Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df95484a-9f95-374a-9887-54674352f871.roa
File:                     df95484a-9f95-374a-9887-54674352f871.roa (raw, json)
Hash identifier:          VkTwJzsNEda7vzDNrWo9z8EbPm6Hb0VL70Pp1j4wXgY=
Subject key identifier:   66:96:1B:E9:BF:8A:B8:BD:9E:52:F0:6D:3C:11:AE:B9:24:14:C7:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC0F024A9EC1EEB932D540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df95484a-9f95-374a-9887-54674352f871.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.47.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:0f:02:4a:9e:c1:ee:b9:32:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d2567925-5daa-4c14-804c-25a03d3df55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:92:10:19:8d:de:e8:2c:e9:b4:dd:44:31:
                    b4:a9:e1:5b:9b:6a:11:f3:c4:c5:c7:8d:24:12:ee:
                    ec:89:ff:0c:28:ec:94:11:18:6c:e0:db:2e:f1:8f:
                    79:7b:37:27:b1:b1:c4:61:f3:f0:9e:46:c8:a4:4a:
                    67:2c:1f:4d:bd:1e:3f:a2:09:5d:3b:e7:a2:a0:df:
                    72:e2:13:3b:c9:b3:b1:f4:3c:3c:24:cf:17:e3:a8:
                    77:7e:fb:52:5c:10:b6:08:ab:1b:f0:0f:08:c9:23:
                    61:b0:a0:5c:8a:5f:5e:02:cd:31:e4:0f:c4:e9:63:
                    2b:f8:9e:a8:21:7d:a8:b4:3b:3e:46:12:fd:e7:f9:
                    03:40:7f:92:e8:dd:f7:87:c1:42:df:e5:2f:cf:fe:
                    a4:6b:5a:dc:ea:2c:d6:86:c3:a0:a6:17:0d:54:bb:
                    67:af:96:04:69:7d:7a:db:20:a3:a3:bd:81:1c:b1:
                    de:16:7c:cc:7a:35:65:73:5a:5d:90:18:2b:21:23:
                    ee:ac:6f:1b:ea:c1:d1:92:cd:83:14:dc:d4:a0:b9:
                    80:d5:47:57:ae:44:6e:40:e9:41:88:47:0f:71:80:
                    4e:ca:67:c5:69:f4:1e:5f:30:ad:5e:4b:aa:bb:3a:
                    5e:e2:47:2f:75:9b:e0:6e:5d:2a:33:0b:ab:d8:d9:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:1B:E9:BF:8A:B8:BD:9E:52:F0:6D:3C:11:AE:B9:24:14:C7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df95484a-9f95-374a-9887-54674352f871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.47.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:0f:ab:6c:6c:d5:42:8b:58:bc:c9:5b:60:12:b1:3c:f2:
         3f:db:e9:86:4c:fa:57:84:97:db:e9:68:28:22:c7:8e:1f:fa:
         4a:fe:f7:56:e7:05:7c:07:7c:25:32:9c:ef:76:28:39:0c:49:
         27:2a:c3:73:32:52:21:21:39:4c:69:03:78:08:bf:2e:11:86:
         80:ba:10:c1:cc:3a:0d:78:13:fa:13:43:71:84:45:aa:89:45:
         78:3b:41:d1:c6:fa:a2:1a:c9:9a:7e:cc:18:93:7e:e2:e0:6a:
         fb:88:fc:37:c1:e3:68:55:b5:7f:3c:fb:f4:8b:0d:e9:ed:8a:
         ef:fd:d8:e2:69:16:23:28:f2:4d:7b:e5:a5:b6:b8:ea:2b:52:
         84:cd:5b:f8:71:e6:fa:e2:31:21:c4:0e:cc:8f:9e:44:7e:fc:
         af:00:ed:42:d6:9e:20:e8:e2:27:62:b3:f2:c5:a3:db:03:7b:
         07:cd:be:c3:21:27:6f:ff:b0:f0:35:f5:78:75:1a:2f:52:56:
         35:57:f4:4b:90:72:86:5d:da:a8:99:9d:f0:8a:8f:16:a9:5f:
         f3:56:cc:1c:0a:19:88:c7:9b:4c:61:89:96:62:89:b1:b3:4e:
         ab:16:46:09:f1:c3:04:19:9d:b4:41:40:7f:64:04:68:37:df:
         bf:ff:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:32 2026 by rpki-client