Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39fdbfc-274c-3fd7-be93-cfe41e5ba7ba.roa
File:                     d39fdbfc-274c-3fd7-be93-cfe41e5ba7ba.roa (raw, json)
Hash identifier:          115ZlOFaILcsVgKZgZiZXuWEtB8E4h/WTzdF5w7kvGA=
Subject key identifier:   A7:A8:2C:E2:B2:80:E4:B1:85:84:E7:16:8A:AA:BD:43:29:ED:76:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBFF10463B2DD293F2CC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39fdbfc-274c-3fd7-be93-cfe41e5ba7ba.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.234.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:ff:10:46:3b:2d:d2:93:f2:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=802d90fd-3c8b-4040-b6a4-1d6d51502117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:c1:2d:9c:fa:c4:cf:aa:1a:6d:3f:4a:b3:
                    cb:9a:88:64:7e:59:87:09:83:a6:34:bc:65:f7:42:
                    f2:d8:ee:67:fd:c6:b1:c6:77:bb:15:f3:c7:1b:c5:
                    9a:ba:f4:25:ec:0b:12:65:22:9b:6f:9b:f0:b4:90:
                    cd:fa:7d:4d:62:03:98:46:17:2f:c4:96:e6:10:09:
                    68:fe:1c:1e:a1:04:d4:88:85:00:e3:13:67:18:02:
                    89:05:da:df:31:a6:e9:6c:62:f2:b8:b1:1f:93:75:
                    e8:1b:ed:56:f5:d0:2f:5b:bd:21:f1:51:45:99:d2:
                    e3:03:35:3f:5e:6a:73:b6:d6:e7:5b:f3:e1:22:45:
                    f1:d8:ba:b8:1c:8c:56:77:85:55:46:81:6a:a5:c9:
                    d6:33:24:8f:e9:eb:f0:2b:36:ca:35:17:e6:3b:e9:
                    04:e8:4c:5a:c7:d4:79:d4:42:e2:7a:ca:ed:95:79:
                    7e:52:27:40:38:19:01:2a:c5:06:6b:59:b5:b2:3f:
                    de:e1:fc:d2:ec:1c:3f:88:76:e3:a7:32:88:c1:a8:
                    df:91:bc:68:71:c2:f1:e8:c9:09:cc:b8:28:c7:d1:
                    8a:bc:1c:f7:bc:d5:60:a3:0f:12:65:cf:80:36:64:
                    79:02:1c:69:20:8c:28:1c:3e:42:c8:fc:20:60:1d:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:2C:E2:B2:80:E4:B1:85:84:E7:16:8A:AA:BD:43:29:ED:76:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39fdbfc-274c-3fd7-be93-cfe41e5ba7ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:e1:d4:99:1e:90:ab:96:43:03:8d:b7:6e:1c:cc:cb:c9:
         69:74:ae:ca:c5:34:1f:18:d3:bd:c2:bc:29:68:c9:59:10:b6:
         2e:f3:29:49:39:ac:21:8c:a8:1a:ea:f5:46:0d:2f:b7:ad:52:
         2c:09:07:a2:ce:39:05:5a:55:fa:5a:ae:31:f9:f2:55:bc:61:
         c9:c2:49:22:b9:4b:5d:2d:9c:77:ea:f8:23:7d:8e:a0:cd:b4:
         e4:29:60:fa:cb:df:93:78:63:86:09:3b:9b:a8:44:c3:3b:b4:
         f6:f3:96:af:45:dd:24:c1:61:80:78:19:a8:d0:1e:ea:05:e6:
         b4:65:49:02:6b:05:5d:6a:ba:38:e8:d3:d1:62:e8:4f:91:d8:
         bc:0d:f9:23:4c:ea:cc:69:52:35:7b:64:71:d4:d0:4b:0b:a3:
         7a:9c:fa:0a:51:b2:c6:4f:41:82:b1:43:bb:68:54:ad:9c:e3:
         2b:af:60:1f:06:8b:c9:87:70:f2:33:bc:29:39:9f:78:b1:e6:
         d0:18:58:8d:d9:65:d5:14:ab:e7:ae:0d:33:f1:83:5f:0c:b1:
         35:46:05:7a:4e:ab:5f:8f:fd:c6:fc:01:a4:90:c7:17:30:19:
         8a:80:d2:a9:82:cf:29:01:78:17:78:8a:0f:5f:f3:0e:28:4f:
         7c:5a:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:35 2026 by rpki-client