Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0022332c-ff39-327d-87ec-583ee9f2dc9b.roa
File:                     0022332c-ff39-327d-87ec-583ee9f2dc9b.roa (raw, json)
Hash identifier:          4tq6T45BQMM1G3rS7bsDuwBZDmoVIxbs1v0U9hvqfxY=
Subject key identifier:   96:F9:1C:06:30:D9:5D:4B:A1:CC:93:76:E5:C9:15:24:40:D9:28:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6B43AC795BC1C2C39D700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0022332c-ff39-327d-87ec-583ee9f2dc9b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.15.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:b4:3a:c7:95:bc:1c:2c:39:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=190712c1-4fd7-499a-b090-dcde9d3467f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:97:24:d6:c5:78:4d:86:92:c3:82:72:7f:
                    79:97:10:12:57:71:a9:7a:4f:73:ce:47:40:05:c3:
                    62:51:be:45:0d:37:08:a3:68:e0:08:c3:45:14:e5:
                    7a:dd:e2:5c:1c:99:87:d4:2a:29:6b:1e:e8:0e:18:
                    14:66:fc:ab:ce:91:26:00:5b:95:62:ea:23:4b:2e:
                    d8:f7:29:9f:4a:1d:5b:21:bf:c1:58:4f:1f:71:f5:
                    ce:89:87:7b:c0:fa:d5:03:67:9b:3b:5d:33:be:ea:
                    8a:e8:3c:ca:c7:d1:d3:04:56:3b:73:93:d7:52:30:
                    6d:a2:06:35:99:56:ca:31:0f:2b:fd:8d:d9:ad:e8:
                    71:78:2d:5e:88:f2:24:96:24:67:23:f6:b2:8c:7e:
                    dc:be:2d:31:47:12:2f:45:1c:84:60:39:20:e9:02:
                    eb:3d:d5:2c:1b:e7:6a:cb:7b:42:65:3b:21:bb:ca:
                    89:a6:49:b5:b2:88:2c:16:f0:b7:a0:c3:cc:d4:ce:
                    fa:3c:31:5a:a9:dc:37:35:d8:c5:a9:b4:48:25:7c:
                    13:82:21:aa:fa:c5:7f:5c:38:e3:80:93:56:6c:7d:
                    fa:49:22:ba:a6:41:50:e5:4d:35:9e:8f:b5:bb:70:
                    96:f3:40:10:fb:2f:7b:aa:14:1c:80:9e:49:b5:ed:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:1C:06:30:D9:5D:4B:A1:CC:93:76:E5:C9:15:24:40:D9:28:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0022332c-ff39-327d-87ec-583ee9f2dc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:50:97:05:68:ed:ad:85:f0:c8:3f:23:27:f9:e6:ac:ea:e8:
         70:da:a8:ba:69:e9:9f:c0:39:0c:0c:2a:d9:bd:b8:05:f1:1e:
         5e:03:c6:1f:d6:24:5c:b0:b5:35:14:f3:f5:11:aa:90:dc:63:
         07:e8:5d:7f:a5:5f:fd:2f:c5:bf:98:5e:0a:23:ca:22:3f:e1:
         6f:5c:ba:87:05:a2:19:1c:f9:4b:e7:aa:b4:5d:ef:ea:4a:d2:
         62:c8:94:5d:56:f4:a8:b5:81:77:29:ed:c2:9c:74:cc:da:2c:
         14:6d:2a:57:88:1e:44:62:b7:70:3e:48:84:ff:af:f8:fd:da:
         cc:cb:4b:21:48:b1:be:05:20:f3:76:db:a8:f8:d3:3d:46:fa:
         3e:cd:93:5b:b5:f4:9f:d6:8e:21:c7:32:8b:be:f9:86:da:bc:
         9e:2a:29:0e:5c:a7:70:22:8e:e0:75:99:56:cb:a5:ac:8d:dd:
         ee:45:90:6e:8f:e3:51:6a:09:e9:1d:7c:7e:46:a5:98:a3:b0:
         23:fb:0d:e9:83:23:51:b4:4a:b6:c8:63:69:49:ec:e1:fc:e2:
         4d:c9:7a:2c:b4:98:10:d0:91:4f:5b:8e:60:7f:68:68:b7:6b:
         67:9c:c0:0a:10:c0:43:1f:8c:f4:29:4f:a7:f4:45:f6:da:8f:
         51:91:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:59:46 2026 by rpki-client