Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e975a5ff-d0c6-3101-975b-0b3d6cdb9168.roa
File:                     e975a5ff-d0c6-3101-975b-0b3d6cdb9168.roa (raw, json)
Hash identifier:          7a/CXjJNzCHR8pyrb2vV1Qk1A4dKqRrzVoy0o2bn78k=
Subject key identifier:   8D:08:71:29:4A:42:15:C7:D5:7F:70:35:0F:C1:DE:3E:05:F4:18:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100A1D0185F2221B48F8AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e975a5ff-d0c6-3101-975b-0b3d6cdb9168.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     33659
IP address blocks:        73.226.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a1:d0:18:5f:22:21:b4:8f:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=b11d9efb-073e-48e3-9336-53b7fe1153be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:95:99:fd:8e:71:22:2b:f9:22:16:68:66:
                    f9:75:5a:6a:f5:33:3a:ed:f9:e1:12:74:d1:07:7c:
                    c8:16:4a:91:3b:af:18:54:12:30:3e:15:ca:a4:0e:
                    34:95:bc:aa:f0:d1:83:d5:fa:17:05:1d:78:4f:20:
                    55:45:ac:3c:f9:f4:9f:cc:84:07:e5:e0:a3:50:fc:
                    87:df:f9:0c:0f:9f:7b:79:0b:e2:b4:9d:47:e0:c8:
                    18:16:5c:96:0c:75:de:65:81:e3:ca:8d:4c:d2:2c:
                    99:11:41:9b:4f:bf:67:65:48:8d:88:7d:32:f4:62:
                    f1:73:5b:48:ac:e4:24:c8:37:7e:a3:cb:4d:e7:e8:
                    48:9a:f5:63:45:78:7d:d3:97:8b:50:9b:c3:2c:52:
                    c1:96:06:42:5f:1b:51:a0:42:7e:43:e1:cb:6c:5e:
                    43:42:4e:e5:e2:6d:09:0c:0c:9c:da:82:98:99:eb:
                    d1:79:d4:93:82:24:43:91:db:8a:46:41:85:ad:30:
                    19:63:18:84:72:86:b4:86:b2:4e:02:00:49:ac:b9:
                    46:14:fb:4f:1c:a1:d9:9a:2d:c7:ff:33:24:17:08:
                    55:ec:31:18:d5:c5:ef:2c:6f:7e:0e:f5:80:9c:ae:
                    9f:80:73:fc:76:4e:bf:d3:0b:20:93:69:fe:82:ef:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:71:29:4A:42:15:C7:D5:7F:70:35:0F:C1:DE:3E:05:F4:18:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e975a5ff-d0c6-3101-975b-0b3d6cdb9168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:f6:f8:d5:7f:48:1d:c4:ad:7b:7c:02:7f:02:5f:57:6a:
         71:74:88:9a:f1:c8:6f:05:3d:60:d5:22:9b:9c:13:e4:2e:5c:
         0f:c4:2c:07:8f:e0:df:ca:f0:5c:de:61:3f:89:ee:94:a8:ba:
         d2:0b:3e:2c:53:f6:87:50:bc:5a:53:db:28:26:1d:18:c2:53:
         65:09:2f:72:10:d2:b9:28:38:db:78:a8:4d:7b:89:bf:f2:8f:
         e1:97:cc:11:cc:c1:b1:57:83:5f:d4:aa:b7:a8:87:6e:f8:a9:
         66:fb:fc:e3:2d:b4:95:81:54:e5:a1:3c:c1:9c:8b:1e:39:11:
         4d:73:38:5b:e4:e4:77:28:34:c8:69:2c:c4:e5:86:ae:a6:32:
         7e:4a:8b:2e:63:f6:05:07:f0:ac:aa:ed:6b:bd:c4:11:0f:3d:
         83:a2:25:5e:f9:a1:60:df:c2:82:ed:20:87:13:7c:73:d2:d3:
         b3:cc:b1:27:22:b3:6f:ce:52:e4:0d:74:62:b0:8a:0d:0a:10:
         03:d4:eb:6a:ee:f1:1a:ff:c7:24:89:92:de:39:b9:79:25:0d:
         e5:16:05:8f:16:f4:bf:4e:18:ec:12:84:1f:f5:32:ea:6f:c4:
         a9:10:f5:9f:68:f3:98:58:86:c7:44:13:25:4c:ca:a2:d8:48:
         a7:0d:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:25:43 2026 by rpki-client