Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa11cf29-ec1b-338a-bf54-ecaf544dbdc7.roa
File:                     fa11cf29-ec1b-338a-bf54-ecaf544dbdc7.roa (raw, json)
Hash identifier:          SITmlSFrdriYDMGWgzUWzuCKB3W8hVOxR/dpsbE7KbI=
Subject key identifier:   6A:85:23:43:55:97:54:F0:23:CB:9E:95:26:BD:FB:EA:A7:77:F1:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE592A2A05AD1BCEE8EBB100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa11cf29-ec1b-338a-bf54-ecaf544dbdc7.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        73.20.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:2a:2a:05:ad:1b:ce:e8:eb:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2034cf2b-ff4f-4cd8-ae63-a8074e33587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fa:d7:42:0a:ec:af:3e:5e:d2:d1:ce:d4:de:
                    d5:bb:e7:2c:ac:2e:4f:c3:2e:48:da:62:8b:51:d1:
                    e4:44:32:e9:ce:4b:dc:4c:02:c4:13:94:a7:cc:42:
                    91:94:1e:0f:48:5f:bb:9a:94:3f:93:15:6f:e0:42:
                    94:ae:ec:2e:72:07:b1:35:c7:6c:a0:6b:0d:67:ee:
                    c9:db:c7:37:e5:ae:b2:d2:13:38:8a:a9:e3:ce:01:
                    0f:63:b7:3e:90:23:4a:3d:16:81:99:4a:a5:9e:9c:
                    9d:5d:77:82:25:82:15:cc:27:b3:36:17:31:2c:ad:
                    65:cb:00:e0:64:aa:24:af:94:2f:3e:be:b2:78:7a:
                    7a:f7:cd:5c:73:b6:fd:4a:25:d1:21:9a:50:5c:8f:
                    0e:fa:a1:8b:75:6f:ea:dd:11:38:20:77:a3:62:15:
                    87:51:ed:0c:80:31:d3:39:11:7f:b2:4a:d0:8d:ef:
                    5d:59:07:dd:07:84:af:d3:ed:0e:55:f0:7e:2a:40:
                    22:88:1c:4b:5c:f4:12:c6:b3:07:88:db:64:17:72:
                    75:4b:b6:8e:86:ec:1f:84:1d:c8:62:5d:e0:58:bd:
                    f7:65:db:68:b6:cb:94:bd:86:d6:0f:8d:a3:47:75:
                    ff:2f:78:59:54:aa:36:ba:54:9e:19:a3:2c:8a:13:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:23:43:55:97:54:F0:23:CB:9E:95:26:BD:FB:EA:A7:77:F1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa11cf29-ec1b-338a-bf54-ecaf544dbdc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.20.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:ea:29:81:f4:b9:7d:db:61:d8:89:f7:67:60:01:89:19:
         ff:e7:6e:e1:8a:b7:b1:69:b6:43:70:de:b4:11:71:be:bf:46:
         63:54:9b:58:e3:98:25:b9:4b:29:34:44:37:9f:51:df:0c:a8:
         77:a3:69:7a:b8:62:d3:f6:11:10:03:8a:76:a0:ca:b7:a5:b3:
         5c:0f:c7:f2:60:17:23:63:ae:9f:89:81:f2:13:f1:aa:6d:d9:
         7c:42:fa:82:3b:6f:4d:f8:02:dc:a5:02:67:fb:3b:fb:9f:87:
         0c:c8:d5:14:1f:42:77:88:83:a4:18:40:9e:fd:93:6c:f5:18:
         67:7c:df:ee:b0:27:95:1b:9e:89:bb:bd:15:f3:29:b3:11:f0:
         71:4b:eb:59:5c:87:10:54:6e:be:b1:3d:d4:64:46:73:35:98:
         b3:2a:6d:49:85:2a:b7:f4:ae:1e:0d:39:b7:76:dd:aa:a6:0c:
         97:f0:8b:9c:aa:27:92:b4:ca:b9:94:da:a8:06:55:0d:b6:96:
         b5:cc:86:d1:0e:00:33:32:b9:a8:0e:f8:ce:25:c6:eb:0d:72:
         7c:63:e4:d3:d2:46:0b:d5:df:4f:fb:e6:5d:83:fc:9c:e0:4b:
         73:f5:ae:74:5a:30:cd:b4:b3:35:26:fe:84:92:0f:1c:f9:28:
         bb:23:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:13 2026 by rpki-client