Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9fe2a3e-4322-38ac-a2cf-20bcc394b21c.roa
File:                     e9fe2a3e-4322-38ac-a2cf-20bcc394b21c.roa (raw, json)
Hash identifier:          ItJmjbRa11CybxbSjIBnrqJUQNJCgJ4NxPoB/3XzX6I=
Subject key identifier:   1F:32:FE:C1:50:BA:0E:9A:26:0E:B3:CF:27:F4:D0:72:BB:E4:90:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C3AA4C750C1E60A8B3400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9fe2a3e-4322-38ac-a2cf-20bcc394b21c.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.246.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:3a:a4:c7:50:c1:e6:0a:8b:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5e231819-cb8e-4771-803e-e3cff38c987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:0e:16:28:ab:ef:47:08:b6:20:22:ce:d9:
                    7e:fa:09:55:a9:d9:30:e1:4f:77:51:94:ee:89:2d:
                    f5:07:40:5d:38:54:5c:05:ff:6a:01:7b:f5:91:72:
                    6d:cf:e1:78:e8:3d:22:22:27:b1:15:8a:6e:5e:98:
                    91:f0:ac:2b:bb:6b:38:eb:e1:79:9c:99:8c:d3:0b:
                    7d:2e:17:01:09:ae:fd:b4:da:2d:2a:c5:a1:5d:d3:
                    27:11:9d:54:1d:08:1e:c4:ad:c6:20:1a:ab:a8:a4:
                    85:db:ea:d5:a5:7c:43:5b:f3:8f:b0:8f:a3:4d:73:
                    6b:50:a6:25:a2:66:60:b2:ff:f0:93:de:9a:02:b4:
                    39:9d:23:98:ac:fd:fb:a1:16:ce:b3:dc:db:83:56:
                    11:db:e4:eb:30:da:cd:8c:52:c4:ab:1f:d9:6d:67:
                    d3:02:be:52:15:50:93:aa:22:fe:9a:f6:1b:ab:2d:
                    bd:73:42:79:bb:e7:97:32:1f:74:db:ab:a3:c4:30:
                    e8:d5:37:3e:f9:d3:f6:9e:39:39:2c:d2:37:e6:90:
                    28:d3:3f:c7:68:b8:31:b2:de:e1:e0:89:05:10:71:
                    ff:69:96:38:e4:4f:0a:44:f6:ff:08:85:d0:48:92:
                    d4:f6:af:5b:25:43:42:59:97:17:65:3a:69:9d:a5:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:FE:C1:50:BA:0E:9A:26:0E:B3:CF:27:F4:D0:72:BB:E4:90:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9fe2a3e-4322-38ac-a2cf-20bcc394b21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:89:ff:b0:21:88:00:87:4e:ab:97:e1:fc:dd:b4:07:82:45:
         34:05:28:d9:66:ab:02:c3:5a:9e:1f:65:54:da:af:6b:a7:d7:
         76:84:d7:76:76:4b:a1:fc:9d:43:cd:b7:49:cf:af:e7:f3:b8:
         7c:91:7e:f5:0e:6b:9c:7a:f1:15:90:c6:2a:17:9c:7c:9d:0a:
         c0:8c:ea:93:9b:22:c8:a6:21:10:fc:bf:21:6f:19:c4:bf:cd:
         88:ef:c4:9b:ef:33:a0:91:5e:ab:03:32:76:a6:0f:68:06:b8:
         00:71:31:df:45:1e:42:c4:6d:9b:a2:6f:c8:9d:19:64:80:dd:
         b2:4d:b7:fb:a0:b6:fc:b3:7e:83:b9:bb:7b:2a:dd:eb:67:fe:
         8f:af:6a:50:40:72:0b:54:c4:a4:5b:c8:1c:ac:f9:3f:23:2e:
         70:72:6b:ea:88:b6:41:bc:d6:79:ff:c8:4d:0e:59:9e:d0:ac:
         b2:5d:40:79:30:13:3f:7f:65:6e:ea:02:e4:45:f1:fc:00:a2:
         e5:84:82:5f:3a:52:81:25:86:5c:70:4d:bd:51:a8:f7:2d:94:
         75:f5:c6:2d:46:5f:10:ed:ca:c4:03:b2:d8:04:8b:5a:17:5e:
         1b:21:44:7a:e8:9f:f8:1c:d9:bb:46:c8:48:5d:30:db:57:0c:
         a3:7f:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:35:21 2026 by rpki-client