Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5882891-9cff-31ed-8bac-19416f2b113b.roa
File:                     d5882891-9cff-31ed-8bac-19416f2b113b.roa (raw, json)
Hash identifier:          0FcBQckjXatfQ4/YkCVFrZQY2D7CRM8WHtW75gyKBkg=
Subject key identifier:   70:8B:20:5E:74:38:DE:96:7D:EB:F2:47:53:76:93:06:67:90:97:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DDEB928F41A6499F39880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5882891-9cff-31ed-8bac-19416f2b113b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.92.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:de:b9:28:f4:1a:64:99:f3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ec50b645-d6f3-482f-9e65-9502db08e1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:87:01:c9:fc:01:23:b9:f3:21:53:fc:a4:
                    14:44:93:69:ad:d0:60:fa:a7:e7:06:4e:9d:54:0b:
                    0a:c2:49:b4:53:a3:f0:c6:16:2c:c1:d9:60:1e:f8:
                    12:1b:7a:d3:ae:3a:a7:59:e2:b1:16:36:7d:2e:05:
                    f9:d3:5a:95:7f:fd:4f:f7:1a:79:57:b6:b4:f9:40:
                    73:01:db:78:89:69:45:32:b9:b6:3b:8e:32:a7:58:
                    5a:d8:4d:d8:59:0a:3a:e1:5c:8d:f6:46:d6:cb:e5:
                    38:d5:a6:4f:98:5a:f1:cb:65:33:b0:87:dd:b0:e6:
                    80:f3:ac:57:e1:23:3a:14:42:18:8b:8b:03:a2:6f:
                    de:7f:50:6d:b1:4e:8d:20:13:1e:91:eb:1f:9c:eb:
                    4e:2f:fd:51:15:6b:71:08:2f:80:8a:a5:b9:61:b6:
                    ff:68:d1:7b:9c:04:5c:3f:fc:27:ff:2e:20:90:ea:
                    f3:de:cc:93:b5:a0:13:1d:10:d3:19:06:54:5f:ea:
                    f4:ab:d7:13:98:1e:3e:43:fe:7e:4c:49:08:e6:3d:
                    ec:86:69:1f:2e:3f:9a:18:aa:e9:54:56:b4:c9:05:
                    3f:fc:5a:fd:64:89:a5:c2:f5:a7:9e:e7:e0:2e:60:
                    c0:62:f5:0b:c0:9b:e2:be:08:7f:99:4d:8f:28:c8:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:20:5E:74:38:DE:96:7D:EB:F2:47:53:76:93:06:67:90:97:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5882891-9cff-31ed-8bac-19416f2b113b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:94:64:66:a3:e0:eb:4b:b1:95:6c:5a:ce:ff:e3:5a:ce:
         58:64:ff:e3:a4:f1:91:f4:a8:58:a8:b8:b3:12:bc:87:31:d6:
         dc:49:a6:54:12:47:f9:74:62:09:5e:32:48:15:98:11:bd:05:
         65:40:05:ba:fc:dd:ad:07:92:89:5b:92:5c:f3:6f:e6:fe:28:
         9d:8f:11:e5:67:bc:ae:e0:dc:48:03:9c:e0:5f:aa:d8:1c:81:
         2c:53:61:a7:4a:6c:1b:1b:f0:03:ea:f4:cc:e7:9f:70:25:b5:
         49:18:0b:da:9f:1f:7f:c5:e6:7c:b9:fb:37:c5:98:1f:06:f7:
         ca:95:09:a4:7e:32:24:52:f4:5a:ee:84:0f:00:6f:f9:b7:0d:
         51:24:4f:48:73:37:05:d4:95:c2:92:b7:9c:b9:21:0a:64:73:
         c2:eb:08:ba:34:c4:99:a5:15:58:4f:9b:c1:5e:d1:d5:4f:96:
         06:8e:7b:78:a3:ae:9a:5f:d6:b6:c2:3f:55:ec:ae:d2:db:58:
         51:e7:c4:ec:ab:51:b5:56:dd:29:b2:28:13:17:10:2b:ef:ca:
         c9:1b:72:03:54:18:21:96:51:35:ff:0c:6c:cc:48:d7:eb:8f:
         60:49:71:2d:2b:c3:1d:85:93:89:79:fe:70:1a:5f:6c:99:35:
         2d:8f:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:41:48 2026 by rpki-client