Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ee41cd-97f1-34e4-8335-ad4b1ffedd14.roa
File:                     d5ee41cd-97f1-34e4-8335-ad4b1ffedd14.roa (raw, json)
Hash identifier:          YuweT3htGFIVbG7Z+cFgKMf39QhE+DeSjjy0jedzdsQ=
Subject key identifier:   D1:65:FD:FB:2E:80:87:BA:6C:AA:8A:8A:7A:A4:E1:5E:A6:04:27:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC1744795BD7DD652CA840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ee41cd-97f1-34e4-8335-ad4b1ffedd14.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.69.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:17:44:79:5b:d7:dd:65:2c:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d7157455-1d03-462f-900d-9931717933d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:45:33:5b:86:c6:96:3b:81:f5:44:c9:cc:
                    63:87:1b:3f:18:d1:a2:22:b6:8c:ee:42:4b:30:b5:
                    f1:71:cf:f1:ef:82:4d:1a:2a:6b:9d:43:be:39:31:
                    e6:ac:59:f9:a4:c4:12:c1:2c:a7:eb:d9:3d:8d:2f:
                    db:5e:b8:c5:8a:81:52:c9:c6:29:c9:d7:31:5c:cb:
                    d3:e6:50:dc:5a:cd:1f:91:a4:27:8e:99:51:6a:6b:
                    70:da:e9:c2:7a:9c:83:11:55:8c:73:c3:d6:e8:82:
                    fe:d0:39:41:ed:00:bd:31:78:b1:66:99:44:35:0a:
                    3b:63:0c:3f:b7:89:01:91:55:02:e0:b7:14:6c:92:
                    67:64:40:cb:78:9f:1a:5f:01:54:f7:08:bb:08:81:
                    66:08:2c:e6:ae:c1:7e:ba:77:5f:10:58:fc:5c:5a:
                    ee:56:7d:70:af:63:6e:41:a0:9f:db:9f:24:74:6e:
                    5c:35:b1:83:d0:2c:d8:5f:80:86:73:65:db:30:7c:
                    ee:fe:fb:aa:de:a6:4a:b3:af:92:6d:9f:91:82:67:
                    57:ca:20:59:84:ac:5f:83:9d:27:c2:4f:10:e6:9f:
                    1e:5e:39:45:11:ae:f8:d0:6a:d6:1c:68:c8:c5:b6:
                    17:5d:af:40:73:27:3c:46:62:a7:32:8f:b4:10:7e:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:FD:FB:2E:80:87:BA:6C:AA:8A:8A:7A:A4:E1:5E:A6:04:27:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ee41cd-97f1-34e4-8335-ad4b1ffedd14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.69.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:f5:82:42:17:76:ae:66:0c:7d:73:c7:7d:8a:00:45:74:
         37:f6:93:de:92:d7:1f:37:d3:0f:52:e2:4f:1c:67:7e:78:f7:
         77:2a:ac:98:0f:b5:0d:87:e6:89:9d:ac:92:09:e5:b7:1d:9f:
         86:64:37:3c:c7:27:97:08:7d:2f:3d:f9:89:21:32:99:53:ee:
         80:c2:7b:c1:1f:f3:f0:a6:76:60:6a:cc:1f:04:38:d9:6f:6c:
         96:b3:08:b5:91:5e:23:1a:52:aa:37:8b:50:43:2f:9b:89:04:
         d6:83:62:a1:93:f2:42:1d:dd:99:c4:e3:4a:05:ad:b3:02:7d:
         57:e5:e3:2f:cc:c4:e8:98:1b:62:f7:52:c3:ae:f2:06:ff:72:
         a5:d8:75:6e:1f:47:7f:ae:60:0b:cb:3a:d1:77:f9:c2:8b:94:
         75:0d:cf:e8:13:ed:f8:50:5e:de:6e:90:ca:da:34:c9:7c:11:
         dd:41:8c:17:a5:60:95:9f:3d:8b:ed:7e:54:5c:ae:d7:9b:3f:
         f5:d5:b7:72:76:4d:00:e5:35:f8:2a:ca:fd:94:d7:8b:73:b1:
         ff:1a:84:27:78:4c:48:53:7c:07:b0:5f:3f:d7:19:34:55:c7:
         fb:6d:8a:74:43:e2:9b:a4:6f:09:67:88:74:19:4d:44:90:9a:
         be:dd:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:55 2026 by rpki-client