Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa
File:                     03dc911a-366b-358d-ac1e-c79c6e664006.roa (raw, json)
Hash identifier:          3A7nLG+GcQLNrsw2Gmcoh7BstoGKKAb6yI2LKM0luis=
Subject key identifier:   65:82:66:47:B1:49:4A:65:79:9B:3B:03:7D:24:32:A1:E4:A8:AC:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF603BBBFFBAB035EFD5200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        174.173.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:03:bb:bf:fb:ab:03:5e:fd:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ebaabafe-034d-4801-b67f-5557bf6e8fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:11:d9:7d:33:48:7e:c2:72:95:c1:20:42:
                    19:7b:ea:12:47:b0:63:72:17:d5:2c:0c:19:55:fb:
                    42:c6:42:18:b4:56:b6:60:d9:98:ca:63:14:0d:5e:
                    b0:dc:c0:0e:d1:9f:4b:0d:58:4d:17:db:a7:c4:41:
                    fe:ac:0c:e3:c4:9d:61:92:a1:e6:7f:97:4f:45:52:
                    63:f2:9e:03:25:f2:97:5b:39:a2:54:71:f9:8c:51:
                    7d:96:e3:7b:6f:34:af:a2:33:cd:25:ac:7e:49:15:
                    f9:53:18:2b:96:63:18:c4:af:dd:4a:de:66:bd:24:
                    80:f2:be:d2:6e:88:51:07:52:c6:cf:68:45:73:67:
                    17:48:62:ec:a3:27:a3:c6:76:c0:60:d9:4a:39:59:
                    ed:85:94:b9:f7:d3:98:2c:68:27:d0:f3:68:dc:74:
                    98:7b:a6:be:ba:fa:f1:c4:1b:2e:72:91:f4:30:7e:
                    39:54:64:f5:c5:9d:8d:44:b0:ca:ca:2a:37:22:04:
                    63:33:1e:f9:ac:96:a6:98:ea:41:21:09:75:1f:7b:
                    64:79:3b:0c:33:9a:78:d2:ed:ba:c4:a4:27:af:f9:
                    88:59:4e:3d:e7:8c:bb:ea:f2:3d:f3:cc:38:db:2b:
                    bc:2b:fe:55:f9:3b:49:39:dd:1e:cf:1a:a1:0d:65:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:66:47:B1:49:4A:65:79:9B:3B:03:7D:24:32:A1:E4:A8:AC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:49:df:21:44:39:8a:7c:c4:61:f8:0c:70:7f:51:4a:09:
         82:69:90:fd:32:df:65:3f:e9:3b:54:a0:96:2a:ab:df:5b:51:
         f3:74:73:f0:f5:37:c5:aa:5f:70:ab:36:13:86:17:38:cc:e4:
         c7:d1:e7:ff:0d:9a:7e:d9:69:0d:26:b8:5d:74:74:0f:0b:25:
         10:54:e5:7e:9d:e7:df:5a:c1:0f:2d:d2:6c:e9:93:17:07:92:
         ab:79:0a:3a:d0:5c:c2:97:92:e4:33:19:40:1f:80:33:8b:06:
         5a:a8:05:60:41:0e:8b:37:10:39:2c:f3:d1:96:35:d2:10:1f:
         4b:6e:97:32:cb:3c:71:4e:83:22:c0:11:00:24:35:4f:50:ec:
         70:6e:85:20:65:e2:72:95:4c:f3:e0:83:8a:6a:36:1e:82:4d:
         be:c5:5f:1d:9e:81:f6:56:23:73:de:e3:65:99:7d:59:07:95:
         f6:aa:b7:45:3b:d8:d6:32:80:40:65:85:ff:4f:c1:d0:ef:a5:
         09:bc:ba:fb:12:6f:3f:6f:62:c7:85:01:ce:9d:b8:e4:41:60:
         12:79:cd:ac:14:14:2e:f5:6e:46:82:0b:c2:80:10:18:8d:7d:
         93:33:40:51:c6:ab:9a:b1:33:ac:93:04:3f:a7:ca:55:a4:92:
         8c:dc:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:27:05 2026 by rpki-client