E:F9:05:E7:38:6A:4E:F0:52:A7:E6:DB:73:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC5EBFA54FC94C1D787E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd574fbc-e4bf-3d37-811d-4674adf7ab28.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        73.191.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:5e:bf:a5:4f:c9:4c:1d:78:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=4c243c61-6361-4879-be76-d82bf7703afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:1d:67:a3:d3:2c:48:3f:b4:d6:37:3b:05:
                    53:9a:84:fc:47:85:90:12:98:75:02:b5:d8:cd:89:
                    2c:65:d7:a4:ea:a9:af:55:1f:f7:75:18:f6:53:5b:
                    26:00:ab:11:52:70:92:8a:c8:38:9a:4f:df:c9:ad:
                    9e:30:18:a9:af:b4:c8:36:e7:f4:f4:6d:99:fe:e0:
                    93:28:95:33:e5:59:7f:ea:b6:bc:99:94:d7:8b:40:
                    e9:95:31:29:96:82:bc:27:02:4c:52:88:24:81:8c:
                    65:09:0c:93:a6:7e:2c:09:2f:f1:5f:8f:1d:c3:3e:
                    3c:fb:fb:e0:95:9f:a0:35:16:f0:8d:c7:9f:e3:a5:
                    b5:21:b5:e6:85:9a:fa:db:54:41:6a:f7:d9:de:25:
                    9c:ee:b7:bd:70:0c:e7:37:3a:10:77:ef:45:0f:d2:
                    24:e0:3b:38:95:23:a5:15:98:c2:63:ff:38:66:2e:
                    17:cd:27:7f:7d:1e:5e:cb:3a:59:a1:6a:95:f4:50:
                    d8:5f:cc:97:3b:47:3d:91:cd:5f:5d:4d:74:29:ee:
                    50:17:c6:53:dd:fd:c7:f2:b2:d2:14:29:d5:b4:30:
                    9d:67:44:8d:d5:10:8a:69:10:34:ad:bf:5e:96:03:
                    04:8d:d3:d9:db:af:f2:8e:db:4b:07:2e:ff:60:d8:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:EC:9F:5A:FC:2E:F9:05:E7:38:6A:4E:F0:52:A7:E6:DB:73:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd574fbc-e4bf-3d37-811d-4674adf7ab28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.191.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:e4:87:32:9f:e8:fa:91:8f:2b:12:15:8c:38:e4:0d:39:
         b8:24:42:13:11:43:4f:8d:5f:98:0b:52:6f:45:9a:49:a0:3f:
         e9:f9:d7:b3:e4:e7:a5:af:01:5b:df:ac:15:a1:85:a3:d6:f9:
         dc:75:14:3c:0a:52:29:43:cb:b5:89:35:92:44:e2:65:8c:23:
         21:94:dc:9e:41:42:7f:0d:75:93:b6:bf:47:e7:31:9e:9b:f2:
         ee:18:ca:e2:42:06:eb:41:fb:5f:3e:81:a6:26:c9:86:03:f7:
         ac:ec:af:fe:a4:d2:84:b7:20:08:7c:8e:4f:21:fc:60:a2:a4:
         26:75:82:3a:34:3e:c0:68:8d:d5:db:e4:2f:41:96:51:26:5a:
         4d:08:0b:63:95:4d:47:ac:f7:93:dc:7d:06:25:fc:94:ff:9d:
         07:b9:ac:23:b9:2c:d3:6a:49:81:6c:d6:c5:cc:ee:f4:40:04:
         f2:8e:09:c3:f0:ad:cd:6b:b1:a2:58:e8:ec:b6:28:17:47:2f:
         91:98:b1:e5:9f:f1:4b:b5:32:cd:e1:9c:36:1c:80:e2:9f:8c:
         fa:f2:10:df:db:37:cc:2e:c7:aa:c4:88:61:4f:ae:a5:a1:d5:
         3a:00:2f:94:cd:b9:7f:d6:d6:8c:4a:07:70:eb:93:ac:2e:ba:
         c4:c1:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:07 2026 by rpki-client