Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e326abf6-59e1-3869-ae00-1370782ff56b.roa
File:                     e326abf6-59e1-3869-ae00-1370782ff56b.roa (raw, json)
Hash identifier:          /X89Z9m4yrHuefjhs6Xd/5i3KfadIV/JecmLwdVk/MM=
Subject key identifier:   50:D6:FE:08:7C:6F:09:93:B2:5E:49:A1:8D:C7:AC:7D:10:8C:D6:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBE2691ABD95D6D4C690C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e326abf6-59e1-3869-ae00-1370782ff56b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.143.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:e2:69:1a:bd:95:d6:d4:c6:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d17d08da-7be5-442c-8f10-19775adc64fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:38:0c:24:b3:fd:a4:2a:ff:52:1a:d7:6d:
                    13:ea:c5:f6:02:0a:3a:f7:c1:2a:61:1b:23:ad:9c:
                    24:b1:9a:71:48:d2:93:e3:22:01:91:7b:2c:63:28:
                    c4:6c:cb:e3:e2:65:b3:7d:9d:16:bd:5b:55:47:99:
                    c3:a4:ac:4d:8b:39:9e:44:7a:cb:dc:95:2b:88:79:
                    fc:bd:2a:05:75:e7:c5:8b:ce:7a:e1:e4:68:65:d9:
                    3a:67:00:0c:87:7b:01:50:8f:db:68:b4:04:44:86:
                    5a:d1:4b:1d:dd:d6:9c:f1:f7:5d:82:8b:67:f6:56:
                    be:93:81:00:a6:01:8f:5a:0f:e9:b1:fe:dd:22:24:
                    12:97:d2:10:9f:8e:0a:c6:16:70:6c:e7:37:1e:da:
                    95:15:8f:c2:95:23:12:31:43:2a:16:da:bb:b9:71:
                    04:84:10:81:fc:b5:b7:d1:e3:6a:f0:38:bb:71:6e:
                    10:cf:99:f8:77:39:ed:3b:04:05:d0:55:35:61:04:
                    79:92:af:ae:89:6e:c2:c0:53:35:37:79:3a:13:f6:
                    57:96:c5:7f:58:1b:ae:19:cf:6d:da:84:a0:56:2c:
                    bd:c6:7a:8b:c2:21:e8:cc:93:46:34:87:48:cd:b8:
                    c3:29:38:1e:7e:e5:8d:c0:d2:f6:9f:4d:b8:8c:80:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:FE:08:7C:6F:09:93:B2:5E:49:A1:8D:C7:AC:7D:10:8C:D6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e326abf6-59e1-3869-ae00-1370782ff56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:0f:f8:ac:f2:00:24:fb:fc:ff:1d:61:86:03:eb:4d:c6:
         2d:e0:32:a0:4d:df:84:0c:e8:8a:fb:fd:16:fb:7b:61:02:13:
         58:e1:50:3d:a5:10:09:0a:63:53:9b:c3:39:89:93:c7:b9:89:
         b7:0a:1e:d1:23:59:46:35:c8:fd:85:04:e8:08:cc:a6:d2:b7:
         87:cb:14:07:60:ec:1b:bd:06:43:54:6d:20:6f:0e:be:08:34:
         01:a7:1c:55:b5:f8:cf:bd:eb:0e:71:59:1f:72:e3:f2:20:60:
         b4:07:91:6e:d0:c4:69:89:e9:36:ac:66:70:bd:02:80:da:31:
         61:98:c6:03:d1:a8:6c:d9:78:f8:1f:1f:d8:63:71:0d:a1:94:
         2b:52:b4:3e:c7:ee:3a:69:e8:a5:45:85:21:2e:eb:c5:a6:98:
         d0:7b:5f:f8:80:f0:e6:86:42:8a:fd:fb:6c:64:7d:38:9d:33:
         f6:84:14:bb:34:17:f5:98:82:1a:f7:7a:6f:ec:5f:8f:ce:20:
         1a:7f:fb:3f:85:4e:5e:02:25:fb:e4:31:0b:5a:e3:2d:d8:2b:
         84:fe:7f:9c:08:f9:18:98:08:39:55:25:49:30:74:ba:a5:23:
         60:be:51:3c:c2:ed:c6:e2:5c:45:35:61:3e:5d:72:3b:2f:ad:
         df:76:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:00 2026 by rpki-client