Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26fd5aa-998a-326f-9aed-2a3dd2666b69.roa
File:                     e26fd5aa-998a-326f-9aed-2a3dd2666b69.roa (raw, json)
Hash identifier:          1eWEuSM6wGQakoPlZi8NwYY0Mpol5ERsZBImJ2wmrwk=
Subject key identifier:   5A:B1:51:1C:2C:5C:25:5F:88:8E:5C:77:D6:0C:FB:B2:5C:74:87:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C2B27D8BB505A2E8D2900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26fd5aa-998a-326f-9aed-2a3dd2666b69.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.211.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:2b:27:d8:bb:50:5a:2e:8d:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2a2ff643-0ab5-4b69-b374-38a326b7aac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:d2:c9:35:d1:aa:75:cd:53:33:da:37:72:
                    b7:10:04:81:2e:f7:7f:2e:6e:fd:0a:0c:48:6f:e0:
                    75:43:4d:6b:46:5c:e3:d1:47:c7:06:45:85:91:81:
                    db:5c:89:4b:bf:a4:22:9f:c2:91:02:6b:84:a7:6c:
                    75:07:0e:ea:8a:04:06:07:24:76:d7:48:a7:cb:4e:
                    5f:ff:16:f2:44:b7:80:c3:23:8b:f8:7d:18:ce:76:
                    3f:bc:39:cb:f4:cd:65:c5:22:29:aa:80:c6:6e:d1:
                    d6:de:49:d6:8b:64:0a:7c:2b:44:08:50:aa:70:42:
                    fd:78:a9:47:1d:ac:c8:48:dc:ef:af:08:95:d8:93:
                    29:ef:0f:15:ae:a7:b1:b7:b9:a7:1d:dc:ea:73:5b:
                    34:35:b3:13:06:99:00:5a:9c:4b:db:10:0b:26:ee:
                    ba:8e:9c:1e:65:48:03:d1:15:e2:81:24:9f:9e:fe:
                    bd:6f:9d:a7:76:cc:49:f2:f0:1e:57:e8:b0:e2:93:
                    45:23:0c:c9:af:17:4c:03:4b:d3:24:1d:7c:9a:c1:
                    a3:0b:46:f0:b5:17:7f:17:be:01:a8:e4:84:da:87:
                    96:7d:a7:ae:a3:81:24:e5:03:35:86:11:cd:49:57:
                    5e:a9:1e:b6:47:bb:28:8d:df:21:0c:38:5b:7d:13:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:51:1C:2C:5C:25:5F:88:8E:5C:77:D6:0C:FB:B2:5C:74:87:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26fd5aa-998a-326f-9aed-2a3dd2666b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:a3:b8:78:d3:28:e0:83:b1:6b:a7:50:63:7c:b7:a5:ae:
         3f:37:63:58:dd:db:4b:77:11:31:a7:58:36:05:f2:c7:19:b1:
         81:44:9c:83:9f:db:7a:a5:e0:c0:a0:36:5f:55:a5:52:cc:71:
         90:fb:f5:a7:1f:0c:fa:9d:31:bc:6d:d0:1c:82:56:bf:28:6e:
         99:38:66:b3:1b:f8:92:42:64:dc:10:1c:21:d1:fe:de:a3:99:
         1d:ae:82:7c:91:80:f5:47:09:8a:a9:09:37:e8:b8:1a:10:0e:
         34:aa:6a:ba:7f:63:40:44:f6:c7:fa:77:d3:19:2a:51:41:25:
         19:7c:c0:7b:1a:19:41:06:72:19:6b:91:e2:7e:da:6a:a9:d6:
         16:07:2d:25:ae:94:4c:6f:d8:90:59:a0:a5:14:46:ac:2e:d0:
         86:9a:4c:af:40:e1:8e:41:e4:89:c6:60:c2:d2:74:c0:53:a1:
         94:b0:e5:bf:f4:ef:6c:55:23:86:20:f9:e9:5b:89:e7:4a:68:
         da:37:b9:f7:2f:31:1d:3b:b5:3a:7b:a7:38:4c:c8:b3:34:c4:
         1f:ca:5f:a7:e0:f7:c1:24:6b:9e:ef:09:40:5e:6a:bc:d0:95:
         4e:c8:ed:61:99:9d:bc:2a:95:13:bf:d1:84:0b:55:88:f1:da:
         41:86:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:33 2026 by rpki-client