Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2184bac-28c1-3b2e-a31f-156ed9d2aa24.roa
File:                     d2184bac-28c1-3b2e-a31f-156ed9d2aa24.roa (raw, json)
Hash identifier:          b8uEy4BHrZWZTydcdDc9IJPTmqrKKHHrVj2Wdi52t7s=
Subject key identifier:   B9:AD:9D:98:19:EB:22:AB:72:C5:CD:31:DC:52:32:A1:01:1E:E8:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5841B339FD6A627FC8D3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2184bac-28c1-3b2e-a31f-156ed9d2aa24.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.176.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:41:b3:39:fd:6a:62:7f:c8:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=13477357-9b39-4a16-ace7-09cdcb0be29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:ae:09:db:cf:7e:0e:41:52:b4:e1:81:53:
                    9e:5c:e2:84:d6:93:27:0b:e0:ad:0a:a4:9c:bc:4a:
                    74:20:ad:e0:bf:3c:15:cf:9f:4d:1c:4f:c7:0b:3c:
                    eb:d6:1e:48:e0:61:9e:87:e6:6f:a4:73:47:08:08:
                    dc:a0:24:98:db:73:38:68:7e:0e:fa:08:2d:62:08:
                    10:4e:7c:e9:d8:b0:4a:b7:ac:7f:9c:cb:ba:9e:88:
                    ec:32:16:14:bb:f9:99:47:63:c1:74:50:2c:61:18:
                    3f:a6:a2:a5:09:41:eb:02:f0:fb:98:8e:4d:10:32:
                    94:f8:2c:f7:b8:25:39:c3:fb:8d:87:27:dc:5b:0d:
                    fc:d6:f9:49:c3:2e:86:fb:6f:63:a3:56:92:5d:48:
                    26:4c:a8:e3:2e:ec:f0:2a:0f:2e:7f:a3:60:4c:23:
                    c4:0f:48:7b:c9:8e:e0:48:d2:57:be:d1:a0:a0:99:
                    a6:a7:a2:e9:ce:b2:7a:94:db:81:9b:69:ba:c4:44:
                    59:fe:03:2e:25:a1:d7:8a:fb:86:e3:72:ea:fe:d3:
                    d0:60:23:b0:cd:ed:9d:f6:be:d5:29:c4:53:15:ef:
                    f7:1e:a4:b4:4b:73:18:b2:69:a0:bf:c5:0b:f3:ae:
                    75:a6:49:ac:52:33:5b:5a:09:dc:ba:aa:aa:ef:8e:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:9D:98:19:EB:22:AB:72:C5:CD:31:DC:52:32:A1:01:1E:E8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2184bac-28c1-3b2e-a31f-156ed9d2aa24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.176.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:07:2c:d7:87:91:68:70:54:ce:94:61:8e:0c:e4:28:f8:
         eb:c6:86:b9:cb:fb:b9:50:f5:f4:8d:ea:e1:4f:0a:10:eb:7e:
         79:25:1e:bc:1d:8c:0c:38:c8:df:c1:ff:3e:ab:27:fc:6d:29:
         47:c7:20:46:70:c9:f5:56:54:bd:81:08:fe:3c:8d:2e:1e:21:
         6d:80:a6:11:cc:bc:89:7b:7c:f8:05:96:16:be:39:66:d5:d0:
         4f:5b:e3:0a:11:96:eb:3d:c7:22:55:04:76:c8:64:61:0b:7a:
         d8:2e:83:28:6e:ab:f7:59:ca:0d:48:d3:11:9b:3a:26:ae:9f:
         88:9e:4a:26:18:2b:b9:04:85:ff:cf:26:1b:17:bf:53:cf:17:
         7c:0c:f8:7d:0b:15:17:b2:81:2e:f3:ea:fc:ce:ea:b2:99:0d:
         79:ad:32:5e:67:3f:55:d5:fc:b7:8a:54:d8:be:bc:67:ff:85:
         d7:9f:25:45:04:45:e3:37:f4:b1:28:cc:75:b2:7d:6d:54:dd:
         73:5f:f8:14:89:fe:64:71:8f:24:4c:9c:93:16:55:ba:a2:eb:
         e4:7b:9f:da:92:2d:2e:3f:6c:34:14:c9:9c:48:a0:10:71:68:
         4a:6a:c2:92:61:e4:28:22:11:3d:d2:ee:a6:1b:02:bd:ea:79:
         16:7b:12:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:56 2026 by rpki-client