Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e571ad03-70ab-3c6c-b776-e6c375312779.roa
File:                     e571ad03-70ab-3c6c-b776-e6c375312779.roa (raw, json)
Hash identifier:          nyFuVQNkVqhq70ZLfEZy2iAo2mG4WBZn1ZussbM/yCM=
Subject key identifier:   E2:F5:E5:81:80:0E:F6:DA:C8:F7:A4:B8:58:B9:23:1F:D7:91:80:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAA6852F2FAAEBBB39CB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e571ad03-70ab-3c6c-b776-e6c375312779.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.100.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:a6:85:2f:2f:aa:eb:bb:39:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=a0015516-b588-4fa3-951c-351e5b88a7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:dc:ea:c8:11:90:5f:3c:51:fc:52:2c:35:
                    79:1f:83:f4:58:59:2e:9d:be:9e:71:6e:e1:fe:57:
                    96:ae:7b:d7:f5:dc:de:70:b7:eb:1b:2e:d8:ed:4f:
                    ba:24:ae:06:19:40:3e:17:a3:cd:ae:d8:b9:99:78:
                    3e:66:cc:28:3a:bd:07:37:e2:d0:e8:69:2b:c9:4f:
                    df:7c:fb:d8:63:bb:96:8b:90:7d:76:c4:de:88:fd:
                    5f:32:97:38:07:c6:c3:77:88:f5:de:7b:95:fc:4e:
                    37:f9:eb:a0:20:67:62:e8:91:83:0c:f1:4d:78:75:
                    c2:28:cc:51:f1:60:fc:b5:6b:eb:dc:1b:16:1d:bf:
                    db:aa:fc:51:60:f1:a1:9f:b7:5f:40:1d:1b:da:d9:
                    6a:92:c5:6d:a6:90:cf:3e:1d:bc:ad:81:73:c9:15:
                    b4:b4:fc:8e:26:d0:3a:1d:0a:a8:50:e3:19:1e:7c:
                    41:0a:70:47:f5:f5:6e:94:fb:0e:c8:63:82:55:bd:
                    76:e9:f5:1d:3f:7b:df:54:f0:3a:6e:69:a3:66:d5:
                    52:42:be:19:b8:4e:bf:42:6f:6f:41:d7:fe:23:dd:
                    5d:10:68:b2:7c:8e:b3:0e:6c:27:f3:e8:bc:8f:e4:
                    cc:2b:aa:e6:e7:d4:13:fd:ef:e4:b3:5b:aa:b0:90:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:E5:81:80:0E:F6:DA:C8:F7:A4:B8:58:B9:23:1F:D7:91:80:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e571ad03-70ab-3c6c-b776-e6c375312779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:41:73:8c:ff:e9:08:ed:b7:ad:3e:70:44:60:aa:61:1f:
         f6:b8:a3:51:a9:5c:05:60:14:b8:6e:8c:a2:19:61:a4:d9:d5:
         e3:c6:fc:1f:2c:7c:90:07:9b:55:7f:39:d6:50:5c:9d:78:6b:
         ac:3d:0f:bd:5e:ae:33:f3:94:2f:66:21:9f:e3:a8:d4:ae:16:
         bb:18:b6:10:5f:76:a2:f7:68:d2:34:03:2c:c1:85:40:86:31:
         cc:d3:df:10:68:13:84:22:ed:2d:a3:63:ce:73:02:60:d9:df:
         95:48:d9:d9:bb:4e:5c:ed:38:c0:d3:8c:cc:80:b1:10:07:34:
         27:4a:fe:4b:b4:33:ce:46:fa:bf:dd:e5:dd:57:7c:df:9e:4d:
         98:f0:d8:ae:8a:b8:8c:ab:68:c1:c8:7a:f3:31:6a:02:6e:8c:
         84:8e:8e:0c:54:97:4c:b4:97:f3:ea:02:5d:6d:2e:ab:98:2a:
         78:79:e5:1b:c7:89:34:3d:9c:60:b7:b1:b3:af:84:f7:fc:84:
         68:d5:20:80:d9:3e:d7:91:c7:9a:c8:37:6b:14:2d:4d:03:4d:
         f4:19:92:e3:56:b2:52:b7:3d:5c:56:02:2f:94:b7:89:97:d6:
         28:e7:b0:aa:1d:01:eb:c2:b7:a7:3e:88:01:1a:a8:91:5f:ba:
         d4:7c:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:56 2026 by rpki-client