Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f90f873d-1f9b-3733-adf6-2d4780dd2b7b.roa
File:                     f90f873d-1f9b-3733-adf6-2d4780dd2b7b.roa (raw, json)
Hash identifier:          zgHwqUWs8j+dj+29OSmIEe/2QgGL+W2NexFIV8RcPEI=
Subject key identifier:   70:38:DD:E8:48:1B:37:12:57:8C:7E:CF:16:5C:40:E2:7E:51:E2:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBD9F961E09A8F0048B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f90f873d-1f9b-3733-adf6-2d4780dd2b7b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.119.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:d9:f9:61:e0:9a:8f:00:48:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=c98dfd9f-c495-4407-8684-7f667603f4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:07:0f:9e:f0:fb:a9:09:25:f8:0b:22:ae:
                    b0:3c:f1:60:0b:f7:a8:b9:6e:84:3a:cd:48:0d:43:
                    4a:90:b7:ee:9b:1b:63:a7:44:e9:8d:d0:f2:18:cc:
                    33:3b:02:9c:59:51:51:68:a6:e9:9a:f7:71:3a:bf:
                    c1:0f:75:d1:ce:75:19:ac:cd:cb:01:95:e4:8a:a0:
                    bf:23:24:f9:b4:b0:d7:cb:6e:ed:cd:2f:53:62:12:
                    c8:24:b9:c9:86:c7:85:a8:fe:c3:92:69:aa:40:11:
                    df:58:a1:1d:41:1d:3e:8c:a8:53:b1:b7:45:32:4d:
                    44:57:ea:59:11:11:c8:e9:0b:bf:48:38:50:ef:76:
                    72:f3:17:84:1a:26:91:a1:84:24:00:7c:17:dd:4f:
                    b8:d1:55:35:03:4f:9c:3c:22:49:42:85:73:6b:67:
                    57:15:99:3c:b3:8c:2e:b9:b8:7c:82:b3:69:52:24:
                    ba:62:ac:83:42:05:f3:29:ff:dd:58:1b:0d:c6:74:
                    17:15:08:eb:63:e5:10:34:80:18:3a:90:77:5f:f6:
                    13:a5:6f:b2:bf:16:75:fd:ef:f7:93:3e:e2:6a:7b:
                    07:92:e4:d3:0c:ff:54:b1:6e:ce:c7:ba:c2:89:a3:
                    0d:79:1c:df:40:a3:53:2a:ac:6c:94:98:26:5f:64:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:DD:E8:48:1B:37:12:57:8C:7E:CF:16:5C:40:E2:7E:51:E2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f90f873d-1f9b-3733-adf6-2d4780dd2b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.119.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:39:d1:c1:c9:0a:ae:ce:5e:8f:7e:e6:ff:dc:fc:ae:ef:
         00:3f:e0:b0:43:5d:90:73:a9:f0:29:44:81:0e:eb:8d:85:76:
         a7:f2:69:f4:cb:ab:44:84:90:f8:c9:26:d8:37:9d:11:6e:44:
         7a:3e:cf:5e:69:80:c1:3b:05:c7:b5:74:59:34:e4:bd:06:6b:
         00:e8:e4:ea:40:d8:cd:75:07:5b:f2:23:86:65:f3:95:df:69:
         3c:68:91:25:4a:0a:4e:85:48:95:2e:21:17:13:3b:9a:f1:08:
         7e:a5:f5:7f:d7:90:56:3d:7a:83:38:f8:7c:e5:ba:df:35:a1:
         21:f7:f6:66:3a:06:be:6d:7d:c9:6c:0c:b7:d6:73:60:59:50:
         3f:8b:f9:f1:a6:99:1a:d2:a5:43:1c:3f:a9:c4:20:d3:93:a3:
         4b:12:24:b2:f5:b6:f9:9f:45:a0:f5:08:ca:2a:8c:f6:13:9a:
         9c:8b:66:d6:e9:a9:e7:26:b5:49:74:05:29:df:ff:fe:94:6d:
         c8:3c:a2:d4:0e:5b:04:13:a2:80:84:34:54:ca:d6:3b:0c:ca:
         33:f3:16:f8:5a:54:94:97:28:1e:a4:2e:ce:db:be:c8:3a:1d:
         62:4d:32:fd:90:29:14:b4:3c:23:bd:cd:1b:64:56:8d:a4:e4:
         47:1e:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:49 2026 by rpki-client