Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f246035b-41fb-354a-b84a-73e17d571677.roa
File:                     f246035b-41fb-354a-b84a-73e17d571677.roa (raw, json)
Hash identifier:          SJ2Fu1qIkgHeBSgSrJ43Z28oaUAS+Xpj+/T1lJ/ppAk=
Subject key identifier:   B5:33:76:01:0C:68:E8:D8:F7:0D:EC:E7:11:90:6E:FB:3C:A7:37:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57938202A103B8AA1E5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f246035b-41fb-354a-b84a-73e17d571677.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.197.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:93:82:02:a1:03:b8:aa:1e:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=328069d7-0f13-4793-bc07-38d31eb4e6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:be:84:20:53:3b:20:0b:41:5d:7d:23:dc:
                    d1:a5:fe:a8:5f:dc:07:9f:fe:65:56:f4:2c:5c:55:
                    f5:85:58:7e:fd:cd:97:29:1c:ab:61:9b:3d:63:35:
                    fa:34:85:89:c7:68:0e:95:be:e4:71:d9:79:f6:02:
                    4b:46:f4:61:36:fc:8a:db:41:14:7a:39:ad:24:87:
                    6f:80:5a:c4:0e:dc:cb:7d:0b:74:c3:44:39:f7:a1:
                    a3:bf:e5:f8:31:7a:b6:87:7b:57:30:26:ee:11:0e:
                    3c:ca:1c:0b:8f:87:2d:8c:23:bd:2a:a0:23:26:8c:
                    a1:f7:ed:fc:d5:bd:61:7a:e0:02:48:18:79:49:a2:
                    c3:b8:46:f0:fa:0c:5a:33:06:bf:ae:f5:86:22:68:
                    4a:31:e8:fb:a0:02:2e:43:f2:46:99:42:1b:8b:04:
                    44:4d:af:04:41:d7:63:d7:e0:c1:84:d4:77:12:fa:
                    c4:c6:02:47:90:20:dd:51:02:e6:68:ab:a3:d6:e1:
                    e9:49:56:6e:a5:55:5c:9f:56:37:c2:d9:00:88:da:
                    b9:1b:96:e1:0e:64:0c:aa:9b:a8:26:96:df:6e:0c:
                    df:2c:a3:ec:60:de:e3:b6:7a:5c:38:c8:5f:c5:bb:
                    82:91:c7:98:25:4a:7c:35:0e:a1:54:f2:f2:9b:be:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:76:01:0C:68:E8:D8:F7:0D:EC:E7:11:90:6E:FB:3C:A7:37:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f246035b-41fb-354a-b84a-73e17d571677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.197.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:7c:95:bc:68:08:2d:6e:4d:3d:8b:75:3b:f2:86:46:d1:
         f1:73:de:08:dd:46:27:00:20:18:dd:8e:a3:08:fe:1c:1c:a7:
         f0:f1:67:bc:8e:8b:c7:16:20:c2:3a:fc:1c:18:71:e3:f8:1a:
         4c:50:48:b7:30:9a:4c:7d:80:30:9c:0a:b5:94:e0:47:fb:38:
         2e:d1:3d:8e:2a:78:1f:46:04:c5:1f:e2:d1:a8:c0:07:6c:f4:
         8e:49:d0:be:fa:9b:8c:6f:9a:3f:88:49:9b:cb:40:14:6e:0f:
         80:ef:4f:10:aa:d7:49:fb:13:f6:64:bb:89:64:3d:79:2d:fd:
         d4:30:c5:5b:7d:e3:c6:4d:2d:44:e9:03:f8:1a:f3:f6:ff:e3:
         9b:37:29:7d:3a:d8:41:41:43:e5:3d:7f:ee:a5:76:34:ea:41:
         b6:d3:7a:99:7f:5b:b9:22:cb:81:a0:cf:f5:dc:0e:79:be:07:
         fd:78:f4:0a:7a:3e:60:5c:6a:99:35:e2:f7:b9:f2:07:4e:b1:
         70:7b:d4:66:46:aa:d2:f8:75:ef:0a:ea:9c:4c:51:05:b0:89:
         cd:ff:60:88:52:52:f1:11:d7:01:75:a8:3d:6e:8f:8e:85:fa:
         4e:93:8c:be:59:5e:3e:83:d6:5d:13:d9:ef:b9:70:47:40:97:
         c2:10:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:33 2026 by rpki-client